Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dDeK8YVIA70MtFNum-bAJ2nrBY0.roa
File: dDeK8YVIA70MtFNum-bAJ2nrBY0.roa (raw, json)
Hash identifier: RJViafV+iWbPlz50BA28UmtmbO+vS5XCBR29HNP+fhY=
Subject key identifier: 74:37:8A:F1:85:48:03:BD:0C:B4:53:6E:9B:E6:C0:27:69:EB:05:8D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1CD384B6A2704DE7FD39288FF81165C89
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dDeK8YVIA70MtFNum-bAJ2nrBY0.roa
Signing time: Thu 12 Nov 2026 00:46:20 +0000
ROA not before: Thu 12 Nov 2026 00:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402976
IP address blocks: 5.230.15.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cd:38:4b:6a:27:04:de:7f:d3:92:88:ff:81:16:5c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 00:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74378af1854803bd0cb4536e9be6c02769eb058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:a9:c9:b6:f4:c1:7e:f5:12:77:f3:dd:4e:
ca:db:44:cb:2a:a2:8e:05:60:d8:e3:67:8b:28:cd:
dd:68:bd:91:7b:ad:4d:37:34:38:67:18:8b:10:a7:
6b:e1:37:ae:8c:8e:a9:2e:55:50:4b:29:7a:51:50:
e9:66:3e:57:54:bd:1e:a8:47:13:5e:c2:be:86:1a:
0d:03:c9:f9:6a:e8:b3:c8:b1:04:72:ba:91:69:8a:
8a:02:62:52:fb:c5:4e:3b:55:31:39:63:fb:fc:64:
67:08:0f:a6:81:8f:7e:c8:50:9b:c2:41:1b:f8:10:
38:d1:f5:49:4f:11:74:89:69:ab:b9:5c:ba:00:ec:
da:1a:44:52:06:85:00:8a:95:d9:42:bb:a2:59:f1:
af:09:c2:70:c4:95:1f:cd:55:74:13:8c:28:5c:a0:
25:cd:9a:4b:0d:6a:4e:05:a9:ad:33:7e:a2:81:b0:
05:bc:48:52:78:2a:06:77:66:e3:92:90:65:03:dd:
09:34:cc:48:1b:be:03:1c:99:56:da:0e:d5:22:e7:
72:f6:e3:e0:a4:35:1f:4d:b4:28:06:e3:8a:02:59:
a6:04:47:e7:32:47:66:7b:0c:63:23:86:60:41:4c:
1c:86:50:4d:b7:b1:8c:59:65:78:2b:b0:99:f8:37:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:8A:F1:85:48:03:BD:0C:B4:53:6E:9B:E6:C0:27:69:EB:05:8D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dDeK8YVIA70MtFNum-bAJ2nrBY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.15.0/24
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f8:14:fd:9c:f6:c4:6e:29:7e:5c:4f:37:36:ba:fc:61:b4:
d8:60:1c:4b:d6:b0:50:00:8a:e3:c3:ce:6f:dd:1e:4b:fe:30:
18:87:d8:56:91:f5:d1:c4:38:a3:ca:ae:c1:5c:d0:a5:c4:fc:
aa:b1:12:7c:c7:55:4e:95:60:68:ea:c7:46:6a:ad:e4:8c:d4:
75:d4:7c:a1:85:4c:e3:1f:41:c2:e7:f7:d3:ba:c5:68:d2:40:
95:07:3d:b8:97:97:98:bb:1b:5b:8c:ef:26:3b:49:e9:69:13:
68:f7:9d:9a:fc:6c:48:0a:b9:ee:b3:58:23:45:2a:b8:7b:77:
56:43:61:54:dd:b8:b5:5d:1f:b3:e3:ce:54:9a:61:97:b5:96:
6f:17:be:e7:45:04:58:b7:10:af:ed:3e:e4:59:bf:5a:3e:d8:
37:41:06:ae:79:72:de:af:39:da:2e:2c:83:11:3f:d2:64:9c:
e4:40:5c:ad:89:68:5e:86:06:f0:42:3c:27:8b:04:bf:37:b7:
db:15:39:6e:73:4c:c2:01:0c:82:17:76:66:cb:8e:4b:e0:5e:
ad:4d:c2:57:bb:95:d5:36:1a:b0:af:2b:aa:ff:07:cc:25:32:
d9:2e:a9:23:60:b4:96:ca:be:db:99:70:20:39:dc:0a:37:e5:
04:ba:6f:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHNOEtqJwTef9OSiP+BFlyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMTEyMDA0NjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDM3OGFmMTg1NDgwM2JkMGNiNDUzNmU5YmU2YzAyNzY5ZWIwNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsySpybb0wX71Enfz3U7K20TLKqKO
BWDY42eLKM3daL2Re61NNzQ4ZxiLEKdr4TeujI6pLlVQSyl6UVDpZj5XVL0eqEcT
XsK+hhoNA8n5auizyLEEcrqRaYqKAmJS+8VOO1UxOWP7/GRnCA+mgY9+yFCbwkEb
+BA40fVJTxF0iWmruVy6AOzaGkRSBoUAipXZQruiWfGvCcJwxJUfzVV0E4woXKAl
zZpLDWpOBamtM36igbAFvEhSeCoGd2bjkpBlA90JNMxIG74DHJlW2g7VIudy9uPg
pDUfTbQoBuOKAlmmBEfnMkdmewxjI4ZgQUwchlBNt7GMWWV4K7CZ+DdF6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHQ3ivGFSAO9DLRTbpvmwCdp6wWNMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZERlSzhZVklBNzBNdEZOdW0tYkFKMm5yQlkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABeYPAwQA
shKXMA0GCSqGSIb3DQEBCwUAA4IBAQDK+BT9nPbEbil+XE83Nrr8YbTYYBxL1rBQ
AIrjw85v3R5L/jAYh9hWkfXRxDijyq7BXNClxPyqsRJ8x1VOlWBo6sdGaq3kjNR1
1HyhhUzjH0HC5/fTusVo0kCVBz24l5eYuxtbjO8mO0npaRNo952a/GxICrnus1gj
RSq4e3dWQ2FU3bi1XR+z485UmmGXtZZvF77nRQRYtxCv7T7kWb9aPtg3QQaueXLe
rznaLiyDET/SZJzkQFytiWhehgbwQjwniwS/N7fbFTluc0zCAQyCF3Zmy45L4F6t
TcJXu5XVNhqwryuq/wfMJTLZLqkjYLSWyr7bmXAgOdwKN+UEum+x
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:39 2026 by rpki-client