Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0URCnYEPfi-dd3tH-TuBqB1iO54.roa
File: 0URCnYEPfi-dd3tH-TuBqB1iO54.roa (raw, json)
Hash identifier: wSSzGdLGjXJDev/dSZG5MEQOAvJrwUlFEdqai9UFuJc=
Subject key identifier: D1:44:42:9D:81:0F:7E:2F:9D:77:7B:47:F9:3B:81:A8:1D:62:3B:9E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E00A9B94AB242419190AEACC2AF005C47
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0URCnYEPfi-dd3tH-TuBqB1iO54.roa
Signing time: Thu 07 May 2026 04:19:43 +0000
ROA not before: Thu 07 May 2026 04:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:a9:b9:4a:b2:42:41:91:90:ae:ac:c2:af:00:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 7 04:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d144429d810f7e2f9d777b47f93b81a81d623b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:50:b6:59:bf:5c:60:a0:4d:0d:66:14:b6:37:
9d:c5:bd:df:31:8c:b6:d5:30:4f:4f:b0:e8:45:6e:
db:5e:31:e0:b0:3b:b4:6b:d1:e4:41:ad:84:09:38:
38:a7:d0:13:5b:f9:68:4d:90:83:3c:06:5f:9d:58:
09:46:3e:4e:50:63:4e:86:c0:cf:85:10:c6:58:bc:
1c:35:05:22:d2:b2:d0:7c:e5:1d:cf:30:81:b0:06:
f7:ec:ea:65:1c:8b:56:94:e5:e6:fd:cd:5e:4f:c2:
c3:45:ef:58:53:7d:70:b7:85:c9:46:a7:d0:6a:9f:
f5:a9:b3:ce:d2:83:75:83:ef:16:0e:21:43:91:0a:
81:db:2a:82:e4:c1:e9:19:cb:9d:f3:d8:b7:f5:5e:
3f:b3:98:e2:b0:f2:97:9c:64:4f:0f:9e:65:0f:05:
54:8d:30:01:3b:31:e1:72:da:47:3c:9c:9c:25:a9:
21:70:56:83:c6:5a:d3:98:45:9e:78:97:36:df:34:
df:b0:06:b7:9e:a5:e9:c4:9b:69:1d:fb:78:31:d9:
5d:24:b0:a5:2d:b0:8d:fb:9c:7e:7b:18:e7:17:58:
5f:9d:6c:a0:f8:72:df:46:03:23:01:f4:57:ea:57:
56:f2:02:56:d2:d3:e3:81:80:3a:45:ab:b0:2d:c2:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:42:9D:81:0F:7E:2F:9D:77:7B:47:F9:3B:81:A8:1D:62:3B:9E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0URCnYEPfi-dd3tH-TuBqB1iO54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e1:26:5a:94:3a:7b:bb:17:d5:a3:12:9f:1b:b7:3d:14:56:
af:8f:c2:b8:1f:5a:4b:bc:c9:69:cf:c8:aa:42:5d:68:52:20:
c6:31:ea:6e:85:12:25:c4:c6:2e:c2:9c:17:14:ea:21:10:f0:
a7:c3:ee:e2:6b:e3:01:47:37:ef:83:fc:b7:35:95:8d:c0:8a:
03:a6:06:db:a2:da:50:7f:53:77:51:17:93:5e:e5:65:b1:6e:
2a:70:3f:2e:a7:d7:70:0a:4c:d4:d2:2d:b9:8a:8c:db:00:bd:
3d:97:e2:4f:e6:89:50:38:74:64:fd:6c:39:f8:fa:f5:38:52:
c3:f9:b3:fd:23:24:08:18:44:a6:9c:b9:6f:13:fa:ae:73:36:
16:9b:59:76:cc:a4:63:de:3f:12:bb:a1:9b:54:ef:56:7f:26:
b7:11:03:80:fd:a7:a2:a4:da:03:21:06:13:56:11:d5:79:7a:
07:25:eb:b6:8f:ec:14:02:8d:de:9c:5c:e7:94:6a:00:c3:46:
2d:2f:99:8a:13:88:3d:33:be:f7:bc:7f:e5:8b:f7:b6:09:e6:
12:11:6c:ee:a9:0a:a7:a4:d1:d8:73:29:ec:1d:e8:91:da:e4:
94:67:42:1c:a7:c1:bd:7a:f9:23:8e:b3:b1:55:4b:8b:07:5b:
c7:47:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:53 2026 by rpki-client