Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gtPPsU6ryOZMl8hEKX3AzQyNyDk.roa
File: gtPPsU6ryOZMl8hEKX3AzQyNyDk.roa (raw, json)
Hash identifier: tuvErmDXUZjCd7lewpcajR/uB0HkKGwaS+GW+CNP0ac=
Subject key identifier: 82:D3:CF:B1:4E:AB:C8:E6:4C:97:C8:44:29:7D:C0:CD:0C:8D:C8:39
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C5DE85628A3E2ECA74CCD9F2BDD8BD29B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gtPPsU6ryOZMl8hEKX3AzQyNyDk.roa
Signing time: Sat 14 Feb 2026 20:47:13 +0000
ROA not before: Sat 14 Feb 2026 20:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201039
IP address blocks: 5.230.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5d:e8:56:28:a3:e2:ec:a7:4c:cd:9f:2b:dd:8b:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 14 20:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d3cfb14eabc8e64c97c844297dc0cd0c8dc839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:ff:62:58:48:9e:2f:ab:67:af:20:d0:46:
b0:b3:51:2f:20:61:fc:1f:bb:8b:58:7f:fe:6b:fc:
39:16:41:97:e5:ab:40:c5:f9:ce:d2:61:c1:b9:19:
16:dd:6e:44:a3:89:a5:fc:01:44:9d:e5:4d:49:a0:
64:cc:5e:f6:30:a2:37:07:c5:97:a7:1f:bc:b2:75:
d8:07:65:76:c0:7c:88:a1:f5:c0:7b:cd:34:2d:a0:
a4:39:81:7a:3f:09:ca:28:e9:19:ae:58:0f:8b:ec:
cf:df:5a:12:65:14:bc:9a:42:69:f7:7a:0f:64:6c:
d2:89:d1:30:12:29:4e:a5:5e:7c:23:24:7e:16:55:
3b:c6:5e:3f:b8:69:3a:9e:25:83:b3:fe:e6:a0:f1:
ef:12:29:41:29:cf:ec:d1:48:4a:45:0c:d4:f1:9d:
92:93:13:4b:86:9d:45:b4:3f:29:cd:6d:01:ae:db:
72:5d:39:cf:48:93:5a:94:c2:97:93:56:3d:fe:49:
69:5c:1a:2c:81:d6:10:dd:51:a9:3a:d9:4f:e8:46:
71:0e:1e:2d:9f:86:66:78:ba:95:02:37:97:94:76:
04:3e:34:36:c4:06:6e:b7:a5:1b:42:99:d0:d1:83:
b4:a3:47:a1:21:ed:6a:d5:02:52:18:8e:8d:a1:8c:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:CF:B1:4E:AB:C8:E6:4C:97:C8:44:29:7D:C0:CD:0C:8D:C8:39
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gtPPsU6ryOZMl8hEKX3AzQyNyDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.195.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d3:a3:b6:63:8b:75:cc:38:d3:b1:ca:9a:37:f8:c4:10:fb:
86:23:03:06:70:58:e5:49:2d:82:74:6a:6a:bf:79:b6:4f:53:
d9:15:50:13:78:41:41:7d:de:a6:ab:48:99:7a:fa:4c:72:55:
98:1a:91:99:67:82:81:55:e0:c3:e3:c0:8f:91:6d:8b:6c:5f:
46:56:ea:aa:66:d7:12:eb:e4:b9:73:f4:c6:8f:58:05:13:f1:
9c:f3:a4:34:44:cb:d1:21:78:8f:24:94:53:b6:18:1e:fa:78:
33:53:5b:e1:4b:bd:e3:60:6a:9b:fd:e0:e5:9b:91:d5:0f:84:
58:d3:2b:0a:bb:d0:fa:49:1c:0b:60:21:8f:a1:07:32:7d:45:
53:0a:68:2f:07:be:a0:c0:34:61:9b:22:2c:c8:e4:f0:81:93:
3d:e4:ce:f1:b9:ef:6b:ec:45:26:af:19:75:8f:24:3b:97:7e:
ac:cd:ca:20:82:b4:1c:96:75:88:06:dd:25:e5:7e:1e:68:eb:
8f:c3:2f:08:6f:82:72:b8:7e:77:22:3a:1b:fa:5e:a9:c4:15:
da:c2:52:60:d8:f3:f9:25:ad:72:38:86:08:04:b4:d0:33:16:
f4:a8:ee:f3:42:b4:52:09:1a:3b:6f:a7:c7:e3:74:76:8e:bc:
5a:6d:4a:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxd6FYoo+Lsp0zNnyvdi9KbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjE0MjA0NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmQzY2ZiMTRlYWJjOGU2NGM5N2M4NDQyOTdkYzBjZDBjOGRjODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1j/YlhIni+rZ68g0Eaws1EvIGH8
H7uLWH/+a/w5FkGX5atAxfnO0mHBuRkW3W5Eo4ml/AFEneVNSaBkzF72MKI3B8WX
px+8snXYB2V2wHyIofXAe800LaCkOYF6PwnKKOkZrlgPi+zP31oSZRS8mkJp93oP
ZGzSidEwEilOpV58IyR+FlU7xl4/uGk6niWDs/7moPHvEilBKc/s0UhKRQzU8Z2S
kxNLhp1FtD8pzW0BrttyXTnPSJNalMKXk1Y9/klpXBosgdYQ3VGpOtlP6EZxDh4t
n4ZmeLqVAjeXlHYEPjQ2xAZut6UbQpnQ0YO0o0ehIe1q1QJSGI6NoYwVdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILTz7FOq8jmTJfIRCl9wM0Mjcg5MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ3RQUHNVNnJ5T1pNbDhoRUtYM0F6UXlOeURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABebDMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ06O2Y4t1zDjTscqaN/jEEPuGIwMGcFjlSS2CdGpq
v3m2T1PZFVATeEFBfd6mq0iZevpMclWYGpGZZ4KBVeDD48CPkW2LbF9GVuqqZtcS
6+S5c/TGj1gFE/Gc86Q0RMvRIXiPJJRTthge+ngzU1vhS73jYGqb/eDlm5HVD4RY
0ysKu9D6SRwLYCGPoQcyfUVTCmgvB76gwDRhmyIsyOTwgZM95M7xue9r7EUmrxl1
jyQ7l36szcoggrQclnWIBt0l5X4eaOuPwy8Ib4JyuH53Ijob+l6pxBXawlJg2PP5
Ja1yOIYIBLTQMxb0qO7zQrRSCRo7b6fH43R2jrxabUr0
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:43 2026 by rpki-client