Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OdbjIQbQLvz864ZayEkJEuRcNCg.roa
File: OdbjIQbQLvz864ZayEkJEuRcNCg.roa (raw, json)
Hash identifier: bsQ36QntJvyEvG8bMnXUrFbtW9RblOxerMKd/VHEViA=
Subject key identifier: 39:D6:E3:21:06:D0:2E:FC:FC:EB:86:5A:C8:49:09:12:E4:5C:34:28
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A06C1F71AD689ADDC2290379205F513655
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OdbjIQbQLvz864ZayEkJEuRcNCg.roa
Signing time: Fri 04 Sep 2026 11:13:15 +0000
ROA not before: Fri 04 Sep 2026 11:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 5.180.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:1f:71:ad:68:9a:dd:c2:29:03:79:20:5f:51:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 11:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39d6e32106d02efcfceb865ac8490912e45c3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:c4:2c:29:8c:9e:3c:de:87:39:ae:e4:e6:
51:57:72:fc:7d:ae:51:a8:1e:19:f5:37:87:2f:d8:
5b:f5:88:76:de:28:d5:11:8a:10:13:f6:7a:ab:2c:
37:32:88:60:77:a0:77:ab:e7:11:c2:70:57:08:05:
5f:ce:9f:45:d3:69:13:14:b2:4c:8e:47:17:51:ca:
3e:db:66:89:9e:5a:8c:dc:ff:3b:96:3c:15:4e:ae:
47:c3:be:4f:e8:c8:03:e4:6c:62:83:c3:60:9a:08:
9d:af:23:49:2a:60:de:21:2a:31:9c:08:6d:50:f8:
9a:55:f1:1d:05:d1:e2:a0:4a:65:55:5c:34:86:5d:
7f:af:02:d8:2d:c8:7a:b7:2f:36:c0:5e:04:d9:50:
6f:4e:ad:36:6f:4d:15:61:ac:32:6d:e4:bf:d8:11:
26:d4:73:05:2f:f3:2c:9d:0b:b1:a0:5e:29:71:64:
14:14:98:87:e6:7a:c8:6f:fd:11:38:97:a8:66:96:
45:4b:79:a9:60:f9:7f:e5:20:4a:7c:c5:77:c9:05:
13:97:e7:55:7f:0d:96:ac:85:1b:14:e0:ff:6c:72:
6f:88:ab:8f:ec:f9:4b:0c:36:a0:15:24:88:bc:5f:
1b:50:90:7c:4c:0a:6f:ee:35:fd:d6:6a:0f:62:e8:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:E3:21:06:D0:2E:FC:FC:EB:86:5A:C8:49:09:12:E4:5C:34:28
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OdbjIQbQLvz864ZayEkJEuRcNCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5b:f0:5a:e3:66:cb:76:3b:dc:5b:e8:ec:b5:7f:b2:da:94:
91:ff:ce:2f:0a:45:8b:1c:b9:ad:ee:8f:23:34:06:63:7a:61:
f7:92:0d:2e:5e:75:79:44:b3:bd:6f:cb:87:59:6c:de:7c:24:
51:4e:f4:90:0d:d9:2e:71:d5:7d:56:18:43:32:db:21:b4:71:
1e:60:c4:68:47:d5:13:e6:16:87:6a:2d:24:3c:f0:82:14:8b:
4f:87:5d:f5:cd:0e:92:69:3f:12:12:3d:aa:14:10:83:96:80:
af:38:30:57:71:92:8a:26:d7:75:c1:56:66:e2:42:dd:b1:96:
a8:23:a3:3c:b0:6f:f1:10:f5:3c:5c:61:ba:6e:a8:3a:96:73:
26:d6:15:b6:c2:1d:e3:a5:40:51:f8:7b:37:78:df:0b:43:12:
be:70:13:37:9c:c1:58:a2:c0:cf:16:2d:ad:5c:0b:3d:55:a2:
c4:c8:c4:ed:be:7a:f5:21:bd:5e:2c:d2:de:41:fb:bc:64:dc:
eb:bb:82:52:62:81:34:de:2a:17:42:d1:c6:80:93:70:10:29:
1c:b7:2a:4a:e3:5b:ae:e2:95:a9:86:09:90:2e:e7:6f:4a:24:
ef:34:77:50:29:4b:68:10:0c:ec:e3:61:e8:4e:1c:86:a5:5a:
f9:24:7e:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBsH3GtaJrdwikDeSBfUTZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwOTA0MTExMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWQ2ZTMyMTA2ZDAyZWZjZmNlYjg2NWFjODQ5MDkxMmU0NWMzNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKnELCmMnjzehzmu5OZRV3L8fa5R
qB4Z9TeHL9hb9Yh23ijVEYoQE/Z6qyw3Mohgd6B3q+cRwnBXCAVfzp9F02kTFLJM
jkcXUco+22aJnlqM3P87ljwVTq5Hw75P6MgD5Gxig8NgmgidryNJKmDeISoxnAht
UPiaVfEdBdHioEplVVw0hl1/rwLYLch6ty82wF4E2VBvTq02b00VYawybeS/2BEm
1HMFL/MsnQuxoF4pcWQUFJiH5nrIb/0ROJeoZpZFS3mpYPl/5SBKfMV3yQUTl+dV
fw2WrIUbFOD/bHJviKuP7PlLDDagFSSIvF8bUJB8TApv7jX91moPYuiGAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDnW4yEG0C78/OuGWshJCRLkXDQoMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvT2RiaklRYlFMdno4NjRaYXlFa0pFdVJjTkNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbToMA0G
CSqGSIb3DQEBCwUAA4IBAQCPW/Ba42bLdjvcW+jstX+y2pSR/84vCkWLHLmt7o8j
NAZjemH3kg0uXnV5RLO9b8uHWWzefCRRTvSQDdkucdV9VhhDMtshtHEeYMRoR9UT
5haHai0kPPCCFItPh131zQ6SaT8SEj2qFBCDloCvODBXcZKKJtd1wVZm4kLdsZao
I6M8sG/xEPU8XGG6bqg6lnMm1hW2wh3jpUBR+Hs3eN8LQxK+cBM3nMFYosDPFi2t
XAs9VaLEyMTtvnr1Ib1eLNLeQfu8ZNzru4JSYoE03ioXQtHGgJNwECkctypK41uu
4pWphgmQLudvSiTvNHdQKUtoEAzs42HoThyGpVr5JH46
-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:27 2026 by rpki-client