Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/02Y0pTmhoYiksfoBCjR_SvdXTbs.roa
File: 02Y0pTmhoYiksfoBCjR_SvdXTbs.roa (raw, json)
Hash identifier: 6/MAVdE4ZN/PqUVxwfsZH1sp1i06XFbahzKQligW5bQ=
Subject key identifier: D3:66:34:A5:39:A1:A1:88:A4:B1:FA:01:0A:34:7F:4A:F7:57:4D:BB
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 019E032E27F874AC1B0E57E3AD62A9467FFC
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/02Y0pTmhoYiksfoBCjR_SvdXTbs.roa
Signing time: Thu 07 May 2026 16:03:36 +0000
ROA not before: Thu 07 May 2026 16:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35487
IP address blocks: 201.78.144.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:2e:27:f8:74:ac:1b:0e:57:e3:ad:62:a9:46:7f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: May 7 16:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d36634a539a1a188a4b1fa010a347f4af7574dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f0:0d:66:2e:0c:97:e7:d0:d1:6f:a1:b2:53:
85:df:4f:9b:a1:81:8a:2d:70:26:b6:79:2c:5f:a6:
46:b2:21:c8:48:a4:87:c6:74:8b:6f:4a:59:92:57:
24:86:22:5d:51:ab:53:14:3f:3f:74:0e:91:d5:3a:
ef:ab:d8:b6:cb:d4:4e:2f:94:b0:10:81:0b:41:2c:
7a:6b:16:10:ff:0f:35:f8:e9:6e:fa:78:29:58:e4:
8e:74:24:2d:1a:b2:8f:cb:71:a7:b1:3a:5e:68:1c:
87:0d:14:bf:18:ab:b3:70:0a:2e:44:6a:c4:7b:8b:
95:cb:89:d4:8b:c1:e0:3e:14:04:ff:50:69:81:d4:
2a:ff:46:11:0f:7d:6d:95:5b:2b:2c:7b:6c:05:55:
0c:d6:59:55:67:1e:b8:53:5f:65:c8:12:a5:1d:ec:
6d:d2:3c:87:d6:5a:ff:a6:7c:57:af:8b:e7:c4:26:
df:a8:b3:7e:76:e2:81:4f:23:be:1f:2c:77:b2:71:
0b:f0:7d:f5:3f:96:6d:03:c7:96:72:ab:5f:a7:a2:
14:3a:1b:61:f8:cd:97:df:d3:64:ee:a7:fd:eb:2f:
91:70:e9:bb:7b:c9:95:57:7e:0a:cb:64:13:5b:d8:
7e:39:22:45:d1:fc:b7:65:5f:5e:0d:f2:b6:ba:fd:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:34:A5:39:A1:A1:88:A4:B1:FA:01:0A:34:7F:4A:F7:57:4D:BB
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/02Y0pTmhoYiksfoBCjR_SvdXTbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:ff:ac:34:0b:f5:9b:68:25:c2:31:e6:eb:40:86:9b:bf:04:
b1:c9:a7:f0:7a:7f:48:96:4f:cd:0f:1f:e9:94:48:11:29:48:
af:c7:db:94:8f:8c:78:40:7a:8e:08:df:39:1c:51:be:ef:76:
29:e2:e7:3b:40:0f:ea:3d:a9:e7:1d:3f:6b:fc:f4:c0:97:1c:
cf:e4:3a:32:d6:14:e3:cf:b4:81:75:08:22:d3:5a:6a:6f:2b:
ad:0a:97:d2:cc:04:0b:75:e2:19:9c:38:bb:a0:cb:b3:de:53:
1a:99:fc:98:a4:91:c8:a3:a3:52:05:96:cb:bc:f4:3c:c5:03:
21:51:25:c7:5a:97:06:3f:64:de:82:ad:42:26:01:2d:0e:38:
4b:82:a8:34:88:b7:4c:92:f4:80:0b:46:5e:59:3b:63:e3:e1:
53:66:74:31:93:95:34:c6:19:65:46:e5:b4:3f:63:17:5c:db:
e5:c3:34:5f:13:52:39:f1:af:5c:38:dd:fb:e5:b4:f9:de:54:
4f:d1:da:63:39:aa:62:1c:d1:58:35:82:9e:0a:5a:7c:87:b3:
32:1c:2a:e7:c0:d6:bc:a1:e1:5d:15:b2:c3:5d:a3:96:89:25:
66:22:65:60:82:ec:b1:c5:b3:e3:be:69:d6:fa:59:5a:2d:1c:
99:5b:dc:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4DLif4dKwbDlfjrWKpRn/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDgzODg2NGQ2ODA1MTYyNjkzYmRmMjQ5ZjNiOGFjMzFm
NjgwYmQwHhcNMjYwNTA3MTYwMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzY2MzRhNTM5YTFhMTg4YTRiMWZhMDEwYTM0N2Y0YWY3NTc0ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vANZi4Ml+fQ0W+hslOF30+boYGK
LXAmtnksX6ZGsiHISKSHxnSLb0pZklckhiJdUatTFD8/dA6R1Trvq9i2y9ROL5Sw
EIELQSx6axYQ/w81+Olu+ngpWOSOdCQtGrKPy3GnsTpeaByHDRS/GKuzcAouRGrE
e4uVy4nUi8HgPhQE/1BpgdQq/0YRD31tlVsrLHtsBVUM1llVZx64U19lyBKlHext
0jyH1lr/pnxXr4vnxCbfqLN+duKBTyO+Hyx3snEL8H31P5ZtA8eWcqtfp6IUOhth
+M2X39Nk7qf96y+RcOm7e8mVV34Ky2QTW9h+OSJF0fy3ZV9eDfK2uv0YLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNmNKU5oaGIpLH6AQo0f0r3V027MB8GA1UdIwQY
MBaAFHlIOIZNaAUWJpO98knzuKwx9oC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVVnNGhrMW9CUlltazczeVNmTzRyREgyZ0wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xZDVhZDAtNDc4NS00MDQ2LWI4ZTYt
YTBlNzBlNTA1NmVmLzEvMDJZMHBUbWhvWWlrc2ZvQkNqUl9TdmRYVGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xZDVhZDAtNDc4NS00MDQ2LWI4ZTYtYTBlNzBlNTA1NmVm
LzEvZVVnNGhrMW9CUlltazczeVNmTzRyREgyZ0wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyU6QMA0G
CSqGSIb3DQEBCwUAA4IBAQBO/6w0C/WbaCXCMebrQIabvwSxyafwen9Ilk/NDx/p
lEgRKUivx9uUj4x4QHqOCN85HFG+73Yp4uc7QA/qPannHT9r/PTAlxzP5Doy1hTj
z7SBdQgi01pqbyutCpfSzAQLdeIZnDi7oMuz3lMamfyYpJHIo6NSBZbLvPQ8xQMh
USXHWpcGP2Tegq1CJgEtDjhLgqg0iLdMkvSAC0ZeWTtj4+FTZnQxk5U0xhllRuW0
P2MXXNvlwzRfE1I58a9cON375bT53lRP0dpjOapiHNFYNYKeClp8h7MyHCrnwNa8
oeFdFbLDXaOWiSVmImVgguyxxbPjvmnW+llaLRyZW9zB
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:27 2026 by rpki-client