Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-1qtniMDtreekCFYvMrGd4JhIfo.roa
File: 1-1qtniMDtreekCFYvMrGd4JhIfo.roa (raw, json)
Hash identifier: nzjf17PnbeEKA9qzFvpPKtecilYMnus+WUWgYu/wv58=
Subject key identifier: FB:5A:AD:9E:23:03:B6:B7:9E:90:21:58:BC:CA:C6:77:82:61:21:FA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1521427DBAA64133CFF1769F56919E4C9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-1qtniMDtreekCFYvMrGd4JhIfo.roa
Signing time: Mon 19 Oct 2026 02:53:34 +0000
ROA not before: Mon 19 Oct 2026 02:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218464
IP address blocks: 5.231.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:14:27:db:aa:64:13:3c:ff:17:69:f5:69:19:e4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 02:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb5aad9e2303b6b79e902158bccac677826121fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:21:4b:00:5f:e4:73:27:ea:6a:45:93:ee:
58:07:a0:0a:3e:49:24:cd:ff:df:74:6f:7c:f0:4f:
3b:57:02:59:ec:e8:f5:c3:e7:5f:03:b6:9c:20:55:
c3:ae:dc:ab:da:a6:c9:54:dc:83:ac:38:16:90:29:
c7:57:1f:28:96:1b:f6:b8:1e:a0:50:18:77:03:0c:
96:e6:5b:1a:7a:a5:32:04:bd:fc:73:4b:5b:f6:ae:
cf:04:06:aa:c0:6b:80:01:c8:31:b5:9f:12:8b:36:
10:69:c5:d0:34:f5:59:91:8c:ef:65:7e:55:a2:bb:
a6:6b:e3:d2:44:83:d8:d5:4e:cf:f8:1d:15:b1:ef:
17:e2:fd:a3:b9:a6:d1:6e:ae:d3:7c:fb:8f:f8:d3:
91:cb:0f:8d:e0:3d:5b:21:ea:8d:06:94:c1:88:b1:
ed:f0:0d:7d:b5:d2:de:2b:1d:3b:f9:bc:87:7a:11:
9c:df:83:36:12:e3:e5:8d:40:a5:ee:97:70:6c:4a:
d2:86:fa:a0:f8:dc:f9:53:e8:48:35:0a:28:25:0d:
b2:6b:56:51:1a:eb:5a:dc:6d:11:28:07:b2:ae:a3:
a6:95:1a:02:5b:7d:e4:8c:35:07:76:13:a8:63:09:
29:c8:22:ea:b6:c2:b5:76:0a:1c:e6:df:bb:e8:66:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5A:AD:9E:23:03:B6:B7:9E:90:21:58:BC:CA:C6:77:82:61:21:FA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-1qtniMDtreekCFYvMrGd4JhIfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.203.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:3e:5a:2d:f8:8a:01:1a:93:fa:fd:52:9d:8a:ff:ba:c3:16:
80:1f:46:83:b6:23:ae:ae:ff:ce:b7:a8:d6:23:a7:09:8c:7d:
2c:24:04:46:b4:18:a1:9e:38:71:26:b6:bc:fd:8d:0d:ea:b1:
f0:78:61:8f:75:68:02:76:39:e8:83:8c:98:68:11:89:48:c9:
1f:3a:34:79:af:4d:e0:7b:79:e7:aa:fc:a3:c2:f6:04:a2:7f:
05:72:e5:31:6e:9c:5a:20:e6:09:c5:95:fb:9a:fa:41:ef:70:
5a:cc:67:53:59:a3:c0:a0:da:07:61:b1:08:ff:58:21:88:74:
84:a2:4b:96:2a:59:d1:80:eb:4e:af:f3:10:01:37:70:85:59:
fb:89:0e:5f:56:d6:5b:0a:9f:65:6b:24:65:39:02:b9:a6:07:
43:8f:bc:82:7b:e2:e1:d9:0f:1b:21:89:03:f1:b6:c1:35:f4:
6e:96:b4:fa:a8:04:3e:c2:15:cf:75:e3:78:79:8b:0c:67:15:
c5:53:05:b3:20:d1:33:27:e3:32:28:e3:44:ab:53:3d:2a:97:
1c:50:c7:ba:3f:99:f3:bb:46:03:7f:db:ff:b2:88:3a:56:2f:
e0:79:16:77:99:9f:86:d8:ef:73:9e:10:1a:27:11:ff:de:92:
91:0d:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:49:42 2026 by rpki-client