Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/RmvPAWbj_XcB62TPDMPL7nVrWRg.roa
File: RmvPAWbj_XcB62TPDMPL7nVrWRg.roa (raw, json)
Hash identifier: dg98lrwCVVp6N+sZOL3UlutJNWjeHKVRwUZrHFAjOcw=
Subject key identifier: 46:6B:CF:01:66:E3:FD:77:01:EB:64:CF:0C:C3:CB:EE:75:6B:59:18
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01A02335DE512040F14B73F1B46EEE7C2FD5
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/RmvPAWbj_XcB62TPDMPL7nVrWRg.roa
Signing time: Fri 21 Aug 2026 07:25:27 +0000
ROA not before: Fri 21 Aug 2026 07:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213269
IP address blocks: 164.5.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:35:de:51:20:40:f1:4b:73:f1:b4:6e:ee:7c:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Aug 21 07:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=466bcf0166e3fd7701eb64cf0cc3cbee756b5918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:d4:b0:94:81:41:7e:be:5f:dd:8c:b0:bd:
fa:b3:60:0c:b3:96:80:c7:80:a7:f2:93:14:5b:4a:
99:23:f8:1d:82:44:46:eb:65:95:92:60:be:af:80:
8a:60:ea:fb:98:be:1f:88:f1:28:57:32:34:ef:1f:
d4:27:d6:c7:59:c8:77:fe:c9:f0:a3:db:7c:ff:3d:
15:b8:18:2e:d9:54:7f:15:7e:ad:16:a3:d0:14:3b:
6d:c0:48:f2:e4:71:f2:2e:f6:49:dc:a9:fd:10:15:
b6:4b:96:19:98:77:c5:7a:38:f8:09:79:a9:3f:ab:
aa:62:ba:a5:3d:37:94:53:84:16:b6:8a:d7:f6:58:
bb:c9:f8:34:7d:63:43:68:34:b7:d1:7d:e5:df:07:
3d:7b:6b:8a:28:24:ef:64:e8:97:df:3e:2f:ad:61:
8b:9e:7d:70:c1:0d:ec:52:e6:38:c7:ad:bd:91:d8:
74:79:a8:d4:7e:b1:d3:04:fc:54:14:df:69:b5:d1:
65:a3:e4:14:9a:36:92:74:70:cf:78:f5:c5:a1:53:
f0:15:09:9a:a7:fb:50:2d:6f:d0:ba:18:5f:e5:06:
59:b3:da:d4:7f:7d:8d:76:4f:ff:18:4d:34:f2:93:
6c:d7:cd:ef:41:19:fe:9d:ab:a4:cd:b0:26:ba:01:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6B:CF:01:66:E3:FD:77:01:EB:64:CF:0C:C3:CB:EE:75:6B:59:18
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/RmvPAWbj_XcB62TPDMPL7nVrWRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:bd:09:c9:cf:b7:b8:d5:3e:a9:15:3b:06:29:0b:d8:69:ef:
4b:a9:79:91:fe:fb:c6:cc:4d:c5:5d:a3:1c:9f:4b:55:36:25:
42:17:e2:4f:b6:ed:11:79:ac:b9:71:ca:64:9e:0d:3c:99:b5:
21:ce:ba:04:67:83:79:5e:ae:09:69:34:99:f6:f1:ac:18:ee:
8a:a4:5d:b4:32:cb:59:ee:5c:06:78:81:ef:96:cd:30:43:48:
7f:d9:c2:68:53:e5:06:c7:ee:44:83:58:99:b6:c6:25:ae:50:
50:14:60:81:a2:89:dc:4a:55:39:37:50:66:dd:9f:4c:15:3b:
ab:26:b5:31:c0:cf:0e:81:3c:c9:1e:f0:f8:71:27:1a:03:ce:
a9:9e:07:87:7c:73:3e:67:0e:5a:9e:c1:1c:63:e4:3d:91:a4:
c1:70:17:19:32:05:55:ae:ca:67:a6:64:e5:b0:19:c2:20:d4:
bb:ae:45:65:ab:02:f1:f3:dc:7f:51:07:70:e6:1a:7d:08:f9:
21:84:97:a8:81:20:bb:30:4c:80:8c:a1:fb:49:ac:1e:82:a7:
65:bd:1f:8c:6a:78:f1:6a:aa:eb:c9:2d:2d:bb:27:2b:4e:bc:
60:94:a8:73:0f:6c:9a:37:62:f3:25:05:51:b4:f6:ff:01:cd:
9e:18:51:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAjNd5RIEDxS3PxtG7ufC/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzFiY2Y5MjNjNWYyNWNhZmJkYWJkZmRkNDZlNTExZjk1
ZGYwZDEwHhcNMjYwODIxMDcyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjZiY2YwMTY2ZTNmZDc3MDFlYjY0Y2YwY2MzY2JlZTc1NmI1OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotHUsJSBQX6+X92MsL36s2AMs5aA
x4Cn8pMUW0qZI/gdgkRG62WVkmC+r4CKYOr7mL4fiPEoVzI07x/UJ9bHWch3/snw
o9t8/z0VuBgu2VR/FX6tFqPQFDttwEjy5HHyLvZJ3Kn9EBW2S5YZmHfFejj4CXmp
P6uqYrqlPTeUU4QWtorX9li7yfg0fWNDaDS30X3l3wc9e2uKKCTvZOiX3z4vrWGL
nn1wwQ3sUuY4x629kdh0eajUfrHTBPxUFN9ptdFlo+QUmjaSdHDPePXFoVPwFQma
p/tQLW/Quhhf5QZZs9rUf32Ndk//GE008pNs183vQRn+naukzbAmugHiXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZrzwFm4/13AetkzwzDy+51a1kYMB8GA1UdIwQY
MBaAFLoxvPkjxfJcr72r391G5RH5XfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83NmE3ZjEtNzQ4ZC00MDZjLWE1MWYt
MWJhMzQzZjE3ZWMyLzEvUm12UEFXYmpfWGNCNjJUUERNUEw3blZyV1JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83NmE3ZjEtNzQ4ZC00MDZjLWE1MWYtMWJhMzQzZjE3ZWMy
LzEvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpAXAMA0G
CSqGSIb3DQEBCwUAA4IBAQBuvQnJz7e41T6pFTsGKQvYae9LqXmR/vvGzE3FXaMc
n0tVNiVCF+JPtu0Reay5ccpkng08mbUhzroEZ4N5Xq4JaTSZ9vGsGO6KpF20MstZ
7lwGeIHvls0wQ0h/2cJoU+UGx+5Eg1iZtsYlrlBQFGCBooncSlU5N1Bm3Z9MFTur
JrUxwM8OgTzJHvD4cScaA86pngeHfHM+Zw5ansEcY+Q9kaTBcBcZMgVVrspnpmTl
sBnCINS7rkVlqwLx89x/UQdw5hp9CPkhhJeogSC7MEyAjKH7SawegqdlvR+Manjx
aqrryS0tuycrTrxglKhzD2yaN2LzJQVRtPb/Ac2eGFEp
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:20:47 2026 by rpki-client