Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_R4MPXR4sk9GE-tP3b1Sbk4YNtw.roa
File: _R4MPXR4sk9GE-tP3b1Sbk4YNtw.roa (raw, json)
Hash identifier: QNZVDsvhU1RbxxkdhF1w46ihiGw/A/hH9HgS9V5Jo50=
Subject key identifier: FD:1E:0C:3D:74:78:B2:4F:46:13:EB:4F:DD:BD:52:6E:4E:18:36:DC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CE6237E17FC4634632471E24D8F8B935B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_R4MPXR4sk9GE-tP3b1Sbk4YNtw.roa
Signing time: Fri 13 Mar 2026 07:40:11 +0000
ROA not before: Fri 13 Mar 2026 07:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214199
IP address blocks: 5.231.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:23:7e:17:fc:46:34:63:24:71:e2:4d:8f:8b:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 13 07:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd1e0c3d7478b24f4613eb4fddbd526e4e1836dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:0a:13:b8:be:15:03:c5:e4:d9:3f:15:0b:
0d:2a:46:13:f3:2b:bf:cd:3b:b4:1c:07:ff:57:fd:
65:05:61:20:46:40:a6:27:74:59:92:83:48:1d:39:
0e:38:c2:a3:90:8e:32:b5:60:5a:94:16:f2:dc:63:
c3:87:f1:6a:d0:de:3a:aa:83:a6:8b:41:1d:56:02:
40:2a:b1:16:38:58:89:cf:23:c0:c2:18:5f:81:dc:
cb:59:5f:86:90:a7:99:70:74:85:46:a6:f1:b5:79:
c9:3d:b2:eb:6a:c5:7f:e2:1d:af:f8:b9:36:57:c6:
07:9a:96:51:16:12:0c:59:53:05:1c:09:ea:db:20:
0a:c6:e0:1e:80:7a:7b:b3:1a:7d:59:3c:db:10:01:
1f:07:ba:b5:cf:10:02:cf:f6:db:73:5f:0d:ac:98:
dd:33:32:fd:0b:33:b6:25:c9:12:39:8e:e5:39:d5:
26:56:ea:5f:d1:1f:20:56:cc:83:d7:47:d0:5b:34:
c8:05:10:a1:9d:b5:b8:d6:81:e3:aa:0b:36:ef:d9:
ae:98:03:81:42:64:a5:ff:24:cd:05:19:65:5d:07:
1f:67:e4:86:51:fb:36:ae:b5:c8:2a:d6:3b:b1:56:
c6:ac:55:31:fd:26:d9:f7:e7:f0:0a:3c:c2:d9:db:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1E:0C:3D:74:78:B2:4F:46:13:EB:4F:DD:BD:52:6E:4E:18:36:DC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_R4MPXR4sk9GE-tP3b1Sbk4YNtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f2:a4:d1:ae:88:4b:90:b0:be:1d:97:f4:49:75:85:f6:53:
9c:e8:31:e1:a5:24:b5:af:fe:1c:0d:78:52:b0:5e:84:3e:af:
6d:a6:8a:d0:38:e2:99:7c:81:25:ab:53:ba:70:c3:b4:0c:2e:
59:c5:b0:26:e3:2b:66:a0:15:fa:1b:e3:92:44:43:03:5a:66:
9d:7a:8f:be:cd:b0:a6:db:57:2e:8b:6d:e6:2f:4d:3e:45:6d:
be:44:ea:ba:68:c3:4e:25:21:7f:17:ec:27:1a:56:11:b8:b2:
3e:91:6b:2b:86:4b:eb:be:d5:96:a9:a7:25:ff:6c:7d:47:73:
87:80:71:72:bb:34:bf:47:6e:4f:86:85:aa:35:d7:58:3a:13:
69:14:68:80:7e:b2:e5:81:ce:b9:97:68:1b:0d:ab:1b:8e:1b:
7b:3f:ed:e8:0d:be:08:ec:e3:ad:3f:15:b4:0f:94:f3:78:fc:
bb:20:80:d4:cd:d2:03:f4:df:d2:8b:be:58:5a:59:89:44:9e:
ef:3f:77:0f:10:4b:6a:86:94:67:1f:51:cd:5d:ff:33:8a:87:
cb:b9:3e:d3:09:55:fa:39:a8:ba:ba:97:24:ed:b9:d1:0a:af:
5e:0d:34:92:03:17:9c:a2:11:87:e6:5d:6b:87:9a:9b:15:7e:
36:d5:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:40:18 2026 by rpki-client