Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/h3vdi0NhcCf_57whxIZzeZIDXbg.roa
File: h3vdi0NhcCf_57whxIZzeZIDXbg.roa (raw, json)
Hash identifier: oNWSngDa5LKcuxpGud4JODauXgOppH5IG70zE9GYBlE=
Subject key identifier: 87:7B:DD:8B:43:61:70:27:FF:E7:BC:21:C4:86:73:79:92:03:5D:B8
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A0BCFA7C2D9E9C2BABD139688CB8BCCF0E
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/h3vdi0NhcCf_57whxIZzeZIDXbg.roa
Signing time: Sun 20 Sep 2026 04:02:07 +0000
ROA not before: Sun 20 Sep 2026 04:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 212.180.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:fa:7c:2d:9e:9c:2b:ab:d1:39:68:8c:b8:bc:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Sep 20 04:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=877bdd8b43617027ffe7bc21c486737992035db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:fb:a2:51:1a:2f:fe:2d:bf:31:35:01:67:
2e:08:0a:5f:29:1a:04:e0:3d:a8:cb:ad:73:7d:df:
f7:b3:9b:bc:0a:0b:54:d3:33:db:69:86:f5:02:3d:
e4:0f:1d:45:ab:f9:ef:b9:5d:e7:d4:d6:55:ca:57:
de:da:7e:ad:ca:f9:81:12:3c:8c:85:62:23:68:eb:
76:2f:f9:5f:da:c7:1d:29:f9:5e:86:a9:eb:74:e6:
82:29:9e:fe:71:a5:fb:91:f9:fd:9c:37:e7:69:a6:
73:cb:94:71:08:d0:57:72:67:8b:75:65:ca:1f:48:
e3:da:06:58:45:10:ce:08:2a:2d:31:a7:a0:b1:15:
00:a9:d0:c1:f7:74:81:1a:3b:1e:4e:76:ee:0c:c1:
a9:d6:0a:c6:97:27:44:be:4c:46:24:15:37:8c:dd:
8b:0d:45:4b:62:72:19:44:19:ee:8b:79:47:81:d3:
15:a2:75:77:8c:f4:39:f1:76:9d:db:17:b6:e7:46:
13:68:27:ce:eb:37:9a:71:60:e9:3c:30:28:a4:8c:
c5:fa:9a:fb:81:a6:f5:66:dc:85:e1:f7:04:8c:a7:
0a:24:5c:49:92:ec:c1:58:05:ac:4d:e1:db:7c:cb:
76:98:95:39:26:dd:fe:f9:e8:85:13:b4:83:8a:96:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:DD:8B:43:61:70:27:FF:E7:BC:21:C4:86:73:79:92:03:5D:B8
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/h3vdi0NhcCf_57whxIZzeZIDXbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.127.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5f:9c:b3:0f:cf:02:08:f6:81:30:c7:61:d7:4a:7d:05:4e:
bb:6f:9c:96:6d:9c:62:3b:29:21:3a:69:7b:21:04:82:f6:3d:
1d:d5:cb:61:10:8b:e6:65:b0:db:84:3e:77:9a:c4:ec:f9:2d:
6a:70:f5:b6:14:d1:3e:19:7c:82:3b:4f:62:3b:98:05:59:11:
e1:57:99:2b:49:0c:f6:9a:bd:44:31:87:74:56:25:bd:c7:6b:
73:3f:3a:77:d5:ae:12:90:72:64:65:0d:5a:59:96:e9:63:db:
d0:a4:af:5f:de:44:70:77:d7:28:c0:d9:75:d6:e1:83:3c:2c:
77:60:6d:7e:46:d4:2d:24:f8:10:24:ad:bb:85:92:63:86:ed:
58:41:78:e3:44:c9:73:72:ed:12:d4:50:14:f4:80:33:0f:78:
bc:b4:c1:69:90:f3:30:da:7a:83:39:b0:cf:f4:43:08:3f:a9:
09:11:67:56:4d:da:77:1f:ea:e2:0d:59:a0:47:5f:10:c5:d8:
a1:1e:51:19:45:2c:2c:dc:7a:bb:34:a4:d4:ed:19:bc:ba:46:
06:29:a9:fc:42:19:8c:2c:ff:a7:00:53:db:27:77:1e:75:63:
b7:3e:2a:7e:a6:94:ec:c1:51:f0:70:c7:f2:90:49:b9:9f:34:
68:c9:44:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC8+nwtnpwrq9E5aIy4vM8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwOTIwMDQwMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzdiZGQ4YjQzNjE3MDI3ZmZlN2JjMjFjNDg2NzM3OTkyMDM1ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWX7olEaL/4tvzE1AWcuCApfKRoE
4D2oy61zfd/3s5u8CgtU0zPbaYb1Aj3kDx1Fq/nvuV3n1NZVylfe2n6tyvmBEjyM
hWIjaOt2L/lf2scdKflehqnrdOaCKZ7+caX7kfn9nDfnaaZzy5RxCNBXcmeLdWXK
H0jj2gZYRRDOCCotMaegsRUAqdDB93SBGjseTnbuDMGp1grGlydEvkxGJBU3jN2L
DUVLYnIZRBnui3lHgdMVonV3jPQ58Xad2xe250YTaCfO6zeacWDpPDAopIzF+pr7
gab1ZtyF4fcEjKcKJFxJkuzBWAWsTeHbfMt2mJU5Jt3++eiFE7SDipbrVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFId73YtDYXAn/+e8IcSGc3mSA124MB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvaDN2ZGkwTmhjQ2ZfNTd3aHhJWnplWklEWGJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LR/MA0G
CSqGSIb3DQEBCwUAA4IBAQCCX5yzD88CCPaBMMdh10p9BU67b5yWbZxiOykhOml7
IQSC9j0d1cthEIvmZbDbhD53msTs+S1qcPW2FNE+GXyCO09iO5gFWRHhV5krSQz2
mr1EMYd0ViW9x2tzPzp31a4SkHJkZQ1aWZbpY9vQpK9f3kRwd9cowNl11uGDPCx3
YG1+RtQtJPgQJK27hZJjhu1YQXjjRMlzcu0S1FAU9IAzD3i8tMFpkPMw2nqDObDP
9EMIP6kJEWdWTdp3H+riDVmgR18QxdihHlEZRSws3Hq7NKTU7Rm8ukYGKan8QhmM
LP+nAFPbJ3cedWO3Pip+ppTswVHwcMfykEm5nzRoyUQ0
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:59 2026 by rpki-client