Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v0BgCq3vSvi-Wg3TLWsQCB7UVQQ.roa
File: v0BgCq3vSvi-Wg3TLWsQCB7UVQQ.roa (raw, json)
Hash identifier: zCBEqCSH+ISGblsICRbtJd//IJN32P1HPnP8JelnfIs=
Subject key identifier: BF:40:60:0A:AD:EF:4A:F8:BE:5A:0D:D3:2D:6B:10:08:1E:D4:55:04
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D2370F95632DE432976B1DBD01356DAEE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v0BgCq3vSvi-Wg3TLWsQCB7UVQQ.roa
Signing time: Wed 25 Mar 2026 05:21:39 +0000
ROA not before: Wed 25 Mar 2026 05:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.83.131.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:70:f9:56:32:de:43:29:76:b1:db:d0:13:56:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 25 05:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf40600aadef4af8be5a0dd32d6b10081ed45504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:ba:5a:f4:3f:b2:bf:50:63:ef:8e:d3:54:
15:38:af:24:df:52:2e:5e:15:c3:6a:d3:f5:91:90:
7b:38:58:39:d8:99:0a:15:9c:af:49:7d:20:75:6c:
f3:dd:c1:01:dd:01:8d:0b:6a:c2:67:8b:3f:96:61:
e5:66:23:40:d1:84:5b:95:ed:56:5b:47:f6:03:6c:
6b:a7:a4:c8:e0:f7:0b:76:96:2e:3c:39:3b:12:33:
7b:26:35:86:d5:4e:fd:f9:c5:2d:a1:28:7b:57:f5:
7e:1a:7a:c1:b0:7c:df:12:3a:26:39:5d:8d:d7:d4:
4a:05:32:da:b7:af:2c:1d:91:93:e9:d2:a6:2f:92:
64:a6:a1:08:04:ed:08:9f:2e:c9:88:93:74:1a:15:
ce:f6:a9:8d:f0:56:95:c1:88:c9:d7:50:38:ed:08:
d0:44:78:13:93:17:e5:03:6d:da:30:4f:bb:ca:22:
a9:f9:8a:a1:af:00:24:b0:d3:cd:a2:82:b8:15:4c:
a0:66:4d:6d:e2:2f:f2:e3:e1:23:58:b3:38:4e:20:
8e:62:3f:83:03:ff:7a:d1:70:d7:6f:67:51:f3:15:
2c:95:08:35:f8:ab:95:f5:9d:03:8d:d3:a6:1d:88:
05:69:f8:ee:b2:14:a0:2d:46:ae:b3:50:19:fc:91:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:60:0A:AD:EF:4A:F8:BE:5A:0D:D3:2D:6B:10:08:1E:D4:55:04
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v0BgCq3vSvi-Wg3TLWsQCB7UVQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.131.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e7:ff:0b:07:3d:c5:14:99:ce:10:eb:08:ea:15:55:f8:63:
26:ec:1d:40:b9:0b:58:07:1b:55:13:3c:3b:bd:5d:40:f9:f5:
cc:38:37:45:85:fc:16:4d:c9:c8:e4:7c:1b:2e:15:f6:bd:6d:
a9:bb:3a:0b:e4:81:99:28:d1:0d:ac:83:ad:4f:48:ee:d6:f7:
65:9b:9f:cb:16:a0:d8:ed:a0:a6:30:d6:23:d1:fd:30:24:48:
37:67:4e:a3:83:65:4e:91:07:69:c9:ff:fb:7c:66:36:a0:e5:
e6:f3:01:2c:9b:36:2c:27:8c:ae:7a:07:d4:6a:df:0d:4e:03:
48:8f:87:56:7e:66:04:98:60:13:36:aa:00:4f:83:2d:4e:29:
12:d3:aa:65:f3:d0:0d:6d:43:b9:3c:e2:9e:bb:21:bb:85:2e:
89:11:f3:e5:84:60:59:10:91:39:0c:af:25:aa:49:53:10:b5:
d3:76:f0:16:ae:80:d8:97:15:d5:f2:21:40:f1:b7:63:46:df:
4d:28:ae:49:9c:2a:48:03:fd:70:b3:91:dd:b7:90:a2:fb:ef:
00:c7:80:0f:6d:5b:02:6f:32:5b:c4:11:ba:08:d6:d2:28:a9:
e3:09:92:d0:51:fe:62:fe:bf:db:24:9e:96:dc:e9:51:80:43:
fd:25:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:57 2026 by rpki-client