Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa
File: FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa (raw, json)
Hash identifier: kxhMJxapdCPykD+F2D9TyndT9oVuTTd+gUFsUUrezQc=
Subject key identifier: 16:C5:30:4C:A1:28:7A:E2:98:32:69:E4:FE:65:96:CB:AF:AA:74:0A
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A0A8DCF24A9B42CE2576D42DBB573C39A4
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa
Signing time: Wed 16 Sep 2026 06:17:27 +0000
ROA not before: Wed 16 Sep 2026 06:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.10.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:dc:f2:4a:9b:42:ce:25:76:d4:2d:bb:57:3c:39:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Sep 16 06:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c5304ca1287ae2983269e4fe6596cbafaa740a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:68:3c:e0:b1:5c:0a:eb:a8:39:69:4b:31:
31:aa:bc:4b:46:02:11:77:0e:5d:70:85:03:1a:fe:
9b:a5:3e:6c:22:09:9b:c8:40:f6:ad:24:b6:95:94:
67:d0:ca:49:c5:a7:78:85:0d:db:05:d4:30:e5:f3:
6b:9b:ed:99:7f:4b:ae:d0:2b:44:db:c3:2b:3b:d7:
9e:25:6c:7d:cf:42:db:e6:01:45:5c:cd:04:a9:ec:
b7:c5:ae:aa:e2:5d:57:05:29:9b:79:f2:29:0b:20:
4d:4f:99:fb:10:6c:19:58:89:2a:bc:fe:e1:3b:eb:
97:1d:62:b3:30:33:57:7a:95:46:94:8e:d9:ea:ba:
15:da:c1:5c:6a:a1:05:dd:ca:11:7a:50:ea:b9:3d:
e9:45:ae:4f:fc:9e:b5:cb:ba:22:4c:9b:38:3f:04:
49:38:24:27:38:27:11:53:fa:0c:d7:f2:d4:f7:8f:
d4:09:5b:66:f5:82:19:64:28:4a:36:0e:36:78:18:
99:bc:91:ae:57:65:90:45:45:67:30:45:b0:cf:45:
4e:3c:c6:e0:6c:db:3b:0c:8e:6e:66:1d:db:0a:89:
ee:05:00:5d:70:62:8f:86:38:49:49:9f:ec:41:c3:
f9:9c:74:bc:7f:1d:7d:22:8e:b8:f6:75:68:f2:8d:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:30:4C:A1:28:7A:E2:98:32:69:E4:FE:65:96:CB:AF:AA:74:0A
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
01:98:97:4f:f0:08:d4:8a:83:b9:92:71:98:e6:9a:7b:e2:78:
a6:8a:e5:ad:a8:c2:81:88:8d:27:36:af:ae:0a:6f:9a:06:1a:
b0:6b:98:8c:84:29:a2:83:48:57:2b:b3:bb:12:5a:bd:1d:72:
e3:ad:db:05:e1:ac:9b:33:9b:34:f6:b3:f7:da:7e:ec:d8:ba:
90:29:7c:e2:bb:48:e0:51:ff:01:9d:fc:d2:5e:1a:b0:b9:4a:
7b:3e:8d:8d:dc:3c:0e:9d:61:24:52:a9:c5:0f:5a:e3:22:90:
a1:4e:ef:02:62:2b:51:dc:ca:b8:4b:6a:58:19:4c:9b:1d:7a:
df:68:77:bd:a0:13:46:5e:39:c4:a6:db:e6:8e:72:4a:39:09:
e5:04:75:f3:e8:d8:21:31:df:b8:0e:02:f7:fe:e0:05:d0:88:
68:8f:64:b4:f0:4a:fa:0f:d8:cd:7d:58:b8:f6:72:e3:1a:2d:
26:62:3b:8a:fa:c6:90:6f:b2:4e:7f:5b:ed:7e:95:0c:94:87:
07:36:44:ef:f1:4d:93:8d:67:72:5e:21:b9:8f:07:0a:6b:a9:
50:ed:1f:f5:1c:28:ee:82:d3:97:b4:56:df:3b:80:03:70:66:
f3:39:bf:2e:57:9d:aa:c7:92:6f:00:ac:df:ba:37:9d:b9:61:
0f:9f:f6:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCo3PJKm0LOJXbULbtXPDmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx
ZWUyZDMwHhcNMjYwOTE2MDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM1MzA0Y2ExMjg3YWUyOTgzMjY5ZTRmZTY1OTZjYmFmYWE3NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJoPOCxXArrqDlpSzExqrxLRgIR
dw5dcIUDGv6bpT5sIgmbyED2rSS2lZRn0MpJxad4hQ3bBdQw5fNrm+2Zf0uu0CtE
28MrO9eeJWx9z0Lb5gFFXM0Eqey3xa6q4l1XBSmbefIpCyBNT5n7EGwZWIkqvP7h
O+uXHWKzMDNXepVGlI7Z6roV2sFcaqEF3coRelDquT3pRa5P/J61y7oiTJs4PwRJ
OCQnOCcRU/oM1/LU94/UCVtm9YIZZChKNg42eBiZvJGuV2WQRUVnMEWwz0VOPMbg
bNs7DI5uZh3bConuBQBdcGKPhjhJSZ/sQcP5nHS8fx19Io649nVo8o2kBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBbFMEyhKHrimDJp5P5llsuvqnQKMB8GA1UdIwQY
MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt
NTFmNWZmODFjMTE3LzEvRnNVd1RLRW9ldUtZTW1ua19tV1d5Ni1xZEFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3
LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADmYKAwQA
ckX1MA0GCSqGSIb3DQEBCwUAA4IBAQABmJdP8AjUioO5knGY5pp74nimiuWtqMKB
iI0nNq+uCm+aBhqwa5iMhCmig0hXK7O7Elq9HXLjrdsF4aybM5s09rP32n7s2LqQ
KXziu0jgUf8BnfzSXhqwuUp7Po2N3DwOnWEkUqnFD1rjIpChTu8CYitR3Mq4S2pY
GUybHXrfaHe9oBNGXjnEptvmjnJKOQnlBHXz6NghMd+4DgL3/uAF0Ihoj2S08Er6
D9jNfVi49nLjGi0mYjuK+saQb7JOf1vtfpUMlIcHNkTv8U2TjWdyXiG5jwcKa6lQ
7R/1HCjugtOXtFbfO4ADcGbzOb8uV52qx5JvAKzfujeduWEPn/b2
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:32 2026 by rpki-client