Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oqLQK0ABfSCsG944uD-cX33LiWg.roa
File: oqLQK0ABfSCsG944uD-cX33LiWg.roa (raw, json)
Hash identifier: 9vHP5tClVOFV9xR9HIli978jQDEEnam+s87st/RUbAU=
Subject key identifier: A2:A2:D0:2B:40:01:7D:20:AC:1B:DE:38:B8:3F:9C:5F:7D:CB:89:68
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CF19F8A83AC86C3D0DD8EB40E9BD15C3E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oqLQK0ABfSCsG944uD-cX33LiWg.roa
Signing time: Sun 15 Mar 2026 13:11:30 +0000
ROA not before: Sun 15 Mar 2026 13:11:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213850
IP address blocks: 5.175.245.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:9f:8a:83:ac:86:c3:d0:dd:8e:b4:0e:9b:d1:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 15 13:11:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2a2d02b40017d20ac1bde38b83f9c5f7dcb8968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:2c:2a:36:c7:6f:19:b0:ad:35:11:c7:fe:
15:89:06:fd:b3:b7:fc:4c:1e:01:61:8c:31:12:08:
d6:0f:64:ed:90:72:18:05:10:3f:9c:da:17:b5:c8:
b5:2b:73:1b:49:6c:29:b0:f1:a8:24:82:20:be:e0:
4e:96:90:c4:cf:c4:ce:a8:19:47:7e:57:7e:a2:f2:
b1:7a:91:a2:0d:93:2a:12:87:b7:72:6b:ba:aa:07:
d5:61:a3:01:58:ed:dd:cc:47:69:14:a9:8a:1c:cd:
e2:7b:06:3f:fe:a6:ea:db:04:81:9f:4b:c3:d8:8e:
69:d0:ec:83:da:b3:99:3a:76:89:c2:40:9a:2e:36:
ac:9e:21:0e:a2:59:c3:66:d2:ca:78:8f:5d:ab:e7:
53:48:2d:59:bf:ee:46:96:3a:ca:14:a4:b3:98:d9:
57:76:3b:21:32:57:68:f3:13:84:3b:f1:1c:68:bb:
15:c0:29:bb:6b:4d:6e:c0:2e:17:18:fc:8f:e7:70:
d3:77:6d:da:6e:8b:56:d7:ea:e4:b8:aa:aa:b3:fe:
cc:6a:dd:16:8b:0a:be:95:49:6c:44:4b:52:17:51:
7c:cd:c6:16:1d:7a:56:0a:a5:03:40:f8:2c:d6:e5:
f0:76:d7:77:21:b4:de:4e:44:73:52:ea:34:b4:96:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A2:D0:2B:40:01:7D:20:AC:1B:DE:38:B8:3F:9C:5F:7D:CB:89:68
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oqLQK0ABfSCsG944uD-cX33LiWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.245.0/24
5.231.31.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:0a:bb:08:14:dc:68:b6:8b:f5:68:0f:97:2f:62:52:f7:22:
34:70:f4:40:df:73:7e:d5:eb:ac:c3:4c:db:1a:8d:89:29:b6:
66:2b:64:0d:ca:10:f4:25:73:1d:56:7b:5d:c7:d5:49:e4:56:
01:08:2f:70:69:04:53:98:59:05:5c:a3:a5:58:35:fa:e5:79:
02:2f:81:33:bf:b9:ba:2d:1c:23:ca:2e:81:8d:8c:70:69:4b:
3c:6a:81:3a:4a:c0:1d:9a:98:0b:2c:10:f5:5f:20:53:92:ba:
59:46:50:07:f1:1c:47:8e:72:b0:19:9f:c8:0f:16:ee:fd:45:
47:00:9e:b0:91:dc:bf:fa:4c:cb:b7:55:b4:84:94:7d:61:71:
97:bf:69:79:8e:90:69:9a:9b:3e:99:2a:c5:00:e5:6b:8f:60:
ce:09:ce:bc:d1:65:5c:70:c3:18:a9:5f:3d:7d:b6:17:72:3d:
31:58:60:e9:2c:d2:9d:62:01:5b:31:22:1e:4d:4f:89:2f:61:
15:e4:46:a4:5b:37:4c:cc:19:64:d7:8b:b3:0c:e3:43:13:02:
e5:93:7b:59:8d:65:cf:e8:84:5b:bf:a0:0b:6f:ac:72:21:55:
3c:b1:71:23:49:d8:9d:7f:d4:e5:21:84:67:79:4c:2c:5b:02:
82:76:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:55 2026 by rpki-client