Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/xEUKzOOkARoDjaObKTAU7gIkvJ0.roa
File: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (raw, json)
Hash identifier: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=
Subject key identifier: C4:45:0A:CC:E3:A4:01:1A:03:8D:A3:9B:29:30:14:EE:02:24:BC:9D
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019EB12DD5E03FCB8F145DB924FE00B1B964
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/xEUKzOOkARoDjaObKTAU7gIkvJ0.roa
Signing time: Wed 10 Jun 2026 10:57:11 +0000
ROA not before: Wed 10 Jun 2026 10:57:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 5.202.72.0/22 maxlen: 22
5.202.72.0/23 maxlen: 23
5.202.72.0/24 maxlen: 24
5.202.73.0/24 maxlen: 24
5.202.74.0/23 maxlen: 23
5.202.74.0/24 maxlen: 24
5.202.75.0/24 maxlen: 24
5.202.102.0/24 maxlen: 24
185.169.20.0/23 maxlen: 23
185.169.22.0/23 maxlen: 23
185.169.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:2d:d5:e0:3f:cb:8f:14:5d:b9:24:fe:00:b1:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jun 10 10:57:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4450acce3a4011a038da39b293014ee0224bc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:14:b8:a7:bd:ac:fb:5f:e9:8c:81:7f:a9:
4b:c5:ca:e6:14:57:1d:a0:c8:5f:8f:5c:19:a5:50:
b2:a0:d6:22:6c:39:90:6b:fa:73:d3:fc:11:2e:25:
36:88:67:2b:69:c4:fe:ee:ca:c8:3e:be:0c:22:7b:
9e:59:44:7e:de:d9:97:79:ed:60:75:cd:72:3f:24:
0b:55:4d:76:1b:b1:2b:01:f0:5c:89:f5:7b:eb:47:
79:16:f4:99:b1:92:67:d1:6e:4b:37:37:ca:8a:99:
fe:6c:fa:c6:22:ef:83:a9:fc:bf:e4:37:5d:00:44:
2f:bb:e4:a7:d3:fc:36:1c:1e:d7:69:78:5f:26:39:
58:1d:f2:06:93:14:51:82:0c:8b:70:9a:8c:23:05:
2b:95:ab:3f:d7:2f:de:ea:a4:46:84:a7:c5:e8:ba:
36:60:3d:ab:90:2d:f5:b2:87:36:7f:e7:ca:13:4c:
4f:18:8e:91:c7:25:fe:9a:37:a9:b4:0c:be:2f:cd:
e0:34:24:c0:04:80:4e:d2:ec:3f:8f:91:2c:ca:f2:
5e:92:2b:c7:9a:6c:0c:4a:e0:aa:5f:66:a8:e1:13:
62:f8:36:8a:c9:f5:c4:16:e6:c9:33:a4:f5:18:74:
0a:51:6c:61:51:3b:93:96:26:d4:c5:17:ef:33:d2:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:0A:CC:E3:A4:01:1A:03:8D:A3:9B:29:30:14:EE:02:24:BC:9D
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/xEUKzOOkARoDjaObKTAU7gIkvJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.72.0/22
5.202.102.0/24
185.169.20.0/22
185.169.39.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b1:db:48:5e:50:25:e5:74:a3:f1:30:55:0d:0f:e3:94:6b:
55:b5:f5:e7:22:c1:2d:cf:4e:d3:26:b1:f6:bb:0f:67:6c:2a:
c3:9b:af:a4:1d:14:ac:b4:aa:7b:2d:de:40:29:0b:c0:ef:5e:
ee:d5:a1:c2:3c:1e:72:11:3a:8b:1f:49:43:d4:86:ca:10:5a:
f0:2e:b6:3f:e8:76:41:cf:df:c2:ac:6c:6f:3a:a9:68:75:58:
3b:2c:b5:51:b4:72:08:8e:e6:01:ab:b3:ca:f4:4b:92:8e:7d:
2f:68:09:8b:e7:c7:2e:15:3b:43:a2:62:f9:1f:ff:75:19:1e:
ab:4a:76:cb:07:ea:ce:7b:2f:88:74:aa:b1:0b:1f:58:4d:31:
85:e6:f9:66:8c:75:e7:dd:92:67:6b:1f:2b:6f:bc:6d:f8:08:
bd:d4:bf:1e:a5:ab:8e:48:44:65:fc:4e:46:5a:e3:d3:1e:2a:
87:2f:0d:a4:9a:06:76:a6:6e:e2:81:fe:fb:c3:1d:2b:af:57:
87:74:7e:c6:cc:ed:90:79:32:f9:fd:60:00:ab:cc:fb:c0:ac:
d2:23:f7:42:91:2a:4c:c9:69:b7:22:ef:48:69:78:bc:5e:31:
10:67:9e:ef:aa:dc:e6:29:ef:10:1a:3b:ac:8a:a9:92:2d:6c:
ca:17:4f:97
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6xLdXgP8uPFF25JP4AsblkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjYwNjEwMTA1NzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQ1MGFjY2UzYTQwMTFhMDM4ZGEzOWIyOTMwMTRlZTAyMjRiYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhkUuKe9rPtf6YyBf6lLxcrmFFcd
oMhfj1wZpVCyoNYibDmQa/pz0/wRLiU2iGcracT+7srIPr4MInueWUR+3tmXee1g
dc1yPyQLVU12G7ErAfBcifV760d5FvSZsZJn0W5LNzfKipn+bPrGIu+Dqfy/5Ddd
AEQvu+Sn0/w2HB7XaXhfJjlYHfIGkxRRggyLcJqMIwUrlas/1y/e6qRGhKfF6Lo2
YD2rkC31soc2f+fKE0xPGI6RxyX+mjeptAy+L83gNCTABIBO0uw/j5EsyvJekivH
mmwMSuCqX2ao4RNi+DaKyfXEFubJM6T1GHQKUWxhUTuTlibUxRfvM9LySQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMRFCszjpAEaA42jmykwFO4CJLydMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEveEVVS3pPT2tBUm9EamFPYktUQVU3Z0lrdkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBcpIAwQA
BcpmAwQCuakUAwQAuaknMA0GCSqGSIb3DQEBCwUAA4IBAQCqsdtIXlAl5XSj8TBV
DQ/jlGtVtfXnIsEtz07TJrH2uw9nbCrDm6+kHRSstKp7Ld5AKQvA717u1aHCPB5y
ETqLH0lD1IbKEFrwLrY/6HZBz9/CrGxvOqlodVg7LLVRtHIIjuYBq7PK9EuSjn0v
aAmL58cuFTtDomL5H/91GR6rSnbLB+rOey+IdKqxCx9YTTGF5vlmjHXn3ZJnax8r
b7xt+Ai91L8epauOSERl/E5GWuPTHiqHLw2kmgZ2pm7igf77wx0rr1eHdH7GzO2Q
eTL5/WAAq8z7wKzSI/dCkSpMyWm3Iu9IaXi8XjEQZ57vqtzmKe8QGjusiqmSLWzK
F0+X
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:14:55 2026 by rpki-client