Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6eFnBy2WuKihIDqPaFUCrpKWN4Y.roa
File: 6eFnBy2WuKihIDqPaFUCrpKWN4Y.roa (raw, json)
Hash identifier: tO4E78t1eiVYj2OkWS6+LgZ5A181MnU0CY+bEA+aKI0=
Subject key identifier: E9:E1:67:07:2D:96:B8:A8:A1:20:3A:8F:68:55:02:AE:92:96:37:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D20A8B3715194C003EEEC4AF4DD2BDBE9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6eFnBy2WuKihIDqPaFUCrpKWN4Y.roa
Signing time: Tue 24 Mar 2026 16:23:39 +0000
ROA not before: Tue 24 Mar 2026 16:23:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214127
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:a8:b3:71:51:94:c0:03:ee:ec:4a:f4:dd:2b:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 16:23:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9e167072d96b8a8a1203a8f685502ae92963786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:79:90:c9:45:9f:9d:e9:88:7a:b9:5a:d6:
c5:36:53:a1:52:e4:57:e4:1d:5d:3c:f9:a0:7c:20:
9d:2e:1c:dc:f4:2c:5d:33:cf:1e:8b:f4:f7:1e:2c:
6d:1e:e2:64:a0:b1:b3:b1:79:dc:53:d3:cd:b8:e7:
22:97:5e:9c:07:be:67:8a:bd:d9:4b:45:f9:ff:fc:
76:ad:7f:e0:28:7d:40:fe:dd:66:dc:ee:3e:91:fb:
b8:f7:a3:0a:2b:66:68:49:f8:6c:2e:c1:34:1a:e8:
b9:ee:ee:f7:06:ea:88:b5:e6:61:0e:e5:45:d9:dc:
e5:35:c8:32:a5:f6:33:8c:7c:7d:40:6d:60:94:ac:
2b:2f:77:4c:46:b9:1e:28:3a:f5:da:bb:73:76:c0:
f0:ce:ed:4c:9e:62:1c:d1:f4:2d:be:9d:97:a9:7c:
85:ce:83:09:c6:ac:15:47:41:00:4b:81:32:3a:97:
e6:27:b9:9f:7c:6f:e2:c8:43:90:da:44:c5:e4:99:
bd:a3:70:5e:76:9d:00:89:eb:30:2d:fa:4e:49:4c:
19:9a:bb:ad:d9:25:16:ad:30:b2:07:95:e7:f4:f7:
88:ea:33:89:71:05:c6:04:70:d2:c4:9a:17:ac:ca:
3d:55:90:3b:c6:ec:81:aa:60:8a:36:94:b8:7f:10:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:67:07:2D:96:B8:A8:A1:20:3A:8F:68:55:02:AE:92:96:37:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6eFnBy2WuKihIDqPaFUCrpKWN4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bb:88:13:f3:1a:4c:b5:3f:6d:c4:29:22:c2:d5:07:90:4b:
4a:9f:5f:b5:dd:1e:a3:74:62:c4:01:2f:2e:f3:58:a7:a1:4a:
43:f2:b1:7e:9a:5b:fb:eb:71:5d:29:87:26:ea:40:30:98:e6:
f2:d8:a9:d7:fb:19:9e:12:1f:02:e5:e2:a5:0b:a5:33:7e:e8:
c4:5c:3d:85:1c:7c:c3:a7:90:82:b9:d1:ab:40:5b:e3:5f:8f:
ea:ab:8a:ff:9a:64:28:7e:77:27:ce:e0:3d:72:9b:56:7a:a3:
69:38:35:15:73:96:ae:9b:d4:d4:f8:bd:59:0e:a4:7a:f7:11:
07:75:d3:13:c1:99:f4:40:bb:c4:0d:96:41:86:7e:41:15:ac:
86:f3:82:34:bb:45:b5:7a:6f:d5:a4:2d:b5:b4:18:db:e4:5b:
25:da:60:c7:fb:ef:cd:6c:73:1b:3a:0f:9b:c7:ff:ae:dd:29:
8f:b4:b1:9c:de:8d:c9:c5:78:08:d2:55:94:28:9e:c3:d1:bc:
dc:b7:bd:73:e4:f2:cd:e8:4f:e4:82:dd:fa:4f:e0:41:b8:d6:
e5:a5:e0:c0:b8:66:1e:b0:fa:1b:9c:be:0d:65:9e:a2:a8:02:
9e:bb:9b:af:be:01:0b:41:3d:b3:c6:1c:f4:3c:43:75:a5:c9:
eb:21:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:47 2026 by rpki-client