Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Kj6Tf4kO3kDlTUjpicr3HhFLN5k.roa
File: Kj6Tf4kO3kDlTUjpicr3HhFLN5k.roa (raw, json)
Hash identifier: UWkhvLiAASrmwXBjPTbBGViYxeojVA6Spai23QYurbQ=
Subject key identifier: 2A:3E:93:7F:89:0E:DE:40:E5:4D:48:E9:89:CA:F7:1E:11:4B:37:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D236080953EBD08F7B829C30E1017872E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Kj6Tf4kO3kDlTUjpicr3HhFLN5k.roa
Signing time: Wed 25 Mar 2026 05:03:39 +0000
ROA not before: Wed 25 Mar 2026 05:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 5.231.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:60:80:95:3e:bd:08:f7:b8:29:c3:0e:10:17:87:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 25 05:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a3e937f890ede40e54d48e989caf71e114b3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:ad:91:23:66:21:b4:0f:8c:3a:04:f1:68:
eb:64:d5:94:90:4f:ee:5d:68:63:f1:4d:a6:52:72:
23:71:83:0d:8b:2a:42:26:59:da:10:ef:c9:e4:7c:
a8:6e:a0:4f:01:43:8a:d5:b6:02:0f:47:ff:de:96:
6c:20:ea:22:e5:82:a6:14:0d:78:87:81:a8:4a:94:
ba:01:5c:50:db:9c:27:7a:1e:de:84:62:b5:da:b1:
9b:94:67:0f:fd:b2:71:cc:1a:3f:50:97:09:12:67:
a7:ae:0f:6e:20:d6:83:4f:d2:8a:d2:3f:7e:f1:5e:
3d:4a:fb:ea:a6:09:4a:7d:3f:aa:c5:5e:41:cc:05:
1b:6c:70:a6:65:74:30:4b:ef:e9:7f:85:7c:ca:c1:
a3:8a:3a:a3:be:11:9c:3c:c3:74:8c:74:1e:47:4b:
26:fd:97:2e:dd:91:82:5a:0e:30:63:1e:ee:f7:81:
8a:24:06:f6:1f:9e:1d:d2:ef:dd:ac:69:cf:70:5e:
87:3e:92:14:18:5f:85:6e:96:04:52:0a:6a:e7:a0:
b8:bd:44:aa:81:a0:24:39:a6:fe:2e:d2:40:36:58:
fc:b6:74:83:a1:cc:34:d5:84:da:dc:8c:af:5d:0b:
f8:ae:e4:5a:81:90:37:e0:1e:96:0c:a2:d9:a7:66:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:93:7F:89:0E:DE:40:E5:4D:48:E9:89:CA:F7:1E:11:4B:37:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Kj6Tf4kO3kDlTUjpicr3HhFLN5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:71:b0:99:1b:d1:42:0f:74:dd:ca:e0:ac:d0:5f:63:b6:48:
03:6b:2d:42:8e:0d:3c:5e:03:c6:a2:76:8e:1e:50:f7:fe:af:
60:d3:fb:b9:2a:60:43:98:59:56:c3:36:0d:53:70:39:e2:f8:
13:fa:24:2d:33:ba:e3:85:5f:f2:8d:84:3a:e6:3e:54:8a:27:
de:f5:c5:45:a0:3f:71:bd:b8:e1:eb:57:71:ca:4d:bd:b2:3a:
93:cc:d9:5b:65:7e:9d:56:82:c3:bc:38:e1:77:45:05:8b:e0:
1c:eb:52:7f:c2:cc:b1:60:e5:0c:82:36:0b:06:ed:32:d8:99:
2c:24:e1:be:c6:ec:df:88:37:04:2b:fb:40:fe:54:69:15:25:
f8:f8:03:b1:3f:20:1d:6b:83:cd:ba:cf:ca:bb:d6:12:a4:b1:
c9:fc:41:5a:c4:f1:ba:dd:a8:ed:67:4b:cc:32:c6:83:bf:b9:
cb:43:54:6f:e1:d8:51:02:7e:b6:df:2d:69:d7:c4:42:86:71:
fb:42:13:3e:6b:4d:c3:b4:23:ee:f7:69:ad:fd:24:f3:aa:a7:
40:5e:7b:9a:6c:5d:ec:5b:03:0c:f8:a2:54:e2:25:f2:97:94:
e9:19:fa:5f:33:f4:d3:19:87:72:c3:7c:8d:77:71:d3:bf:04:
14:8d:34:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0jYICVPr0I97gpww4QF4cuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzI1MDUwMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTNlOTM3Zjg5MGVkZTQwZTU0ZDQ4ZTk4OWNhZjcxZTExNGIzNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W+tkSNmIbQPjDoE8WjrZNWUkE/u
XWhj8U2mUnIjcYMNiypCJlnaEO/J5HyobqBPAUOK1bYCD0f/3pZsIOoi5YKmFA14
h4GoSpS6AVxQ25wneh7ehGK12rGblGcP/bJxzBo/UJcJEmenrg9uINaDT9KK0j9+
8V49SvvqpglKfT+qxV5BzAUbbHCmZXQwS+/pf4V8ysGjijqjvhGcPMN0jHQeR0sm
/Zcu3ZGCWg4wYx7u94GKJAb2H54d0u/drGnPcF6HPpIUGF+FbpYEUgpq56C4vUSq
gaAkOab+LtJANlj8tnSDocw01YTa3IyvXQv4ruRagZA34B6WDKLZp2b2yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCo+k3+JDt5A5U1I6YnK9x4RSzeZMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvS2o2VGY0a08za0RsVFVqcGljcjNIaEZMTjVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABedcMA0G
CSqGSIb3DQEBCwUAA4IBAQCocbCZG9FCD3TdyuCs0F9jtkgDay1Cjg08XgPGonaO
HlD3/q9g0/u5KmBDmFlWwzYNU3A54vgT+iQtM7rjhV/yjYQ65j5Uiife9cVFoD9x
vbjh61dxyk29sjqTzNlbZX6dVoLDvDjhd0UFi+Ac61J/wsyxYOUMgjYLBu0y2Jks
JOG+xuzfiDcEK/tA/lRpFSX4+AOxPyAda4PNus/Ku9YSpLHJ/EFaxPG63ajtZ0vM
MsaDv7nLQ1Rv4dhRAn623y1p18RChnH7QhM+a03DtCPu92mt/STzqqdAXnuabF3s
WwMM+KJU4iXyl5TpGfpfM/TTGYdyw3yNd3HTvwQUjTQ6
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:02 2026 by rpki-client