Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oMhcv17ZiQqiNzVDpsTiN5-QpoQ.roa
File: oMhcv17ZiQqiNzVDpsTiN5-QpoQ.roa (raw, json)
Hash identifier: V4tJ5FXrCoNkHPb4sxk+Xtg2VcKUbNuteadmhsCUEKM=
Subject key identifier: A0:C8:5C:BF:5E:D9:89:0A:A2:37:35:43:A6:C4:E2:37:9F:90:A6:84
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C333C8B3E210921F5C62CD1065E5780C6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oMhcv17ZiQqiNzVDpsTiN5-QpoQ.roa
Signing time: Fri 06 Feb 2026 13:55:31 +0000
ROA not before: Fri 06 Feb 2026 13:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197450
IP address blocks: 5.230.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:33:3c:8b:3e:21:09:21:f5:c6:2c:d1:06:5e:57:80:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 13:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0c85cbf5ed9890aa2373543a6c4e2379f90a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:f2:d9:7b:aa:fe:5a:b1:b3:4a:fd:c9:fb:
b9:b4:a1:fa:25:de:34:32:e3:c3:16:79:09:75:b1:
fc:bc:7c:83:dd:1f:78:34:db:39:7f:c9:78:02:45:
52:ac:00:50:3c:e5:7b:a8:f6:17:7b:49:cd:63:46:
53:af:31:e7:bd:c3:01:ed:fe:11:68:d8:c1:ad:1c:
0b:f4:24:1c:5f:26:37:ae:62:e5:f1:c6:a7:da:f3:
d5:8f:0b:ed:62:ee:ab:07:8e:9c:87:60:d1:39:14:
cf:4c:6a:18:6a:af:75:15:7e:f1:f3:8d:da:c7:bb:
69:55:2a:c8:2c:cd:3a:59:5b:fd:3a:c7:ae:7e:bf:
9d:6d:c9:7f:d5:44:44:e5:c4:05:b9:db:63:d6:a5:
19:ad:27:99:d7:1c:ef:a8:32:fc:69:65:42:6c:6c:
90:b3:63:43:dc:76:0c:b2:6b:32:42:b6:24:55:54:
7e:63:38:bf:75:29:d6:76:d8:0c:20:c7:43:98:f7:
fc:18:ad:9b:2f:0d:d0:19:89:1e:10:cd:ac:39:65:
bf:db:bc:54:93:10:0f:b4:68:dc:8f:1d:5d:6c:de:
1e:4b:2a:6c:c7:65:95:7c:25:f3:ac:b8:8c:94:98:
87:62:11:f6:75:ef:dc:74:22:59:37:a4:78:4e:63:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:5C:BF:5E:D9:89:0A:A2:37:35:43:A6:C4:E2:37:9F:90:A6:84
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oMhcv17ZiQqiNzVDpsTiN5-QpoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b3:c4:48:b6:7f:ac:b6:fd:0f:46:f0:5f:aa:1a:62:2e:14:
56:28:a7:ce:f3:d4:d1:ab:0c:06:3a:42:e2:c9:ec:63:45:cc:
5c:1d:5c:31:d2:41:2b:ba:46:00:33:21:3c:f9:5d:99:15:c3:
30:85:62:c2:c6:e2:95:74:ff:f0:8e:52:a8:fd:fb:6b:5b:d6:
a6:2a:27:d1:44:6e:be:27:6e:96:19:a8:9b:bc:0d:5f:72:96:
5e:c3:b0:65:6f:81:8c:c3:9f:f7:3d:53:64:2d:cc:c2:9e:e7:
ac:2a:bd:94:58:4f:67:b4:62:68:9e:6e:80:59:83:d7:d5:46:
32:20:ee:c6:32:f5:89:30:b5:aa:57:90:b2:06:c5:d3:9b:99:
81:3c:00:a1:b8:29:a3:a2:1e:c5:84:2c:99:2c:d3:c0:e7:09:
9b:69:79:7e:83:51:15:ad:92:c5:51:a6:09:71:06:4f:1b:35:
4b:1b:1f:ce:76:d9:d8:72:d3:ae:92:11:5b:0c:02:fa:c0:45:
df:11:ad:49:e2:82:a5:1b:91:45:c9:f7:cb:6e:81:56:e1:e6:
1d:08:b6:e2:2b:23:aa:8c:32:2c:e8:c8:f8:8d:16:46:01:58:
ec:f2:23:3c:f0:5b:de:77:05:a6:af:bc:d1:71:a9:bf:22:9a:
17:39:0d:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwzPIs+IQkh9cYs0QZeV4DGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjA2MTM1NTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGM4NWNiZjVlZDk4OTBhYTIzNzM1NDNhNmM0ZTIzNzlmOTBhNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33/y2Xuq/lqxs0r9yfu5tKH6Jd40
MuPDFnkJdbH8vHyD3R94NNs5f8l4AkVSrABQPOV7qPYXe0nNY0ZTrzHnvcMB7f4R
aNjBrRwL9CQcXyY3rmLl8can2vPVjwvtYu6rB46ch2DRORTPTGoYaq91FX7x843a
x7tpVSrILM06WVv9Oseufr+dbcl/1URE5cQFudtj1qUZrSeZ1xzvqDL8aWVCbGyQ
s2ND3HYMsmsyQrYkVVR+Yzi/dSnWdtgMIMdDmPf8GK2bLw3QGYkeEM2sOWW/27xU
kxAPtGjcjx1dbN4eSypsx2WVfCXzrLiMlJiHYhH2de/cdCJZN6R4TmNfWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDIXL9e2YkKojc1Q6bE4jefkKaEMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvb01oY3YxN1ppUXFpTnpWRHBzVGlONS1RcG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABea4MA0G
CSqGSIb3DQEBCwUAA4IBAQChs8RItn+stv0PRvBfqhpiLhRWKKfO89TRqwwGOkLi
yexjRcxcHVwx0kErukYAMyE8+V2ZFcMwhWLCxuKVdP/wjlKo/ftrW9amKifRRG6+
J26WGaibvA1fcpZew7Blb4GMw5/3PVNkLczCnuesKr2UWE9ntGJonm6AWYPX1UYy
IO7GMvWJMLWqV5CyBsXTm5mBPAChuCmjoh7FhCyZLNPA5wmbaXl+g1EVrZLFUaYJ
cQZPGzVLGx/OdtnYctOukhFbDAL6wEXfEa1J4oKlG5FFyffLboFW4eYdCLbiKyOq
jDIs6Mj4jRZGAVjs8iM88FvedwWmr7zRcam/IpoXOQ0B
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:58 2026 by rpki-client