Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-UoxoSMEC7fhgBoOjZVdac590gk.roa
File: 1-UoxoSMEC7fhgBoOjZVdac590gk.roa (raw, json)
Hash identifier: 5bAv8KKm/MXSzBl8Q7+F+Ol4WLDtdAozCIXNu5GOvJM=
Subject key identifier: F9:4A:31:A1:23:04:0B:B7:E1:80:1A:0E:8D:95:5D:69:CE:7D:D2:09
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01A0CF915593DD8C495F6B9153F1F408BAA0
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-UoxoSMEC7fhgBoOjZVdac590gk.roa
Signing time: Wed 23 Sep 2026 18:40:03 +0000
ROA not before: Wed 23 Sep 2026 18:40:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218732
IP address blocks: 5.159.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:91:55:93:dd:8c:49:5f:6b:91:53:f1:f4:08:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Sep 23 18:40:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f94a31a123040bb7e1801a0e8d955d69ce7dd209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:12:ee:8d:c3:17:5c:e7:aa:0e:fa:76:cc:
fc:f4:a1:33:d8:5a:66:11:30:30:de:08:7f:25:67:
78:4f:2e:44:11:4d:5d:bb:1b:8c:c7:3b:f0:99:19:
98:51:ae:fb:77:c0:17:04:81:ad:bb:50:ff:81:d0:
4a:9c:a5:84:0a:83:58:fc:f5:7b:b3:3c:21:ff:73:
01:6f:43:65:c4:1d:e2:88:f5:f3:99:97:e1:a6:6c:
d1:45:d8:b6:94:ef:2f:92:82:d6:b5:b4:d5:18:f3:
2b:d0:2a:a1:52:28:1c:5e:4b:e1:e7:c6:fa:63:59:
48:a3:1a:64:ae:90:96:ab:79:60:9e:e8:93:a4:df:
2f:d4:0f:58:bd:fb:71:c0:18:80:13:c6:b0:65:b5:
eb:7a:8c:a4:74:e1:1b:c0:98:03:7a:2f:46:83:76:
d8:4a:ee:f2:b5:4b:11:df:d7:eb:4a:44:63:7d:a9:
e5:ea:58:85:6d:77:5e:c8:ff:ed:72:66:7a:93:fd:
8d:e6:de:eb:1b:c9:61:c4:4d:86:37:f0:94:a6:8d:
08:c6:03:16:51:35:b6:f9:74:d7:d5:e2:8c:63:50:
76:43:6d:78:ce:2b:2e:36:7a:20:68:af:35:dc:f6:
53:2d:0c:c0:d6:ea:1e:b6:36:9d:3b:c4:ca:80:b7:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:31:A1:23:04:0B:B7:E1:80:1A:0E:8D:95:5D:69:CE:7D:D2:09
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-UoxoSMEC7fhgBoOjZVdac590gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:aa:1b:45:d3:b3:4e:b3:4b:a9:5f:fb:d7:8a:73:d2:66:2a:
0f:7f:83:69:47:fb:21:78:22:38:98:fd:bd:d7:d6:59:ee:ff:
a1:2a:88:76:dc:87:89:df:03:f9:ee:8c:eb:55:57:26:e5:39:
ca:5f:95:1f:4c:5b:52:49:81:63:be:2e:fd:de:7e:10:af:19:
01:1f:b1:2d:cb:50:84:b8:c5:4f:54:9b:e2:98:0f:ee:c3:b9:
d8:6f:52:f8:40:90:e0:81:53:3b:a0:a9:16:7b:f4:04:40:4b:
65:da:f4:90:04:a8:94:a2:5a:33:11:f9:15:cc:8b:08:95:e2:
76:51:97:07:58:f0:f5:c6:2d:ef:d0:39:78:55:03:28:9a:f9:
03:a5:49:54:31:b8:eb:c2:70:17:3e:ee:56:3a:03:3e:2d:8c:
64:e8:c8:06:fd:34:b6:35:c3:c8:fc:5b:36:5f:c7:ec:f0:cb:
f6:0b:96:bb:65:d7:5a:09:48:35:4f:7e:14:70:b2:83:32:1b:
ee:d7:a7:cc:19:ed:45:87:c2:8f:0a:c4:60:07:e0:53:19:7c:
7d:36:ab:d3:9d:ad:69:81:e8:b2:fa:4d:b7:79:c1:80:55:b1:
56:40:2e:15:d4:f3:df:b1:99:b0:ba:de:0a:f0:a8:93:64:4d:
ac:9b:78:13
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDPkVWT3YxJX2uRU/H0CLqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwOTIzMTg0MDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTRhMzFhMTIzMDQwYmI3ZTE4MDFhMGU4ZDk1NWQ2OWNlN2RkMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiMS7o3DF1znqg76dsz89KEz2Fpm
ETAw3gh/JWd4Ty5EEU1duxuMxzvwmRmYUa77d8AXBIGtu1D/gdBKnKWECoNY/PV7
szwh/3MBb0NlxB3iiPXzmZfhpmzRRdi2lO8vkoLWtbTVGPMr0CqhUigcXkvh58b6
Y1lIoxpkrpCWq3lgnuiTpN8v1A9YvftxwBiAE8awZbXreoykdOEbwJgDei9Gg3bY
Su7ytUsR39frSkRjfanl6liFbXdeyP/tcmZ6k/2N5t7rG8lhxE2GN/CUpo0IxgMW
UTW2+XTX1eKMY1B2Q214zisuNnogaK813PZTLQzA1uoetjadO8TKgLfAtQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlKMaEjBAu34YAaDo2VXWnOfdIJMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvMS1Vb3hvU01FQzdmaGdCb09qWlZkYWM1OTBnay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTIvYzk2MWEwLTRmNTMtNDIyYS1iN2RkLTNkZmE1MTBkNmIx
Ni8xL2JkczRzMFBhTFJHVENlMnFHY2VuaUhBeWZyNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWfNjAN
BgkqhkiG9w0BAQsFAAOCAQEAIKobRdOzTrNLqV/714pz0mYqD3+DaUf7IXgiOJj9
vdfWWe7/oSqIdtyHid8D+e6M61VXJuU5yl+VH0xbUkmBY74u/d5+EK8ZAR+xLctQ
hLjFT1Sb4pgP7sO52G9S+ECQ4IFTO6CpFnv0BEBLZdr0kASolKJaMxH5FcyLCJXi
dlGXB1jw9cYt79A5eFUDKJr5A6VJVDG468JwFz7uVjoDPi2MZOjIBv00tjXDyPxb
Nl/H7PDL9guWu2XXWglINU9+FHCygzIb7tenzBntRYfCjwrEYAfgUxl8fTar052t
aYHosvpNt3nBgFWxVkAuFdTz37GZsLreCvCok2RNrJt4Ew==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:55:19 2026 by rpki-client