Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/33E6_jslsJk2apavuh5UUptvT14.roa
File: 33E6_jslsJk2apavuh5UUptvT14.roa (raw, json)
Hash identifier: HfgDd5L/EyGxwxhOEEP5Z+8uHdKabQu45dIh6ZCki6s=
Subject key identifier: DF:71:3A:FE:3B:25:B0:99:36:6A:96:AF:BA:1E:54:52:9B:6F:4F:5E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DA5BB2FA8EA69010D12A70E7E5B2BD11A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/33E6_jslsJk2apavuh5UUptvT14.roa
Signing time: Sun 19 Apr 2026 12:33:21 +0000
ROA not before: Sun 19 Apr 2026 12:33:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:bb:2f:a8:ea:69:01:0d:12:a7:0e:7e:5b:2b:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 19 12:33:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df713afe3b25b099366a96afba1e54529b6f4f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:1b:fb:df:0d:03:7b:29:f8:7c:ed:77:92:
a9:7e:8a:05:b2:33:1a:81:c1:04:4f:ff:b5:31:0a:
04:d2:b4:be:c3:15:53:a8:39:a3:e9:a1:b5:bf:02:
c4:76:e6:8d:a4:51:3d:97:37:53:57:05:06:ee:0d:
de:8b:81:59:c9:82:15:af:da:47:b1:2c:b0:0c:a2:
1d:59:ca:a0:46:75:aa:3c:2a:24:7e:e1:bc:7c:cf:
c4:6a:c2:28:50:f0:2c:f7:59:4c:3a:a9:81:48:3a:
93:f6:50:b6:df:00:61:fe:7c:31:00:78:04:d8:64:
16:b5:87:4b:25:45:ea:0e:48:6a:c2:1d:44:20:14:
79:00:14:08:b7:56:18:b8:cc:e8:a6:3f:b2:ca:29:
9a:7a:23:12:c1:4f:2c:3b:d5:ed:85:fe:f7:cc:6d:
ac:5f:df:09:fa:5f:0a:b7:eb:fc:a7:40:5b:1d:ce:
2a:61:8b:ac:c1:22:ee:e0:1d:f1:93:6b:9c:44:3f:
fd:e8:04:b9:54:96:a1:81:d3:b2:24:02:a7:4c:18:
75:b7:12:64:36:4a:19:8d:dd:62:50:49:14:0c:7e:
48:09:8f:78:d1:7f:c2:78:ad:da:77:21:28:4a:af:
42:0d:04:8b:75:6c:1e:2b:5b:b1:c0:9f:09:aa:70:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:71:3A:FE:3B:25:B0:99:36:6A:96:AF:BA:1E:54:52:9B:6F:4F:5E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/33E6_jslsJk2apavuh5UUptvT14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
66:19:9a:88:03:b5:47:26:98:93:da:be:ed:52:a1:43:7d:2b:
08:8c:f2:cf:08:6b:64:3e:35:c8:21:db:97:a4:44:ed:c3:97:
66:6f:0a:dc:f7:d5:71:0b:65:78:cd:6f:dc:40:78:46:49:e0:
8d:d1:0e:96:ce:7c:3d:67:b2:9f:ad:57:28:c6:90:26:ba:71:
f0:17:5e:e7:4e:84:8f:fd:36:61:96:8a:ce:a9:12:56:2a:73:
d3:f2:eb:86:72:96:e8:1b:1c:03:8f:4b:9a:d7:08:aa:fa:7b:
a4:a2:f4:fe:c4:49:b8:52:66:c5:4b:5e:ee:24:11:93:b6:f0:
78:01:cb:a0:52:48:e4:92:c1:02:5b:d7:53:47:47:72:df:dd:
01:d4:75:b2:04:d2:bb:a2:15:76:9a:cb:55:54:e1:75:15:12:
ff:59:cb:8e:07:74:f8:06:7a:2b:96:84:c6:66:b0:d5:cc:f1:
0b:3a:a7:90:bd:1b:2a:65:29:22:b2:84:16:60:ad:e4:af:cc:
82:85:a6:60:96:c5:dc:da:06:86:41:54:32:b5:59:8c:58:9a:
06:f4:98:e5:1a:ad:d9:b5:bd:2e:0c:31:9d:8e:13:0a:d3:6e:
b8:28:d5:f7:18:eb:22:06:6e:a8:bc:0f:39:a6:ab:d0:09:57:
b4:ef:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:47:06 2026 by rpki-client