Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KVmpzy5hZCskzwqRox-FYppb3GQ.roa
File: KVmpzy5hZCskzwqRox-FYppb3GQ.roa (raw, json)
Hash identifier: 7CZVQYx6LYzr3r1g39olWSm7is2wo7tZ3DLVz7w4t+4=
Subject key identifier: 29:59:A9:CF:2E:61:64:2B:24:CF:0A:91:A3:1F:85:62:9A:5B:DC:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D7845E83C28E5347CD04793C03441F7BC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KVmpzy5hZCskzwqRox-FYppb3GQ.roa
Signing time: Fri 10 Apr 2026 16:42:20 +0000
ROA not before: Fri 10 Apr 2026 16:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199133
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:45:e8:3c:28:e5:34:7c:d0:47:93:c0:34:41:f7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 10 16:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2959a9cf2e61642b24cf0a91a31f85629a5bdc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:2a:d6:83:6d:95:de:13:5a:18:6f:a6:a1:
2d:75:69:f4:5f:19:ea:1c:d9:43:d1:59:69:d2:2a:
81:80:69:e7:2f:41:01:41:8c:03:bc:3d:2b:8c:58:
9d:6d:29:f8:fd:7e:70:2c:a5:5b:30:82:68:d2:d1:
c1:dd:07:65:75:6f:5c:09:af:42:35:b6:0b:6d:c8:
64:0c:90:d8:fc:40:ef:55:ae:5c:a4:ab:d8:36:74:
ea:14:b9:e2:39:1b:7f:ab:10:fa:b1:a7:6b:e9:85:
61:79:a6:43:77:19:ec:be:22:f1:2e:a1:22:3f:33:
e5:33:6b:14:ab:80:3e:74:95:9c:b8:d1:dd:54:2c:
94:bc:c8:fe:c2:14:5c:3b:2f:5d:5a:cb:16:ec:2b:
61:ac:b0:5a:fd:1b:36:d7:c9:10:cc:d9:2d:f1:90:
19:e5:3b:23:61:fb:67:d0:61:6d:61:f0:e8:c4:40:
c9:7c:c8:8c:f2:b5:68:ca:54:af:a1:0b:ae:96:0d:
0e:f5:9f:85:f6:43:10:fc:df:7c:9a:d3:08:81:83:
be:88:26:e9:14:3d:9d:86:5d:74:03:a0:79:4a:be:
e2:d9:ca:bc:ad:7f:aa:9b:05:9f:c7:f8:8f:cc:32:
d3:0b:1b:56:48:34:a1:ca:4b:bb:6d:e9:9d:a2:94:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:59:A9:CF:2E:61:64:2B:24:CF:0A:91:A3:1F:85:62:9A:5B:DC:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KVmpzy5hZCskzwqRox-FYppb3GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:de:87:b6:39:0b:9a:41:d3:b0:ce:1f:a8:7d:a9:b2:3f:6b:
4d:ff:62:4c:21:5b:30:f0:71:4f:60:53:47:92:4b:d6:95:9e:
82:81:6a:a6:18:a1:8b:19:30:52:ae:76:26:e0:a0:42:4c:96:
4b:2d:a5:f2:ff:d2:80:1e:1a:7f:98:b2:29:a5:61:ea:a5:fb:
b2:d2:c6:77:36:29:5b:03:1f:48:87:e4:d5:ad:de:38:7e:42:
d8:a8:f7:22:09:a0:8f:2c:7d:a4:24:0d:a2:9b:3e:9c:7a:33:
54:ae:86:4c:b6:4d:46:a4:cf:b0:ec:34:b8:73:e4:61:c3:1f:
11:24:2e:57:70:42:36:f3:fc:a1:64:99:ca:ed:7e:91:dd:d1:
7f:c6:8f:ee:61:f2:81:58:0d:b1:2e:7b:36:c3:16:04:07:34:
ed:e9:08:2c:bb:0e:16:84:62:db:0d:cd:34:ae:42:36:1e:b4:
f4:48:44:80:07:04:04:cc:ac:55:45:17:7d:a9:25:15:fc:69:
13:f7:fa:7d:05:42:32:e5:b1:5b:7e:b5:68:f1:e1:f6:57:04:
73:24:cc:fe:63:ef:bf:4d:d5:c3:28:ad:ba:e5:60:65:dd:c0:
65:4c:63:f5:50:d2:4b:e7:28:9f:64:fc:79:57:9a:a8:d0:e0:
fe:3f:49:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ14Reg8KOU0fNBHk8A0Qfe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDEwMTY0MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTU5YTljZjJlNjE2NDJiMjRjZjBhOTFhMzFmODU2MjlhNWJkYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K0q1oNtld4TWhhvpqEtdWn0Xxnq
HNlD0Vlp0iqBgGnnL0EBQYwDvD0rjFidbSn4/X5wLKVbMIJo0tHB3QdldW9cCa9C
NbYLbchkDJDY/EDvVa5cpKvYNnTqFLniORt/qxD6sadr6YVheaZDdxnsviLxLqEi
PzPlM2sUq4A+dJWcuNHdVCyUvMj+whRcOy9dWssW7CthrLBa/Rs218kQzNkt8ZAZ
5TsjYftn0GFtYfDoxEDJfMiM8rVoylSvoQuulg0O9Z+F9kMQ/N98mtMIgYO+iCbp
FD2dhl10A6B5Sr7i2cq8rX+qmwWfx/iPzDLTCxtWSDShyku7bemdopT6NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClZqc8uYWQrJM8KkaMfhWKaW9xkMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvS1ZtcHp5NWhaQ3NrendxUm94LUZZcHBiM0dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/sMA0G
CSqGSIb3DQEBCwUAA4IBAQBX3oe2OQuaQdOwzh+ofamyP2tN/2JMIVsw8HFPYFNH
kkvWlZ6CgWqmGKGLGTBSrnYm4KBCTJZLLaXy/9KAHhp/mLIppWHqpfuy0sZ3Nilb
Ax9Ih+TVrd44fkLYqPciCaCPLH2kJA2imz6cejNUroZMtk1GpM+w7DS4c+Rhwx8R
JC5XcEI28/yhZJnK7X6R3dF/xo/uYfKBWA2xLns2wxYEBzTt6Qgsuw4WhGLbDc00
rkI2HrT0SESABwQEzKxVRRd9qSUV/GkT9/p9BUIy5bFbfrVo8eH2VwRzJMz+Y++/
TdXDKK265WBl3cBlTGP1UNJL5yifZPx5V5qo0OD+P0kF
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:17:23 2026 by rpki-client