Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/22pj_IHj6ILoKmJwk9fGKzYMtew.roa
File: 22pj_IHj6ILoKmJwk9fGKzYMtew.roa (raw, json)
Hash identifier: nc+tB5i8FotBm5u+L4Rvt1XW/SAfyZ2lEKFFKhPuQp8=
Subject key identifier: DB:6A:63:FC:81:E3:E8:82:E8:2A:62:70:93:D7:C6:2B:36:0C:B5:EC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0DB6A594D37D0BEDC0E10033D266F2A9A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/22pj_IHj6ILoKmJwk9fGKzYMtew.roa
Signing time: Sat 26 Sep 2026 01:52:55 +0000
ROA not before: Sat 26 Sep 2026 01:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:6a:59:4d:37:d0:be:dc:0e:10:03:3d:26:6f:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 26 01:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db6a63fc81e3e882e82a627093d7c62b360cb5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:0f:0a:e4:15:ce:69:9a:aa:56:77:07:3b:
df:90:af:00:b6:fe:5b:1b:69:b5:9c:02:6d:4a:f9:
73:2d:99:68:c4:97:6d:dc:6e:94:cf:a7:37:f7:0f:
9e:a5:a0:fd:88:04:8d:2a:7c:9e:03:97:67:d9:1e:
97:cc:50:ed:1e:3d:39:cb:9c:da:86:94:be:47:5d:
15:6d:28:4c:ed:49:85:d2:60:a8:e2:9f:62:5a:dc:
42:21:79:02:32:e3:87:9f:81:82:c1:d3:22:25:03:
a0:b0:d4:22:6f:44:7b:9c:97:71:8e:fc:67:e9:2a:
15:52:ec:d8:c1:79:0b:eb:14:ee:e7:3d:af:39:2f:
c5:cd:49:eb:d1:52:d2:90:98:f2:47:c5:06:bd:a6:
85:b9:b9:e8:0e:30:d4:ec:c7:82:03:ba:df:a4:84:
c4:d0:7d:b6:d0:58:05:e9:a1:be:69:03:f2:6d:8d:
90:7d:97:d7:32:c8:c4:63:0c:96:ea:f8:a1:02:5a:
41:a7:7e:6e:8d:b3:da:42:1b:59:84:84:bf:52:a7:
1b:35:23:3b:3c:21:8f:70:2c:0a:a3:c2:c3:fb:85:
20:a1:7f:9e:15:c9:c0:5d:cb:a9:b6:64:ae:55:53:
e1:71:0e:c0:d9:68:91:0e:42:49:45:82:63:39:71:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:63:FC:81:E3:E8:82:E8:2A:62:70:93:D7:C6:2B:36:0C:B5:EC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/22pj_IHj6ILoKmJwk9fGKzYMtew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cd:38:37:95:22:ad:3a:38:1a:10:da:bc:8b:46:92:b4:ab:
ec:0a:2f:dc:b5:82:d2:c7:99:5e:44:a7:ca:60:e6:41:a6:15:
99:59:1a:e3:97:5b:fe:d7:9d:f1:fb:ac:79:ee:2f:ab:08:4a:
c4:93:8e:42:9f:ee:15:dc:e8:f9:e1:51:10:83:85:48:51:80:
b0:da:84:af:5b:0f:3c:fa:72:cb:3b:2d:a3:44:06:0c:8a:94:
83:bc:ec:63:e4:7e:5a:d7:74:64:5b:76:f6:4b:36:e8:80:de:
0a:28:59:c7:d3:ca:74:a3:55:61:64:57:d5:fe:b1:43:ef:91:
54:ee:44:58:18:d6:05:d2:1d:7b:21:1f:ef:fe:e6:49:3d:bd:
36:92:ac:0f:27:de:6f:4a:ec:4f:78:a4:de:29:e3:97:1a:a4:
8b:b1:f0:71:7d:ee:a9:2c:fb:8d:a3:47:c7:a4:ea:b5:76:c9:
36:38:53:e7:79:31:b5:0a:4b:8c:0a:ce:4d:de:f1:a7:f2:c9:
db:96:20:19:a5:25:81:25:48:ab:10:96:5c:34:25:3b:36:bc:
8c:8f:10:03:df:f3:5a:78:c3:4d:ef:e5:c4:50:0b:9e:f9:d6:
12:ab:ef:28:4c:3c:f4:4d:84:d5:df:c6:98:3c:f7:e6:12:2a:
bc:c4:ae:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDballNN9C+3A4QAz0mbyqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTI2MDE1MjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjZhNjNmYzgxZTNlODgyZTgyYTYyNzA5M2Q3YzYyYjM2MGNiNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbQPCuQVzmmaqlZ3BzvfkK8Atv5b
G2m1nAJtSvlzLZloxJdt3G6Uz6c39w+epaD9iASNKnyeA5dn2R6XzFDtHj05y5za
hpS+R10VbShM7UmF0mCo4p9iWtxCIXkCMuOHn4GCwdMiJQOgsNQib0R7nJdxjvxn
6SoVUuzYwXkL6xTu5z2vOS/FzUnr0VLSkJjyR8UGvaaFubnoDjDU7MeCA7rfpITE
0H220FgF6aG+aQPybY2QfZfXMsjEYwyW6vihAlpBp35ujbPaQhtZhIS/UqcbNSM7
PCGPcCwKo8LD+4UgoX+eFcnAXcuptmSuVVPhcQ7A2WiRDkJJRYJjOXEZjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNtqY/yB4+iC6CpicJPXxis2DLXsMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMjJwal9JSGo2SUxvS21Kd2s5ZkdLellNdGV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABec6AwQA
Bec9MA0GCSqGSIb3DQEBCwUAA4IBAQB7zTg3lSKtOjgaENq8i0aStKvsCi/ctYLS
x5leRKfKYOZBphWZWRrjl1v+153x+6x57i+rCErEk45Cn+4V3Oj54VEQg4VIUYCw
2oSvWw88+nLLOy2jRAYMipSDvOxj5H5a13RkW3b2SzbogN4KKFnH08p0o1VhZFfV
/rFD75FU7kRYGNYF0h17IR/v/uZJPb02kqwPJ95vSuxPeKTeKeOXGqSLsfBxfe6p
LPuNo0fHpOq1dsk2OFPneTG1CkuMCs5N3vGn8snbliAZpSWBJUirEJZcNCU7NryM
jxAD3/NaeMNN7+XEUAue+dYSq+8oTDz0TYTV38aYPPfmEiq8xK54
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:48 2026 by rpki-client