Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/S-aCpSFw09MfiTUcMr_qJZ5BBs8.roa
File: S-aCpSFw09MfiTUcMr_qJZ5BBs8.roa (raw, json)
Hash identifier: +7IarjT49nhjqrbcRyrdJ6bZ7YFFFuUH87cYumRj5Cg=
Subject key identifier: 4B:E6:82:A5:21:70:D3:D3:1F:89:35:1C:32:BF:EA:25:9E:41:06:CF
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 019E44D5E76217B454F0320F253A44236E22
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/S-aCpSFw09MfiTUcMr_qJZ5BBs8.roa
Signing time: Wed 20 May 2026 10:02:09 +0000
ROA not before: Wed 20 May 2026 10:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:d5:e7:62:17:b4:54:f0:32:0f:25:3a:44:23:6e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: May 20 10:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4be682a52170d3d31f89351c32bfea259e4106cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:fa:df:c9:28:78:80:78:bd:62:d3:c2:d1:
2d:1d:66:05:00:94:30:01:cd:1a:76:b8:d1:e1:09:
ca:57:cf:a7:f1:e4:7d:4f:21:89:6f:bf:c5:37:35:
35:76:30:c8:12:1e:56:3a:bc:da:5a:6c:79:2b:19:
36:1e:a4:05:76:fa:30:5f:07:c4:64:c7:cb:69:1e:
83:f2:32:11:fb:d9:f3:a8:18:2f:0f:6f:4b:df:e7:
f7:35:8a:88:09:c3:86:04:d3:ef:62:1d:57:7a:29:
fb:82:84:d8:b0:2a:08:45:32:f0:ef:5f:15:e3:86:
05:61:26:e8:0c:5a:be:60:90:fd:ed:3b:48:93:18:
fe:d5:3c:49:d8:cc:14:b8:b4:64:8a:33:5d:bb:21:
fd:f0:60:3b:f3:aa:0a:cf:1a:52:69:83:f1:b7:7b:
31:0d:3d:00:19:55:64:e3:cd:ed:0f:88:c9:65:56:
9a:44:7a:e5:78:b5:04:fa:51:37:9b:61:5d:6d:f0:
ca:4c:48:37:38:51:6f:bc:9b:ee:52:b5:06:58:52:
83:bd:2f:d7:c1:3f:ea:96:b8:7e:c6:3a:13:f4:ed:
bb:08:82:3e:22:5e:e8:53:69:b2:b3:6d:f3:3f:7f:
b0:dd:aa:1f:32:2d:de:84:1b:b9:d1:75:43:00:9b:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:82:A5:21:70:D3:D3:1F:89:35:1C:32:BF:EA:25:9E:41:06:CF
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/S-aCpSFw09MfiTUcMr_qJZ5BBs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f1:f5:c1:81:d8:f0:c0:de:be:07:60:ee:0c:2a:c9:31:86:
5a:64:00:81:7e:0b:bf:73:3b:02:77:14:4c:bc:f5:c0:37:88:
db:40:0e:39:1b:a8:a2:20:c0:9e:34:cf:fb:a4:0c:e4:21:67:
4e:c9:27:8d:eb:15:eb:a3:62:04:b6:b2:32:4d:4b:a6:4d:6c:
8e:4d:d9:35:e8:3a:57:3a:66:49:37:34:a1:cc:d8:35:4a:c5:
26:c0:ad:d4:79:d8:e7:e4:7e:84:c4:3d:91:4b:95:ed:87:5f:
58:c7:7e:4e:d9:41:c4:24:96:61:f4:07:c0:bc:94:1c:ee:e6:
9b:ed:15:81:d1:c4:51:e1:5d:e1:ad:91:fd:b8:29:e4:ba:5f:
c2:27:c2:c2:19:e3:36:61:f0:02:fe:7e:17:b7:f2:2b:5d:02:
95:a3:40:45:1d:f5:44:f3:01:48:dc:12:d6:3f:3d:00:61:d8:
6e:a4:78:95:47:ba:c2:22:97:ac:6a:73:19:66:f9:74:2d:fc:
fe:8b:69:be:a0:9b:92:13:6e:61:30:2b:49:88:45:8f:0c:10:
4e:7d:c0:5c:d6:2d:6a:26:d9:8f:bd:2e:77:8f:81:43:8f:ba:
70:0b:76:88:b5:27:ec:61:f6:e7:5d:c8:a3:65:3f:c2:4d:3f:
c4:50:b6:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5E1ediF7RU8DIPJTpEI24iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz
NjViNjAwHhcNMjYwNTIwMTAwMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmU2ODJhNTIxNzBkM2QzMWY4OTM1MWMzMmJmZWEyNTllNDEwNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvz638koeIB4vWLTwtEtHWYFAJQw
Ac0adrjR4QnKV8+n8eR9TyGJb7/FNzU1djDIEh5WOrzaWmx5Kxk2HqQFdvowXwfE
ZMfLaR6D8jIR+9nzqBgvD29L3+f3NYqICcOGBNPvYh1Xein7goTYsCoIRTLw718V
44YFYSboDFq+YJD97TtIkxj+1TxJ2MwUuLRkijNduyH98GA786oKzxpSaYPxt3sx
DT0AGVVk483tD4jJZVaaRHrleLUE+lE3m2FdbfDKTEg3OFFvvJvuUrUGWFKDvS/X
wT/qlrh+xjoT9O27CII+Il7oU2mys23zP3+w3aofMi3ehBu50XVDAJvZKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEvmgqUhcNPTH4k1HDK/6iWeQQbPMB8GA1UdIwQY
MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvUy1hQ3BTRncwOU1maVRVY01yX3FKWjVCQnM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM2MA0G
CSqGSIb3DQEBCwUAA4IBAQCb8fXBgdjwwN6+B2DuDCrJMYZaZACBfgu/czsCdxRM
vPXAN4jbQA45G6iiIMCeNM/7pAzkIWdOySeN6xXro2IEtrIyTUumTWyOTdk16DpX
OmZJNzShzNg1SsUmwK3Uedjn5H6ExD2RS5Xth19Yx35O2UHEJJZh9AfAvJQc7uab
7RWB0cRR4V3hrZH9uCnkul/CJ8LCGeM2YfAC/n4Xt/IrXQKVo0BFHfVE8wFI3BLW
Pz0AYdhupHiVR7rCIpesanMZZvl0Lfz+i2m+oJuSE25hMCtJiEWPDBBOfcBc1i1q
JtmPvS53j4FDj7pwC3aItSfsYfbnXcijZT/CTT/EULb6
-----END CERTIFICATE-----
Generated at Thu May 21 15:21:00 2026 by rpki-client