Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/kxDbA6iZREXlK1I1czYegr69at8.roa
File: kxDbA6iZREXlK1I1czYegr69at8.roa (raw, json)
Hash identifier: HM/zW/CXYydb9LF7o8Y/uhilRHboojJsiV3+XcX8M+c=
Subject key identifier: 93:10:DB:03:A8:99:44:45:E5:2B:52:35:73:36:1E:82:BE:BD:6A:DF
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019ED58E3940B525D5413A5BEE51197F4AD0
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/kxDbA6iZREXlK1I1czYegr69at8.roa
Signing time: Wed 17 Jun 2026 12:28:48 +0000
ROA not before: Wed 17 Jun 2026 12:28:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57610
IP address blocks: 5.250.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:8e:39:40:b5:25:d5:41:3a:5b:ee:51:19:7f:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Jun 17 12:28:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9310db03a8994445e52b523573361e82bebd6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:a1:53:d7:3d:1c:d3:14:39:c4:23:dc:d1:
13:41:06:65:cc:f8:67:00:cd:dc:e4:d7:17:f3:8c:
41:ea:f4:fe:db:83:d6:2c:b0:e8:ec:6e:79:4c:1a:
57:8a:2e:a2:0f:bb:9e:38:fe:79:48:99:b7:bb:99:
c6:2f:4f:74:6f:a6:68:46:6b:56:61:80:a2:d8:5f:
50:6e:c8:ac:fa:9a:28:d9:05:b8:b3:56:15:15:ae:
96:4b:1d:e0:af:93:e0:dc:2d:24:26:71:bc:a1:55:
08:14:47:27:9e:79:11:55:6a:66:a8:15:d3:9c:ab:
20:32:c6:a3:75:a2:ef:8c:57:6f:0e:97:00:90:11:
3a:92:27:f1:d2:7b:a5:01:f8:cc:d4:11:39:71:97:
d4:ff:3a:1b:23:9c:ce:b6:fb:61:80:89:6c:a0:cd:
f9:c3:da:db:2f:4c:2a:17:7a:cf:a2:d8:6e:23:7c:
0c:2d:61:82:29:68:80:f5:a2:e0:6d:55:7c:0f:47:
9b:fe:f2:01:d9:45:59:31:94:c0:78:be:1e:01:83:
05:0a:c2:20:c1:d9:b0:c5:64:1b:c0:36:bb:45:63:
29:0e:ec:3c:b2:ba:49:37:1a:5d:41:a6:cd:19:46:
0c:4b:c7:98:bd:c6:f9:2a:d2:4d:7d:3d:c6:ce:0c:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:DB:03:A8:99:44:45:E5:2B:52:35:73:36:1E:82:BE:BD:6A:DF
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/kxDbA6iZREXlK1I1czYegr69at8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8d:94:f2:08:b8:26:91:ad:62:ac:16:e5:94:1e:35:7e:4c:
a4:99:9b:ac:a8:ce:72:4c:12:f6:6f:cd:11:bd:eb:42:0a:7e:
33:5a:96:74:ac:6e:e1:13:81:5b:3d:aa:76:5e:1b:d2:01:19:
c5:fc:f9:3e:53:a5:fa:9a:14:d9:7b:e3:d9:93:be:02:ce:8c:
f5:cc:ad:2c:85:33:7b:db:a7:88:8d:5a:9f:6d:16:03:8a:31:
62:b1:37:c9:de:bc:7f:c9:46:e3:56:56:e3:7a:62:79:11:78:
82:47:07:10:d2:c4:25:a9:02:04:1d:f2:dd:f8:b2:7e:9f:da:
10:e4:b3:53:13:9f:2a:ae:29:67:d1:31:be:90:ec:e9:bb:c9:
4d:c3:6f:46:ed:97:4f:3e:13:97:19:ef:9c:3e:62:f8:cb:48:
6e:e0:b3:47:34:f0:bc:9a:3c:d6:78:43:c8:e1:2f:a3:37:b2:
33:01:cd:bf:be:d6:b8:18:a5:55:aa:ea:84:90:56:28:ef:7e:
d1:10:f2:a3:bc:6f:6a:a3:79:24:31:33:dd:8c:e6:48:4c:08:
1f:7d:94:34:86:b9:78:72:ff:3b:c5:62:89:35:bb:0b:25:13:
38:d7:ea:6e:83:14:63:f0:f2:6a:87:cd:d9:07:ef:10:4f:c2:
6d:62:08:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7VjjlAtSXVQTpb7lEZf0rQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTg5ZDllYTgyZDVmYmI2NmQ2YzExZjE4NzYzMzQ3NjAz
NGUwZGUwHhcNMjYwNjE3MTIyODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzEwZGIwM2E4OTk0NDQ1ZTUyYjUyMzU3MzM2MWU4MmJlYmQ2YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNihU9c9HNMUOcQj3NETQQZlzPhn
AM3c5NcX84xB6vT+24PWLLDo7G55TBpXii6iD7ueOP55SJm3u5nGL090b6ZoRmtW
YYCi2F9Qbsis+poo2QW4s1YVFa6WSx3gr5Pg3C0kJnG8oVUIFEcnnnkRVWpmqBXT
nKsgMsajdaLvjFdvDpcAkBE6kifx0nulAfjM1BE5cZfU/zobI5zOtvthgIlsoM35
w9rbL0wqF3rPothuI3wMLWGCKWiA9aLgbVV8D0eb/vIB2UVZMZTAeL4eAYMFCsIg
wdmwxWQbwDa7RWMpDuw8srpJNxpdQabNGUYMS8eYvcb5KtJNfT3Gzgx6VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMQ2wOomURF5StSNXM2HoK+vWrfMB8GA1UdIwQY
MBaAFLUYnZ6oLV+7ZtbBHxh2M0dgNODeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81ZTYxZDgtZDFiZi00ZjJhLWEzMmUt
ZjVkNmI3NTJhZTM0LzEva3hEYkE2aVpSRVhsSzFJMWN6WWVncjY5YXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81ZTYxZDgtZDFiZi00ZjJhLWEzMmUtZjVkNmI3NTJhZTM0
LzEvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfr9MA0G
CSqGSIb3DQEBCwUAA4IBAQAhjZTyCLgmka1irBbllB41fkykmZusqM5yTBL2b80R
vetCCn4zWpZ0rG7hE4FbPap2XhvSARnF/Pk+U6X6mhTZe+PZk74Czoz1zK0shTN7
26eIjVqfbRYDijFisTfJ3rx/yUbjVlbjemJ5EXiCRwcQ0sQlqQIEHfLd+LJ+n9oQ
5LNTE58qriln0TG+kOzpu8lNw29G7ZdPPhOXGe+cPmL4y0hu4LNHNPC8mjzWeEPI
4S+jN7IzAc2/vta4GKVVquqEkFYo737REPKjvG9qo3kkMTPdjOZITAgffZQ0hrl4
cv87xWKJNbsLJRM41+pugxRj8PJqh83ZB+8QT8JtYghD
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:08 2026 by rpki-client