Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/S5QCT4EkTH8FvuSIes_VEIhiZkA.roa
File: S5QCT4EkTH8FvuSIes_VEIhiZkA.roa (raw, json)
Hash identifier: JR2b0Kga387kvAzMZAmQKgN9eQOulCmTTwiual5i2m4=
Subject key identifier: 4B:94:02:4F:81:24:4C:7F:05:BE:E4:88:7A:CF:D5:10:88:62:66:40
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019FAA480599089E48B93BE4B934F958AAC1
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/S5QCT4EkTH8FvuSIes_VEIhiZkA.roa
Signing time: Tue 28 Jul 2026 19:51:14 +0000
ROA not before: Tue 28 Jul 2026 19:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53363
IP address blocks: 146.19.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:48:05:99:08:9e:48:b9:3b:e4:b9:34:f9:58:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 28 19:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b94024f81244c7f05bee4887acfd51088626640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:42:33:ed:42:e3:99:73:75:7f:8a:cd:61:
da:a2:c5:b5:79:c7:0a:00:2c:d7:b5:b4:d8:51:16:
95:f0:71:fc:f6:b4:4b:5f:60:f8:d3:d5:9f:1e:cf:
1c:e8:09:44:e1:b1:40:e4:e8:df:06:d3:5b:d9:61:
ad:3c:08:aa:28:9c:ae:1f:17:43:e3:01:c1:a7:ae:
2f:18:a1:75:fa:56:d9:59:8f:61:3b:d5:89:3a:86:
c6:94:4a:fe:4f:1a:53:fe:ed:80:2a:f0:ce:66:77:
e2:a1:92:27:c4:6c:8e:c8:51:12:ab:1c:cc:96:f8:
d3:93:72:18:b7:93:b1:90:69:e6:27:0c:3c:79:d1:
bd:b3:fa:2e:fc:6f:16:3d:0f:9c:27:82:9f:15:7c:
f7:69:b3:17:74:2e:41:0c:d7:bd:85:e1:48:37:16:
a7:f8:d7:3b:fb:4d:07:12:67:dd:cc:dd:00:c0:05:
40:2a:10:fb:fd:22:d8:81:63:c8:8a:9a:8a:3f:65:
70:63:b6:36:09:e2:ae:22:b3:47:38:4a:6f:c8:69:
f3:74:89:57:34:ea:77:82:24:1a:09:cc:43:03:ae:
e7:a4:5c:ee:87:6c:90:32:b1:e6:9a:e3:73:d9:39:
ac:ea:9f:d6:19:79:0d:40:25:89:6d:32:c3:d0:8c:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:02:4F:81:24:4C:7F:05:BE:E4:88:7A:CF:D5:10:88:62:66:40
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/S5QCT4EkTH8FvuSIes_VEIhiZkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3e:15:87:6a:65:e2:2b:9e:88:8e:0e:91:21:34:8a:50:02:
db:5d:3f:76:39:6b:5d:b2:d8:20:57:d2:f0:55:d3:9f:5c:40:
41:7c:e9:1f:b3:ae:a9:7d:84:2c:b7:2a:84:d6:9b:b7:71:27:
03:b8:ee:f9:a4:8e:62:da:ef:d9:1b:fb:9e:5b:ef:bf:1c:4a:
41:33:88:62:e9:12:0d:48:5e:57:77:11:f7:43:5f:2e:b2:dc:
7d:58:a2:c5:ae:29:ab:2e:56:9c:2f:40:78:31:b0:96:35:f2:
3e:cc:a2:8e:52:cd:ff:a1:91:43:ea:74:be:74:fc:00:3a:7d:
5d:6b:70:48:96:0b:d1:e4:7e:d1:dc:ef:7d:00:7a:05:1c:00:
79:42:0d:a6:49:5a:8f:6a:49:66:9e:dc:f4:a7:51:73:3b:56:
e4:b6:ef:d0:dd:20:47:18:56:5d:63:22:e9:8e:b7:56:60:85:
cd:43:3f:29:2b:2e:31:ea:e3:4b:ad:54:f4:59:2a:17:15:96:
bd:72:93:17:f3:4a:35:8c:cd:57:b4:c9:dd:b2:f4:07:b7:63:
62:d1:73:08:72:1a:79:d7:62:73:1e:8e:db:11:8f:d3:b3:a0:
9d:c2:fb:8e:65:98:c8:2c:31:34:ee:a8:78:73:42:58:57:64:
06:b1:d6:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+qSAWZCJ5IuTvkuTT5WKrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwNzI4MTk1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjk0MDI0ZjgxMjQ0YzdmMDViZWU0ODg3YWNmZDUxMDg4NjI2NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYBCM+1C45lzdX+KzWHaosW1eccK
ACzXtbTYURaV8HH89rRLX2D409WfHs8c6AlE4bFA5OjfBtNb2WGtPAiqKJyuHxdD
4wHBp64vGKF1+lbZWY9hO9WJOobGlEr+TxpT/u2AKvDOZnfioZInxGyOyFESqxzM
lvjTk3IYt5OxkGnmJww8edG9s/ou/G8WPQ+cJ4KfFXz3abMXdC5BDNe9heFINxan
+Nc7+00HEmfdzN0AwAVAKhD7/SLYgWPIipqKP2VwY7Y2CeKuIrNHOEpvyGnzdIlX
NOp3giQaCcxDA67npFzuh2yQMrHmmuNz2Tms6p/WGXkNQCWJbTLD0IzfKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuUAk+BJEx/Bb7kiHrP1RCIYmZAMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvUzVRQ1Q0RWtUSDhGdnVTSWVzX1ZFSWhpWmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNqMA0G
CSqGSIb3DQEBCwUAA4IBAQCcPhWHamXiK56Ijg6RITSKUALbXT92OWtdstggV9Lw
VdOfXEBBfOkfs66pfYQstyqE1pu3cScDuO75pI5i2u/ZG/ueW++/HEpBM4hi6RIN
SF5XdxH3Q18ustx9WKLFrimrLlacL0B4MbCWNfI+zKKOUs3/oZFD6nS+dPwAOn1d
a3BIlgvR5H7R3O99AHoFHAB5Qg2mSVqPaklmntz0p1FzO1bktu/Q3SBHGFZdYyLp
jrdWYIXNQz8pKy4x6uNLrVT0WSoXFZa9cpMX80o1jM1XtMndsvQHt2Ni0XMIchp5
12JzHo7bEY/Ts6CdwvuOZZjILDE07qh4c0JYV2QGsdb/
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:47 2026 by rpki-client