Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vKL5Ciq6Hbah8BW7h529H5w7f3k.roa
File: vKL5Ciq6Hbah8BW7h529H5w7f3k.roa (raw, json)
Hash identifier: sOfjYKDJpkjrYL5FgUN6IJ1Brax9GQnyz881XOMBNbQ=
Subject key identifier: BC:A2:F9:0A:2A:BA:1D:B6:A1:F0:15:BB:87:9D:BD:1F:9C:3B:7F:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DD422963D4C6D616828C7410DB7120A0E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vKL5Ciq6Hbah8BW7h529H5w7f3k.roa
Signing time: Tue 28 Apr 2026 12:48:49 +0000
ROA not before: Tue 28 Apr 2026 12:48:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:22:96:3d:4c:6d:61:68:28:c7:41:0d:b7:12:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 28 12:48:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bca2f90a2aba1db6a1f015bb879dbd1f9c3b7f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:be:b2:ce:0c:c7:a9:80:65:9d:fe:8d:2a:
9d:83:03:db:fb:67:06:c4:8c:b1:98:f8:6b:77:d0:
e2:ed:76:65:84:88:66:c9:18:3d:53:1e:bb:cd:44:
76:b1:12:23:ea:6f:fc:aa:67:86:b4:6e:77:c2:0f:
60:1e:31:51:cd:b8:39:f6:2f:19:67:30:cb:04:f3:
b4:91:4f:66:1a:24:aa:e3:c5:a1:64:9a:1b:04:5b:
fd:e7:fd:76:62:f8:50:5c:fe:ff:e1:22:60:88:c1:
96:c6:66:6c:e8:98:41:5b:7d:19:6f:10:55:83:0a:
00:b7:70:e9:b4:53:82:e3:a5:93:8e:69:f2:1d:26:
a3:2d:64:5e:db:ff:12:05:65:49:bc:45:37:d0:05:
0e:4b:23:17:54:e8:ca:6a:b2:d6:b0:02:9e:58:52:
a0:a9:9b:66:da:57:10:5b:0f:c6:a0:ff:52:ff:85:
37:ef:aa:31:78:1a:25:53:3d:0b:3d:4e:28:28:e2:
a0:07:c5:2f:46:04:3c:3b:3d:8e:1c:f5:b1:76:7f:
3e:b5:38:02:c3:0c:70:a9:e3:eb:5b:2a:c9:da:bb:
ea:20:c1:62:3d:82:4d:43:85:b9:05:39:ee:bd:87:
8e:02:be:f2:c2:4d:b2:46:9f:5d:13:f1:14:3b:34:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:F9:0A:2A:BA:1D:B6:A1:F0:15:BB:87:9D:BD:1F:9C:3B:7F:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vKL5Ciq6Hbah8BW7h529H5w7f3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.231.26.0/24
5.231.242.0/24
89.106.71.0/24
94.249.230.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
c8:50:5b:d9:45:38:e1:37:7d:7b:d0:b7:cf:07:e3:1c:9b:1b:
e6:9f:cf:14:cc:ea:2c:83:d6:54:50:33:15:aa:bd:f2:01:ad:
5d:b3:15:07:b6:35:18:6e:5c:86:aa:49:5c:54:04:6b:21:c1:
13:15:c3:c3:37:b3:48:c5:88:eb:05:39:73:d6:c2:74:68:6d:
2e:c5:1f:8a:ca:23:1b:c0:55:06:7d:3e:3a:25:0e:86:cb:55:
4d:a8:1e:a6:4e:63:1e:a3:52:05:61:9a:33:cb:09:f9:a7:28:
77:5b:4b:24:da:38:51:00:11:33:15:22:9f:e2:63:b9:81:48:
f3:46:77:16:e0:d2:44:86:3f:c1:ec:78:78:9f:1e:f7:53:81:
40:cf:e2:78:50:77:01:51:68:55:54:a0:03:3a:60:d0:3e:b4:
54:0f:9f:10:7f:c3:84:a0:5d:81:e0:e9:a3:83:c0:bb:e9:3d:
0a:95:3b:ec:b9:39:6d:3e:b8:5c:b9:ec:59:48:e1:59:01:3e:
f9:d9:71:35:ba:1e:b7:50:0d:33:d4:ae:66:58:7c:72:c3:2e:
e4:02:b3:c9:a5:2d:6e:82:e1:a2:4e:53:97:f7:32:50:be:04:
13:3f:74:8d:12:69:45:e3:bc:d0:6b:bb:75:7e:8c:b0:8d:53:
cd:5b:6c:2a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZ3UIpY9TG1haCjHQQ23EgoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDI4MTI0ODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2EyZjkwYTJhYmExZGI2YTFmMDE1YmI4NzlkYmQxZjljM2I3Zjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmga+ss4Mx6mAZZ3+jSqdgwPb+2cG
xIyxmPhrd9Di7XZlhIhmyRg9Ux67zUR2sRIj6m/8qmeGtG53wg9gHjFRzbg59i8Z
ZzDLBPO0kU9mGiSq48WhZJobBFv95/12YvhQXP7/4SJgiMGWxmZs6JhBW30ZbxBV
gwoAt3DptFOC46WTjmnyHSajLWRe2/8SBWVJvEU30AUOSyMXVOjKarLWsAKeWFKg
qZtm2lcQWw/GoP9S/4U376oxeBolUz0LPU4oKOKgB8UvRgQ8Oz2OHPWxdn8+tTgC
wwxwqePrWyrJ2rvqIMFiPYJNQ4W5BTnuvYeOAr7ywk2yRp9dE/EUOzTtWwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFLyi+Qoquh22ofAVu4edvR+cO395MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdktMNUNpcTZIYmFoOEJXN2g1MjlINXc3ZjNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQABVOZAwQA
BecaAwQABefyAwQAWWpHAwQAXvnmMA8EAgACMAkDBwAqAi/AABEwDQYJKoZIhvcN
AQELBQADggEBAMhQW9lFOOE3fXvQt88H4xybG+afzxTM6iyD1lRQMxWqvfIBrV2z
FQe2NRhuXIaqSVxUBGshwRMVw8M3s0jFiOsFOXPWwnRobS7FH4rKIxvAVQZ9Pjol
DobLVU2oHqZOYx6jUgVhmjPLCfmnKHdbSyTaOFEAETMVIp/iY7mBSPNGdxbg0kSG
P8HseHifHvdTgUDP4nhQdwFRaFVUoAM6YNA+tFQPnxB/w4SgXYHg6aODwLvpPQqV
O+y5OW0+uFy57FlI4VkBPvnZcTW6HrdQDTPUrmZYfHLDLuQCs8mlLW6C4aJOU5f3
MlC+BBM/dI0SaUXjvNBru3V+jLCNU81bbCo=
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:52 2026 by rpki-client