Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/59OgaRstBydSC8WBxJpmaw-Qmc0.roa
File: 59OgaRstBydSC8WBxJpmaw-Qmc0.roa (raw, json)
Hash identifier: biYGer3tIUEIW5wMSNGlG8Y4jGHGZu2OBIKNYLJoxK4=
Subject key identifier: E7:D3:A0:69:1B:2D:07:27:52:0B:C5:81:C4:9A:66:6B:0F:90:99:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D328F80500DD81C838317917715D21EAA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/59OgaRstBydSC8WBxJpmaw-Qmc0.roa
Signing time: Sat 28 Mar 2026 03:49:18 +0000
ROA not before: Sat 28 Mar 2026 03:49:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 15:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:8f:80:50:0d:d8:1c:83:83:17:91:77:15:d2:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 28 03:49:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7d3a0691b2d0727520bc581c49a666b0f9099cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:ed:4d:c3:39:21:20:e3:fb:ae:72:8c:4b:
98:2c:92:ee:16:55:44:db:75:ed:a7:c2:15:7a:bf:
92:fe:18:77:fb:7d:5f:c6:83:83:e6:ff:a8:e7:64:
9c:b3:71:53:2c:1a:6e:6d:de:08:c7:2f:5b:48:45:
06:c8:82:dc:88:f5:f6:ca:0d:96:9a:d8:e0:84:3f:
2a:09:0c:06:96:26:af:97:ca:3e:20:87:21:05:92:
20:c5:7e:3b:43:a6:9c:0b:b0:ad:34:c3:a9:3b:cd:
a3:4f:fb:0a:9c:43:f5:7c:4c:07:d8:7f:4f:18:65:
62:f9:3b:7a:9d:46:96:43:62:37:21:ed:ec:54:b4:
20:17:68:51:b0:b9:0a:4b:a5:13:19:e7:37:8d:c7:
17:97:e8:de:49:64:64:e2:2f:ee:03:be:a5:dd:1d:
f8:f5:ca:16:63:02:f2:f6:95:52:ea:c7:76:c1:5a:
57:92:69:65:a1:d6:f5:ab:11:0a:45:a9:75:c7:c5:
5c:4c:13:90:c3:c3:a6:41:4c:e3:15:38:93:5b:6f:
27:e5:01:10:4e:14:64:2a:ff:9d:6d:f9:14:55:9c:
0e:c9:4b:32:62:ff:b8:36:d5:12:61:ba:09:40:19:
6d:4d:bf:b4:44:d7:2b:21:2d:d3:3d:1c:28:7e:2a:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:A0:69:1B:2D:07:27:52:0B:C5:81:C4:9A:66:6B:0F:90:99:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/59OgaRstBydSC8WBxJpmaw-Qmc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a3:e6:fe:09:57:5f:c8:99:f8:b8:c2:34:1d:08:eb:5b:1a:
fd:07:79:71:85:65:56:53:d2:d4:13:17:e4:cc:eb:ac:0e:ea:
4e:7d:d1:c1:11:fd:4e:0f:cc:4b:65:78:cc:85:36:74:bb:4c:
f3:6f:13:9c:f2:e6:7e:3b:c5:e6:7c:0d:4d:71:4f:60:66:8f:
e2:98:a7:89:60:e4:1c:f1:ce:12:19:9b:ad:f4:30:ed:ce:f3:
39:88:9e:e7:52:50:36:a6:b2:38:4d:b1:bd:65:43:9c:eb:b0:
bc:8b:33:b5:50:89:4c:5f:57:db:e9:1b:77:a3:c6:e8:e6:b9:
ed:d4:f3:a8:01:48:92:75:19:0b:56:13:51:62:49:24:3f:47:
00:15:3e:62:ec:11:6a:75:f4:61:7b:a5:13:0d:bf:34:0d:b9:
6c:7e:0f:e1:ab:79:96:10:0a:f1:ba:ef:fd:9c:b8:2d:d0:80:
bd:92:11:22:de:ea:d0:28:fe:22:c9:a4:af:4e:65:e5:9c:5f:
1c:99:18:60:ad:51:0d:61:9f:72:bc:0e:ce:2f:51:4b:63:44:
29:3f:da:1c:d1:b9:8b:94:cc:b3:d3:a2:5d:06:ba:4a:90:b0:
44:e3:92:64:4a:56:37:70:35:1a:aa:af:ec:af:67:66:4f:aa:
3c:c6:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:38:08 2026 by rpki-client