Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_JfuBOofupnGkxVr06sguzF79lM.roa
File: _JfuBOofupnGkxVr06sguzF79lM.roa (raw, json)
Hash identifier: ffPIY0v7CB0OZ6c+v2N2LYOiUbyNgfne12sC890K3Hw=
Subject key identifier: FC:97:EE:04:EA:1F:BA:99:C6:93:15:6B:D3:AB:20:BB:31:7B:F6:53
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DD64613CA24A8341244C9FC6B5B36FBDA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_JfuBOofupnGkxVr06sguzF79lM.roa
Signing time: Tue 28 Apr 2026 22:46:50 +0000
ROA not before: Tue 28 Apr 2026 22:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.20.0/23 maxlen: 23
5.231.20.0/24 maxlen: 24
5.231.21.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:46:13:ca:24:a8:34:12:44:c9:fc:6b:5b:36:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 28 22:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc97ee04ea1fba99c693156bd3ab20bb317bf653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:04:e5:07:61:b6:58:02:bc:30:e6:3b:f9:
27:b2:51:81:c0:d8:ac:2e:39:61:02:36:24:ea:ac:
66:0b:e0:0f:b0:64:dd:e4:a1:ea:de:6b:ac:09:fa:
ba:da:63:51:a7:7e:fd:99:89:15:35:84:de:c9:8d:
d2:a4:a3:18:48:29:40:ae:e1:d5:91:db:04:c5:b4:
29:c6:03:3e:f1:5c:79:da:38:83:4a:47:1e:00:dc:
57:0b:13:28:c0:a3:cb:4b:99:26:0d:b6:88:80:6c:
c9:1a:fa:d2:14:0d:bc:b3:c4:a7:40:87:61:d8:e0:
b8:3c:65:f2:60:e7:24:6a:9c:0d:27:0c:08:2b:c6:
47:0a:68:17:32:26:27:7f:b6:ad:13:30:98:e9:2f:
84:cc:33:c7:b6:2b:40:34:bc:61:0d:2f:00:56:49:
14:39:dd:11:25:68:a6:04:31:c8:59:28:bf:be:2b:
a9:e7:e6:e8:95:0a:99:bb:12:d0:49:79:1c:11:83:
36:33:94:00:9b:0b:9a:e2:be:77:e6:e0:18:a0:39:
cd:18:79:17:b8:e4:4d:ef:10:0e:ed:d3:96:d0:fc:
2c:df:9e:a1:ff:34:af:ed:36:eb:63:96:8c:22:6b:
f5:b8:d1:14:f7:b1:7b:c2:35:74:e4:8e:7c:94:a1:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:EE:04:EA:1F:BA:99:C6:93:15:6B:D3:AB:20:BB:31:7B:F6:53
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_JfuBOofupnGkxVr06sguzF79lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.20.0/23
5.231.30.0/24
5.231.47.0/24
77.90.37.0/24
89.144.31.0/24
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0e:ca:8e:3a:92:67:d0:4b:23:ab:ea:1a:1f:5c:53:22:23:
22:55:e5:0f:58:c4:f8:01:42:75:0f:ca:4b:de:5f:0e:60:ab:
67:60:c6:42:ab:51:27:10:5e:c6:74:b2:09:06:80:98:02:f8:
71:fe:1c:b1:0a:d0:42:9b:a1:16:e6:0a:3f:f6:e3:9d:90:56:
75:a0:72:68:c7:c8:be:c7:09:89:55:78:82:f8:16:f7:64:eb:
5c:b4:fa:09:d0:fe:f3:69:a4:22:6f:77:bb:b7:8d:0d:e3:fb:
1b:a1:32:f3:be:4b:52:d0:32:35:86:39:40:ec:92:a0:c7:9d:
8c:ef:ef:37:23:e9:4b:67:a4:f0:74:6c:5b:4d:88:37:88:18:
d7:7d:e1:f5:6c:49:da:b3:fb:97:33:78:a8:4a:eb:6e:4e:f9:
b5:cf:23:1f:1f:86:06:e0:27:ac:e8:22:ca:48:a0:d2:64:6c:
89:72:cb:e9:cd:56:f8:31:97:ca:7d:af:76:64:ff:6f:5f:ec:
39:f8:cc:0d:b6:97:78:cc:58:b7:7f:5d:17:56:57:fe:c1:eb:
51:4a:ae:31:ff:52:4a:88:10:f9:0e:0f:c8:28:dc:c0:2c:40:
17:ad:8d:2a:c8:8e:23:6a:75:c2:ca:f5:40:e5:af:01:b4:b0:
c2:3c:f6:ad
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ3WRhPKJKg0EkTJ/GtbNvvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDI4MjI0NjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk3ZWUwNGVhMWZiYTk5YzY5MzE1NmJkM2FiMjBiYjMxN2JmNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaUE5QdhtlgCvDDmO/knslGBwNis
LjlhAjYk6qxmC+APsGTd5KHq3musCfq62mNRp379mYkVNYTeyY3SpKMYSClAruHV
kdsExbQpxgM+8Vx52jiDSkceANxXCxMowKPLS5kmDbaIgGzJGvrSFA28s8SnQIdh
2OC4PGXyYOckapwNJwwIK8ZHCmgXMiYnf7atEzCY6S+EzDPHtitANLxhDS8AVkkU
Od0RJWimBDHIWSi/viup5+bolQqZuxLQSXkcEYM2M5QAmwua4r535uAYoDnNGHkX
uORN7xAO7dOW0Pws356h/zSv7TbrY5aMImv1uNEU97F7wjV05I58lKGnqwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPyX7gTqH7qZxpMVa9OrILsxe/ZTMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvX0pmdUJPb2Z1cG5Ha3hWcjA2c2d1ekY3OWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBBecUAwQA
BeceAwQABecvAwQATVolAwQAWZAfAwQAXmekMA0GCSqGSIb3DQEBCwUAA4IBAQB3
DsqOOpJn0Esjq+oaH1xTIiMiVeUPWMT4AUJ1D8pL3l8OYKtnYMZCq1EnEF7GdLIJ
BoCYAvhx/hyxCtBCm6EW5go/9uOdkFZ1oHJox8i+xwmJVXiC+Bb3ZOtctPoJ0P7z
aaQib3e7t40N4/sboTLzvktS0DI1hjlA7JKgx52M7+83I+lLZ6TwdGxbTYg3iBjX
feH1bEnas/uXM3ioSutuTvm1zyMfH4YG4Ces6CLKSKDSZGyJcsvpzVb4MZfKfa92
ZP9vX+w5+MwNtpd4zFi3f10XVlf+wetRSq4x/1JKiBD5Dg/IKNzALEAXrY0qyI4j
anXCyvVA5a8BtLDCPPat
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:38 2026 by rpki-client