Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rSSUNRSD67BSJkjEzZ1XKd8_MCs.roa
File: rSSUNRSD67BSJkjEzZ1XKd8_MCs.roa (raw, json)
Hash identifier: cG6rr51nSejH+xM0LmBnOMx6BPM/+L3V35TbZWnYW7Y=
Subject key identifier: AD:24:94:35:14:83:EB:B0:52:26:48:C4:CD:9D:57:29:DF:3F:30:2B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019EDF094BF9609BDE6550EAB1813943F4D6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rSSUNRSD67BSJkjEzZ1XKd8_MCs.roa
Signing time: Fri 19 Jun 2026 08:39:48 +0000
ROA not before: Fri 19 Jun 2026 08:39:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 5.180.232.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:09:4b:f9:60:9b:de:65:50:ea:b1:81:39:43:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 19 08:39:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad2494351483ebb0522648c4cd9d5729df3f302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:c3:05:41:7a:14:a1:69:66:0c:cd:3a:8e:
8d:30:93:88:76:5f:55:d6:85:96:fb:12:21:64:b2:
db:cb:2c:13:95:d0:e2:d5:62:a3:d1:f7:1b:b4:7a:
06:6c:f1:2b:df:9e:45:83:8f:6d:7c:34:8a:e7:ba:
17:18:bb:d8:e0:c5:43:f6:b1:67:ff:f8:c0:a7:d4:
bc:2d:04:e7:ec:8d:f7:1c:25:a7:47:43:4c:1c:8d:
0c:3f:79:5f:30:f6:49:76:fa:79:ac:89:8b:57:93:
b7:bb:3f:c9:7e:96:27:20:7f:fc:bf:06:3f:f2:35:
cd:73:3d:f3:bb:29:f6:6b:70:70:64:94:c8:3c:37:
13:2a:5d:ad:e3:0f:66:5e:16:4b:f2:26:d1:f9:2a:
ec:2e:10:67:f1:f5:bd:94:00:27:1e:b0:05:fe:fb:
a9:02:78:d4:bf:f3:e9:23:4b:7b:5a:d0:18:53:04:
c1:ce:4d:7e:25:d5:50:06:4c:73:bc:61:6a:3e:e2:
d1:55:82:52:d6:83:cd:6d:22:df:92:d8:be:b6:6d:
22:19:6c:70:c4:67:01:a0:a1:b8:57:4d:93:cc:8a:
a5:b1:cf:42:28:73:c2:bd:39:b7:ce:ab:31:cf:32:
89:3a:16:a9:d5:28:98:bb:86:1e:bf:21:9d:ff:e5:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:94:35:14:83:EB:B0:52:26:48:C4:CD:9D:57:29:DF:3F:30:2B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rSSUNRSD67BSJkjEzZ1XKd8_MCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
45.9.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4e:90:f0:1c:f5:7b:c8:96:33:20:26:be:4d:9b:eb:99:09:
b9:c3:f1:06:fc:26:cf:85:e3:e9:69:9c:d5:ca:fd:21:80:36:
f5:bf:a0:23:df:59:d5:90:d5:3f:17:21:62:78:94:3c:e8:ed:
1d:38:df:7a:1c:09:74:ea:ce:5c:c2:ff:2c:cd:7b:80:d6:a2:
25:37:a6:ab:7b:18:46:21:bc:57:83:72:ec:bc:f6:9e:dd:e5:
e3:1e:ee:f5:0b:d7:34:21:5f:01:65:c2:f5:d0:70:91:ab:00:
d5:8a:e6:42:0f:10:12:05:eb:55:0b:c2:05:68:e4:14:16:00:
64:93:2b:e9:a8:67:8f:86:96:12:77:88:d4:50:8a:30:ce:a4:
5a:f9:eb:23:8e:d0:78:6e:a8:2e:f5:a2:09:fa:0e:bb:b5:cd:
77:00:ed:9a:8e:f8:8e:2a:51:8e:80:b2:91:89:2f:f5:1d:7f:
1d:08:8d:c4:95:92:c2:cd:db:00:5d:17:09:a8:a0:5a:9d:51:
3f:bb:07:50:09:42:82:62:09:44:d8:8f:87:30:a6:86:0e:34:
25:1d:a4:2a:d9:de:f8:9e:c0:85:69:13:9c:54:c6:cb:86:87:
6b:68:dd:9e:05:c8:36:36:a2:3b:04:77:87:32:12:da:1d:59:
31:23:7a:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7fCUv5YJveZVDqsYE5Q/TWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwNjE5MDgzOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDI0OTQzNTE0ODNlYmIwNTIyNjQ4YzRjZDlkNTcyOWRmM2YzMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzTDBUF6FKFpZgzNOo6NMJOIdl9V
1oWW+xIhZLLbyywTldDi1WKj0fcbtHoGbPEr355Fg49tfDSK57oXGLvY4MVD9rFn
//jAp9S8LQTn7I33HCWnR0NMHI0MP3lfMPZJdvp5rImLV5O3uz/JfpYnIH/8vwY/
8jXNcz3zuyn2a3BwZJTIPDcTKl2t4w9mXhZL8ibR+SrsLhBn8fW9lAAnHrAF/vup
AnjUv/PpI0t7WtAYUwTBzk1+JdVQBkxzvGFqPuLRVYJS1oPNbSLfkti+tm0iGWxw
xGcBoKG4V02TzIqlsc9CKHPCvTm3zqsxzzKJOhap1SiYu4YevyGd/+UkywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK0klDUUg+uwUiZIxM2dVynfPzArMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvclNTVU5SU0Q2N0JTSmtqRXpaMVhLZDhfTUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbToAwQA
LQkAMA0GCSqGSIb3DQEBCwUAA4IBAQCjTpDwHPV7yJYzICa+TZvrmQm5w/EG/CbP
hePpaZzVyv0hgDb1v6Aj31nVkNU/FyFieJQ86O0dON96HAl06s5cwv8szXuA1qIl
N6arexhGIbxXg3LsvPae3eXjHu71C9c0IV8BZcL10HCRqwDViuZCDxASBetVC8IF
aOQUFgBkkyvpqGePhpYSd4jUUIowzqRa+esjjtB4bqgu9aIJ+g67tc13AO2ajviO
KlGOgLKRiS/1HX8dCI3ElZLCzdsAXRcJqKBanVE/uwdQCUKCYglE2I+HMKaGDjQl
HaQq2d74nsCFaROcVMbLhodraN2eBcg2NqI7BHeHMhLaHVkxI3qV
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client