Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xSSucEO6yQMM9bg_e1RuYI7Mgac.roa
File: xSSucEO6yQMM9bg_e1RuYI7Mgac.roa (raw, json)
Hash identifier: o4HdRv046B7edfCfJIAtRRBqe26JtZe5YkoJ6EMFZ+w=
Subject key identifier: C5:24:AE:70:43:BA:C9:03:0C:F5:B8:3F:7B:54:6E:60:8E:CC:81:A7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1C870C9C05159AF3FF318D132858244C8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xSSucEO6yQMM9bg_e1RuYI7Mgac.roa
Signing time: Wed 11 Nov 2026 02:29:57 +0000
ROA not before: Wed 11 Nov 2026 02:29:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 5.230.162.0/24 maxlen: 24
5.230.163.0/24 maxlen: 24
185.13.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c8:70:c9:c0:51:59:af:3f:f3:18:d1:32:85:82:44:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 11 02:29:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c524ae7043bac9030cf5b83f7b546e608ecc81a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:02:36:cd:a3:cd:84:2f:f1:07:34:23:4d:
c8:54:80:27:2f:ec:29:e4:ea:ba:2e:d2:cf:33:e6:
e0:54:88:e1:08:dc:b1:dc:e9:36:ec:7b:85:bd:75:
a2:5f:fe:22:e6:bb:b1:71:7c:78:6f:a2:54:14:55:
ff:ac:41:89:2f:24:ef:27:89:a9:0f:59:df:e3:ee:
ba:0e:7d:62:ca:c2:5d:5c:f4:2c:22:a7:92:e9:98:
c5:10:b5:3c:d8:ba:9a:58:88:7a:cb:e9:db:b2:1f:
9a:7b:91:ca:c1:f8:bf:4b:01:5d:83:30:a1:13:79:
0e:d5:de:ce:bf:eb:0a:d8:60:78:aa:5e:2c:5c:dc:
35:e5:e5:ce:f3:1b:42:7b:ff:e0:78:5d:8f:af:d2:
e5:9d:54:e2:7d:4b:b2:a3:62:2f:4e:58:07:6a:9a:
97:d4:37:5c:86:51:9b:a1:b7:ba:0b:a0:26:44:d5:
12:fa:ff:61:3f:7a:33:aa:af:98:47:32:74:c3:0e:
3e:e4:13:62:8f:c4:3a:9d:b6:81:e7:de:7a:08:d7:
ab:3a:b5:ef:fc:9d:d1:5d:26:41:7c:d5:f6:7b:a5:
b6:ba:13:cd:d8:4b:3c:fd:9e:7b:a1:ac:d2:65:f0:
5f:1d:3d:0f:c5:16:8f:ad:b2:de:f2:78:64:f8:7c:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:24:AE:70:43:BA:C9:03:0C:F5:B8:3F:7B:54:6E:60:8E:CC:81:A7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xSSucEO6yQMM9bg_e1RuYI7Mgac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.162.0/23
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:14:e5:ef:90:f6:82:3d:93:b8:9d:55:dc:9f:d9:9d:c2:c6:
ca:66:5a:1f:14:63:57:1d:b5:03:32:a8:85:c8:67:ea:9e:64:
85:d9:51:f6:5c:2e:09:93:02:c0:fa:c2:03:c6:83:1a:13:15:
fa:69:bf:62:0e:b3:c7:6e:7c:5f:a7:d6:c7:ea:52:cf:27:61:
54:62:b8:97:44:36:7d:2c:a6:f4:a2:c1:9e:46:0a:f8:1f:9a:
98:a5:65:b9:7b:a8:53:c9:eb:41:a3:03:d6:9c:d9:dd:1f:9d:
f4:38:73:0d:33:1b:4b:bc:7d:de:d8:0d:db:6c:ab:48:ec:8f:
e1:e1:6a:4a:a2:c8:9f:11:03:01:ec:89:cd:a3:51:34:3b:fd:
71:ae:dd:08:ba:c3:b1:15:81:7b:16:23:84:41:30:2b:1c:7f:
30:7b:40:5c:5e:91:9d:76:1f:6a:c7:4f:65:c3:24:da:da:c9:
d4:d6:85:e6:70:08:7d:e1:e8:bf:c1:80:e5:d7:23:2c:1d:bc:
6a:ef:cd:80:fd:cf:e0:37:24:a9:d2:14:8b:69:fb:54:94:e0:
21:82:db:2d:b9:e1:ef:35:ef:bb:92:1f:3f:ca:e0:c0:3a:94:
eb:36:30:4f:cb:95:7a:dd:fe:76:d6:48:79:58:4c:7e:5e:8d:
ff:8d:7b:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHIcMnAUVmvP/MY0TKFgkTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMTExMDIyOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTI0YWU3MDQzYmFjOTAzMGNmNWI4M2Y3YjU0NmU2MDhlY2M4MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BECNs2jzYQv8Qc0I03IVIAnL+wp
5Oq6LtLPM+bgVIjhCNyx3Ok27HuFvXWiX/4i5ruxcXx4b6JUFFX/rEGJLyTvJ4mp
D1nf4+66Dn1iysJdXPQsIqeS6ZjFELU82LqaWIh6y+nbsh+ae5HKwfi/SwFdgzCh
E3kO1d7Ov+sK2GB4ql4sXNw15eXO8xtCe//geF2Pr9LlnVTifUuyo2IvTlgHapqX
1DdchlGbobe6C6AmRNUS+v9hP3ozqq+YRzJ0ww4+5BNij8Q6nbaB5956CNerOrXv
/J3RXSZBfNX2e6W2uhPN2Es8/Z57oazSZfBfHT0PxRaPrbLe8nhk+HxKLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUkrnBDuskDDPW4P3tUbmCOzIGnMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveFNTdWNFTzZ5UU1NOWJnX2UxUnVZSTdNZ2FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBeaiAwQA
uQ2eMA0GCSqGSIb3DQEBCwUAA4IBAQAeFOXvkPaCPZO4nVXcn9mdwsbKZlofFGNX
HbUDMqiFyGfqnmSF2VH2XC4JkwLA+sIDxoMaExX6ab9iDrPHbnxfp9bH6lLPJ2FU
YriXRDZ9LKb0osGeRgr4H5qYpWW5e6hTyetBowPWnNndH530OHMNMxtLvH3e2A3b
bKtI7I/h4WpKosifEQMB7InNo1E0O/1xrt0IusOxFYF7FiOEQTArHH8we0BcXpGd
dh9qx09lwyTa2snU1oXmcAh94ei/wYDl1yMsHbxq782A/c/gNySp0hSLaftUlOAh
gtstueHvNe+7kh8/yuDAOpTrNjBPy5V63f521kh5WEx+Xo3/jXt7
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:32:44 2026 by rpki-client