Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/4YFhmmqBT0tYBI2LvfZSiznQ4BE.roa
File: 4YFhmmqBT0tYBI2LvfZSiznQ4BE.roa (raw, json)
Hash identifier: Qbli+PKljbc+nds4wxe1iXQHbsFS0ZEe2WWrXLXJ4Qk=
Subject key identifier: E1:81:61:9A:6A:81:4F:4B:58:04:8D:8B:BD:F6:52:8B:39:D0:E0:11
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 019DBBB8DA1FAC1548A30B65565024A1B6CB
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/4YFhmmqBT0tYBI2LvfZSiznQ4BE.roa
Signing time: Thu 23 Apr 2026 19:02:26 +0000
ROA not before: Thu 23 Apr 2026 19:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210436
IP address blocks: 5.59.102.0/24 maxlen: 24
5.59.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:b8:da:1f:ac:15:48:a3:0b:65:56:50:24:a1:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Apr 23 19:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e181619a6a814f4b58048d8bbdf6528b39d0e011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:f1:f7:7a:fa:8c:2c:4e:e8:19:d9:ba:6f:
e9:07:97:9d:36:a6:28:70:56:95:20:ec:c4:86:d9:
af:90:35:07:e2:de:65:96:e3:9c:44:82:c0:c6:3f:
04:02:56:77:70:e2:60:3f:85:9f:0f:7d:21:74:4d:
81:08:49:fb:c0:ae:14:0f:0f:c6:9e:cb:c2:d5:62:
df:97:02:8d:08:ec:0c:fd:0d:6b:f1:05:27:09:d3:
1a:8a:61:29:f6:96:3a:3f:c3:43:39:a1:ed:f0:80:
ab:72:62:b9:89:e7:1e:2e:65:22:f4:08:cc:20:c2:
e1:b4:a0:0c:cb:f3:77:f0:da:b0:75:8c:56:4b:d1:
35:61:0a:e8:5c:63:2a:fd:6c:fd:d5:cf:5e:26:92:
0c:44:32:9f:bf:45:65:7e:d8:72:81:c5:1f:d1:80:
8c:d6:4c:ca:c0:44:5d:a3:68:3a:ee:4f:87:45:c6:
c3:d8:df:c0:5b:de:9e:c6:0e:43:cb:e7:e8:6e:63:
fc:58:6c:77:68:0f:2d:d8:fb:57:0a:68:61:99:8d:
7e:c2:ec:3e:e8:5f:02:76:4b:12:64:f0:66:a5:75:
23:92:42:d8:07:82:40:3c:1e:06:5f:d7:0f:0a:39:
4c:9a:77:e4:54:b9:7e:6f:b1:c0:c6:bc:85:ad:eb:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:61:9A:6A:81:4F:4B:58:04:8D:8B:BD:F6:52:8B:39:D0:E0:11
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/4YFhmmqBT0tYBI2LvfZSiznQ4BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.102.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:a7:0c:20:40:93:3a:8a:ad:1e:a9:7a:eb:55:61:8b:f0:73:
3d:97:7e:ce:63:71:e2:94:6b:e1:fb:29:68:ca:05:4c:0c:4f:
1e:ca:75:f6:42:ef:a0:de:dc:e1:32:06:1e:66:c6:2e:ea:07:
30:aa:85:5d:a5:9f:03:37:e1:25:b4:12:be:09:87:5f:2c:f4:
9f:67:6b:92:85:02:ee:11:98:be:58:0c:1f:2a:74:64:2b:35:
bf:c6:98:88:f0:53:b4:24:dd:30:29:32:f8:e0:79:8b:2d:15:
d4:cb:0e:93:bd:33:5d:76:8e:74:42:34:c2:37:dc:86:c6:ca:
14:bf:48:df:25:ab:0e:67:ed:13:65:8c:5d:90:3c:fa:67:19:
7c:1e:47:61:15:81:a3:4a:5a:89:e2:62:ef:7f:e2:da:f1:e5:
7a:56:64:43:4e:4b:aa:d5:b0:66:5d:5c:8e:69:48:db:77:05:
99:59:2b:88:59:22:29:c7:8b:35:08:5e:9c:b1:50:f7:f1:1e:
4b:d3:f2:ba:6b:18:fe:15:4c:a5:bf:6b:97:b7:a8:f0:32:4a:
03:d6:62:cc:67:3c:3a:1b:e9:03:e7:6e:14:43:21:46:9a:e3:
d4:37:63:13:a5:70:03:38:f2:04:c7:f4:03:8d:36:66:60:84:
09:d8:18:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ27uNofrBVIowtlVlAkobbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjYwNDIzMTkwMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTgxNjE5YTZhODE0ZjRiNTgwNDhkOGJiZGY2NTI4YjM5ZDBlMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvrx93r6jCxO6BnZum/pB5edNqYo
cFaVIOzEhtmvkDUH4t5lluOcRILAxj8EAlZ3cOJgP4WfD30hdE2BCEn7wK4UDw/G
nsvC1WLflwKNCOwM/Q1r8QUnCdMaimEp9pY6P8NDOaHt8ICrcmK5ieceLmUi9AjM
IMLhtKAMy/N38NqwdYxWS9E1YQroXGMq/Wz91c9eJpIMRDKfv0VlfthygcUf0YCM
1kzKwERdo2g67k+HRcbD2N/AW96exg5Dy+fobmP8WGx3aA8t2PtXCmhhmY1+wuw+
6F8CdksSZPBmpXUjkkLYB4JAPB4GX9cPCjlMmnfkVLl+b7HAxryFrevrqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGBYZpqgU9LWASNi732Uos50OARMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvNFlGaG1tcUJUMHRZQkkyTHZmWlNpem5RNEJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTtmMA0G
CSqGSIb3DQEBCwUAA4IBAQAbpwwgQJM6iq0eqXrrVWGL8HM9l37OY3HilGvh+ylo
ygVMDE8eynX2Qu+g3tzhMgYeZsYu6gcwqoVdpZ8DN+EltBK+CYdfLPSfZ2uShQLu
EZi+WAwfKnRkKzW/xpiI8FO0JN0wKTL44HmLLRXUyw6TvTNddo50QjTCN9yGxsoU
v0jfJasOZ+0TZYxdkDz6Zxl8HkdhFYGjSlqJ4mLvf+La8eV6VmRDTkuq1bBmXVyO
aUjbdwWZWSuIWSIpx4s1CF6csVD38R5L0/K6axj+FUylv2uXt6jwMkoD1mLMZzw6
G+kD524UQyFGmuPUN2MTpXADOPIEx/QDjTZmYIQJ2Bja
-----END CERTIFICATE-----
Generated at Mon Apr 27 05:47:54 2026 by rpki-client