Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/fz3IBcPUYgyEi3HKy3o15CbAZtg.roa
File: fz3IBcPUYgyEi3HKy3o15CbAZtg.roa (raw, json)
Hash identifier: Xf1iCJJHpif2NVYysmUBCRlEjnut8UfGRj8zHdLVVNg=
Subject key identifier: 7F:3D:C8:05:C3:D4:62:0C:84:8B:71:CA:CB:7A:35:E4:26:C0:66:D8
Certificate issuer: /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial: 019F239B8966CD0F1DF2953429A13637460C
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/fz3IBcPUYgyEi3HKy3o15CbAZtg.roa
Signing time: Thu 02 Jul 2026 16:13:43 +0000
ROA not before: Thu 02 Jul 2026 16:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210101
IP address blocks: 5.255.60.0/24 maxlen: 24
85.117.224.0/22 maxlen: 22
2a0d:b4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:9b:89:66:cd:0f:1d:f2:95:34:29:a1:36:37:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Validity
Not Before: Jul 2 16:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f3dc805c3d4620c848b71cacb7a35e426c066d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:11:d4:94:ae:ba:a9:af:95:c3:70:90:ae:
2c:53:83:b9:3b:83:e2:37:f2:b0:4f:72:8f:7c:2e:
a0:28:ee:a9:a6:05:bb:f7:c7:5f:36:39:7a:89:dc:
93:a6:e5:f1:d4:62:29:43:c2:45:59:3d:54:6f:b9:
35:1c:0a:6f:23:2f:cd:b4:df:db:a3:c3:80:b3:6c:
92:61:f1:7b:7b:3c:0e:ee:68:f8:78:ee:83:bd:74:
0e:a7:6a:37:02:60:e4:e4:52:de:2c:f3:4c:5a:65:
00:b5:0d:4f:65:b3:d9:6c:6a:a9:01:f0:b8:b8:21:
42:b5:c2:57:77:0c:e4:4a:f9:2d:cb:63:52:96:76:
d7:d8:83:d5:6a:20:da:41:ae:1d:4d:23:fb:5e:4c:
4c:5e:8e:00:2f:0f:17:9f:18:e0:45:cb:ed:ca:dd:
d6:2c:5d:77:75:e3:b7:eb:d9:ae:b2:30:7c:2b:80:
a6:2b:3e:02:37:b8:5b:c2:c2:6c:3c:3e:be:24:bc:
28:61:cf:7b:58:1e:4e:18:ab:f3:8f:8e:52:86:4f:
fc:cd:0b:6e:e2:14:07:52:f9:89:63:dd:b7:5f:c0:
00:33:e8:e3:d5:d8:01:dd:68:84:98:71:e1:cb:56:
bb:a6:13:09:5f:a7:70:1e:93:fb:df:14:b0:24:30:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:C8:05:C3:D4:62:0C:84:8B:71:CA:CB:7A:35:E4:26:C0:66:D8
X509v3 Authority Key Identifier:
keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/fz3IBcPUYgyEi3HKy3o15CbAZtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.60.0/24
85.117.224.0/22
IPv6:
2a0d:b4c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:0d:95:ae:9f:90:86:4b:96:4c:78:77:2f:b1:ff:9d:3e:12:
4e:da:ed:f0:0c:ac:c0:3c:98:b0:d8:08:37:bd:c5:ab:8a:4d:
51:9f:99:67:4e:fc:d9:d4:78:14:a2:c9:4f:5d:87:0e:e3:29:
bd:b9:76:21:f1:e4:4b:97:5c:1d:4c:32:42:50:41:e7:8e:73:
f3:18:17:24:77:a7:0f:10:ed:48:17:2b:9d:21:53:65:21:f9:
bb:70:7a:03:dd:0f:59:1f:7f:93:9d:60:f2:d6:7d:d1:25:52:
6f:37:cf:48:f8:fe:33:93:43:1a:13:57:18:6a:4a:af:aa:6d:
58:d2:12:a4:09:f3:8c:fd:61:8a:2f:d4:4e:d6:b3:eb:60:c4:
59:a4:b6:02:c2:97:64:8b:13:ba:8b:c2:67:14:c4:96:18:04:
70:1d:05:16:70:4c:21:29:04:aa:4b:54:31:30:c7:ad:ab:4f:
fc:6a:de:26:53:fd:c6:84:44:98:8b:65:ab:40:9a:b9:4a:6d:
1f:84:79:70:2a:f7:58:b6:93:5d:16:ca:57:47:11:3b:0b:8a:
5c:f0:7e:20:d8:38:1e:80:a0:d6:92:fa:6a:8f:a4:e2:9f:2c:
70:04:5c:70:e0:be:66:4a:9e:86:5e:a9:07:52:66:bf:00:26:
d1:9c:aa:09
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jm4lmzQ8d8pU0KaE2N0YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDliZDFkOGY1MmYzMmUxYTY2YzkxZTQzODkxZGNkM2Ni
MDY5M2YwHhcNMjYwNzAyMTYxMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjNkYzgwNWMzZDQ2MjBjODQ4YjcxY2FjYjdhMzVlNDI2YzA2NmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWUR1JSuuqmvlcNwkK4sU4O5O4Pi
N/KwT3KPfC6gKO6ppgW798dfNjl6idyTpuXx1GIpQ8JFWT1Ub7k1HApvIy/NtN/b
o8OAs2ySYfF7ezwO7mj4eO6DvXQOp2o3AmDk5FLeLPNMWmUAtQ1PZbPZbGqpAfC4
uCFCtcJXdwzkSvkty2NSlnbX2IPVaiDaQa4dTSP7XkxMXo4ALw8XnxjgRcvtyt3W
LF13deO369musjB8K4CmKz4CN7hbwsJsPD6+JLwoYc97WB5OGKvzj45Shk/8zQtu
4hQHUvmJY923X8AAM+jj1dgB3WiEmHHhy1a7phMJX6dwHpP73xSwJDAVOQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH89yAXD1GIMhItxyst6NeQmwGbYMB8GA1UdIwQY
MBaAFA4JvR2PUvMuGmbJHkOJHc08sGk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdtOUhZOVM4eTRhWnNrZVE0a2R6VHl3YVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYt
ZDNlM2M3OGU3YzQ0LzEvZnozSUJjUFVZZ3lFaTNIS3kzbzE1Q2JBWnRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYtZDNlM2M3OGU3YzQ0
LzEvRGdtOUhZOVM4eTRhWnNrZVE0a2R6VHl3YVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABf88AwQC
VXXgMA0EAgACMAcDBQMqDbTAMA0GCSqGSIb3DQEBCwUAA4IBAQCWDZWun5CGS5ZM
eHcvsf+dPhJO2u3wDKzAPJiw2Ag3vcWrik1Rn5lnTvzZ1HgUoslPXYcO4ym9uXYh
8eRLl1wdTDJCUEHnjnPzGBckd6cPEO1IFyudIVNlIfm7cHoD3Q9ZH3+TnWDy1n3R
JVJvN89I+P4zk0MaE1cYakqvqm1Y0hKkCfOM/WGKL9RO1rPrYMRZpLYCwpdkixO6
i8JnFMSWGARwHQUWcEwhKQSqS1QxMMetq0/8at4mU/3GhESYi2WrQJq5Sm0fhHlw
KvdYtpNdFspXRxE7C4pc8H4g2DgegKDWkvpqj6TinyxwBFxw4L5mSp6GXqkHUma/
ACbRnKoJ
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:34:24 2026 by rpki-client