Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-5AzWCI6blcjn296O-eolo8GU00.roa
File: 1-5AzWCI6blcjn296O-eolo8GU00.roa (raw, json)
Hash identifier: acUzNCfBDIOWeD49PjsAWzkWsWz9auHnnkX7Us4vDpc=
Subject key identifier: FB:90:33:58:22:3A:6E:57:23:9F:6F:7A:3B:E7:A8:96:8F:06:53:4D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019DA4736C4240E8CA6C9C19CCC3F25297DA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-5AzWCI6blcjn296O-eolo8GU00.roa
Signing time: Sun 19 Apr 2026 06:35:20 +0000
ROA not before: Sun 19 Apr 2026 06:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:73:6c:42:40:e8:ca:6c:9c:19:cc:c3:f2:52:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 19 06:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb903358223a6e57239f6f7a3be7a8968f06534d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:d1:b0:de:99:74:1c:61:c2:8b:16:0c:e2:
56:43:5c:c2:7a:a3:86:5d:1c:94:a9:67:53:ef:47:
5a:1b:0b:ab:9f:25:2c:c9:11:88:b1:23:07:b2:f6:
72:fd:ce:78:d3:82:41:82:ca:a5:b4:a1:d6:2e:e3:
c9:aa:36:c2:c8:e9:eb:45:52:78:fd:1c:6b:82:6c:
0c:91:b3:7d:8f:9b:81:11:52:fb:99:2b:64:f9:ba:
54:4b:84:40:43:80:59:07:9f:c9:c1:f3:5a:6d:ea:
d1:1d:e9:36:0f:4c:f9:71:77:c0:ae:73:6e:a0:b7:
34:0e:c9:75:fb:e2:3b:db:d9:57:d9:b2:9d:41:50:
ff:37:fb:fa:23:a1:4d:05:66:5b:37:af:69:06:71:
3a:1a:f5:9c:62:0c:65:ed:76:ca:5b:88:2e:34:22:
94:7c:e6:ab:d0:62:61:e9:65:ee:cd:33:0a:2e:d3:
f7:5c:9d:31:63:94:56:46:a1:9d:ab:6d:1d:fe:5d:
0a:0b:b7:46:f7:6e:41:cc:87:61:48:0c:ee:11:b1:
03:ba:f7:6c:09:7b:f5:ae:64:34:60:ba:06:29:c1:
d0:44:b8:03:e6:41:eb:3c:cb:cf:af:b7:22:f4:a9:
a7:65:55:27:1c:d9:26:3b:52:8c:b8:53:78:87:47:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:33:58:22:3A:6E:57:23:9F:6F:7A:3B:E7:A8:96:8F:06:53:4D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-5AzWCI6blcjn296O-eolo8GU00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/24
176.57.54.0/24
176.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
59:33:0d:bc:f3:40:fc:c3:28:e8:59:06:66:7e:79:96:ca:64:
3b:13:c0:b2:2f:8e:fa:53:1e:35:ed:2e:6b:c6:e0:6c:18:21:
f7:78:1d:1e:48:1f:d1:f4:33:7f:eb:c6:37:65:f8:ac:7c:5c:
f6:e4:ec:9b:ff:94:27:65:dd:7c:60:22:89:36:1c:53:95:05:
91:05:a8:19:17:a0:b8:24:d0:d5:c2:27:77:69:3d:85:4c:c7:
d6:98:33:c7:6d:bf:b0:67:14:91:c6:ce:8b:ec:c9:12:78:c9:
e1:f9:ee:86:c8:85:63:8f:fc:45:ac:3c:65:69:62:37:19:ec:
74:07:38:d7:26:17:31:4f:18:42:9a:dc:cc:7a:8e:e9:98:fa:
f2:76:02:0d:df:1e:ac:08:51:c3:dd:5a:30:64:27:c6:ad:ac:
86:bd:5f:68:d7:9f:f1:6a:2b:74:df:8c:fd:97:a8:62:eb:22:
67:9c:80:aa:76:49:43:02:31:8f:a6:ad:fa:fe:4d:5b:f3:e5:
31:cf:72:32:62:8c:c6:71:ad:6b:ac:0c:80:4d:66:80:78:a6:
28:79:1e:b4:56:be:c5:d5:2c:8f:67:25:b6:f6:89:b4:ea:43:
94:62:86:8a:a7:40:08:46:ea:7b:40:53:aa:c1:a3:c7:a1:b9:
74:96:8a:b0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZ2kc2xCQOjKbJwZzMPyUpfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwNDE5MDYzNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjkwMzM1ODIyM2E2ZTU3MjM5ZjZmN2EzYmU3YTg5NjhmMDY1MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwejRsN6ZdBxhwosWDOJWQ1zCeqOG
XRyUqWdT70daGwurnyUsyRGIsSMHsvZy/c5404JBgsqltKHWLuPJqjbCyOnrRVJ4
/RxrgmwMkbN9j5uBEVL7mStk+bpUS4RAQ4BZB5/JwfNaberRHek2D0z5cXfArnNu
oLc0Dsl1++I729lX2bKdQVD/N/v6I6FNBWZbN69pBnE6GvWcYgxl7XbKW4guNCKU
fOar0GJh6WXuzTMKLtP3XJ0xY5RWRqGdq20d/l0KC7dG925BzIdhSAzuEbEDuvds
CXv1rmQ0YLoGKcHQRLgD5kHrPMvPr7ci9KmnZVUnHNkmO1KMuFN4h0d6YwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPuQM1giOm5XI59vejvnqJaPBlNNMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMS01QXpXQ0k2Ymxjam4yOTZPLWVvbG84R1UwMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRj
Yy8xL0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEALA5MAME
ALA5NgMEALA5PDANBgkqhkiG9w0BAQsFAAOCAQEAWTMNvPNA/MMo6FkGZn55lspk
OxPAsi+O+lMeNe0ua8bgbBgh93gdHkgf0fQzf+vGN2X4rHxc9uTsm/+UJ2XdfGAi
iTYcU5UFkQWoGReguCTQ1cInd2k9hUzH1pgzx22/sGcUkcbOi+zJEnjJ4fnuhsiF
Y4/8Raw8ZWliNxnsdAc41yYXMU8YQprczHqO6Zj68nYCDd8erAhRw91aMGQnxq2s
hr1faNef8WordN+M/ZeoYusiZ5yAqnZJQwIxj6at+v5NW/PlMc9yMmKMxnGta6wM
gE1mgHimKHketFa+xdUsj2cltvaJtOpDlGKGiqdACEbqe0BTqsGjx6G5dJaKsA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:13 2026 by rpki-client