Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5oYYzm3xXdlzXsOFE7CX_ICUW2Y.roa
File: 5oYYzm3xXdlzXsOFE7CX_ICUW2Y.roa (raw, json)
Hash identifier: Du/Xi5QfEvUcLtrQTVnRB4FZgIcu8xH00MRKyhls6FA=
Subject key identifier: E6:86:18:CE:6D:F1:5D:D9:73:5E:C3:85:13:B0:97:FC:80:94:5B:66
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C420423116EC70F897920CEA63F95D6B3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5oYYzm3xXdlzXsOFE7CX_ICUW2Y.roa
Signing time: Mon 09 Feb 2026 10:48:13 +0000
ROA not before: Mon 09 Feb 2026 10:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 5.180.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:04:23:11:6e:c7:0f:89:79:20:ce:a6:3f:95:d6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 9 10:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e68618ce6df15dd9735ec38513b097fc80945b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:6b:2c:87:41:2e:34:6c:94:fc:2b:5e:bc:
4a:1d:36:aa:e5:c2:79:17:09:df:37:74:d5:cb:21:
8e:49:77:46:da:c1:a8:8a:21:50:a9:2b:fc:31:39:
3c:03:b2:6f:5e:3a:88:dd:10:30:d5:85:72:18:13:
ff:4e:7b:94:86:aa:ed:b6:df:04:3b:99:36:fd:77:
ea:25:3c:af:ba:1f:4a:de:45:52:a7:bc:17:3b:dc:
d3:56:d0:00:84:8b:63:1e:28:19:39:a0:f3:99:b1:
3e:9a:36:a1:ea:8c:82:e5:b6:84:ef:f0:97:59:8d:
02:43:ba:81:0a:e8:c0:fa:d2:d9:07:4c:14:4a:9a:
f2:17:54:c2:a7:89:2a:0d:0a:04:0a:c1:8a:4f:91:
70:b1:cd:e2:e5:39:5c:f3:d3:8a:1b:dc:e5:41:f6:
f5:72:2c:a6:7b:8c:cf:c1:d4:c4:2d:17:5c:64:45:
cd:0f:e5:bb:b1:91:bc:14:83:9b:f4:58:a2:19:22:
8f:34:e2:16:ab:7f:96:ee:3c:41:5f:d9:03:e5:27:
a2:79:92:39:f2:0d:e6:01:b9:73:c5:0b:e0:de:3d:
56:d4:c3:37:a1:3b:fb:60:ee:cf:15:f9:06:aa:fa:
ca:8f:c1:72:06:b0:7b:7c:63:a3:f8:d6:78:6c:d1:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:86:18:CE:6D:F1:5D:D9:73:5E:C3:85:13:B0:97:FC:80:94:5B:66
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5oYYzm3xXdlzXsOFE7CX_ICUW2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cf:7b:28:22:42:da:f6:b4:fe:19:b9:57:74:d0:65:5f:bc:
e4:53:e6:06:f0:c3:d9:63:74:8d:5f:51:9e:3b:54:a1:1f:5f:
1b:85:ac:fa:90:ab:21:07:37:38:f4:23:25:ee:6f:cf:ed:68:
79:45:b7:88:5d:87:ea:7a:20:a9:52:96:e7:00:4b:cc:cd:84:
a7:2f:f4:0d:05:4f:a3:44:d7:1a:79:91:18:e5:77:90:73:4e:
37:70:03:f5:6c:a6:4c:3c:4f:e7:a9:7b:cc:a9:08:98:00:46:
0b:2d:8f:bb:29:4b:b8:d7:7d:24:c7:aa:c1:75:98:c4:1b:5b:
42:d0:c2:30:2a:35:26:5b:aa:5a:10:19:77:56:83:70:13:b2:
bc:05:c6:f0:b8:84:2f:66:a7:fb:90:f4:1f:34:b2:43:eb:1b:
17:87:39:28:8c:bd:1c:67:1e:bb:db:b9:20:9f:46:e3:8e:55:
c1:eb:9b:f0:d8:9f:e8:72:79:3a:0a:c0:75:f4:65:4a:45:e4:
ac:f2:04:2c:47:ac:66:06:36:85:79:a0:b3:4c:a1:f6:86:fc:
e0:3b:d1:bc:34:35:5d:af:99:eb:b4:36:b2:98:ef:49:1f:20:
a0:e3:30:7a:1f:3b:c7:7e:ce:a2:9d:bc:13:9f:92:24:a3:13:
e2:a1:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:43 2026 by rpki-client