Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ZvcjULbCvNFk-HntW3nmhAWFU8.roa
File: 5ZvcjULbCvNFk-HntW3nmhAWFU8.roa (raw, json)
Hash identifier: P0AAwqddcaVULnmfOMMOmhiHl6UdjQ8DcByGI/ZTDSM=
Subject key identifier: E5:9B:DC:8D:42:DB:0A:F3:45:93:E1:E7:B5:6D:E7:9A:10:16:15:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0FEF875AA5542DCE88AF7885889DF0818
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ZvcjULbCvNFk-HntW3nmhAWFU8.roa
Signing time: Fri 02 Oct 2026 23:34:50 +0000
ROA not before: Fri 02 Oct 2026 23:34:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 5.231.46.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:f8:75:aa:55:42:dc:e8:8a:f7:88:58:89:df:08:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 23:34:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e59bdc8d42db0af34593e1e7b56de79a1016154f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:e1:f9:b4:44:4d:e7:a6:1a:8e:d4:c7:65:
00:5f:5a:f4:4d:bd:17:7e:ac:1a:ea:19:74:99:35:
86:d3:62:d3:93:da:96:8a:2d:b1:ce:e2:9a:05:6e:
b9:46:ec:6d:33:67:77:5c:22:9d:b7:b6:bc:7d:9e:
3c:ef:3b:f0:d9:a9:73:99:6f:de:e9:19:df:4a:c5:
8c:6e:b5:71:0e:d7:17:ca:ed:65:d0:64:aa:7d:64:
05:a1:96:4d:df:74:8a:3b:50:0f:a9:44:71:f6:11:
70:d0:49:d9:a5:0d:b8:73:a2:e7:78:cd:ed:3f:91:
cf:14:c1:e2:3b:99:79:df:8e:5c:f6:91:33:d5:52:
fd:67:8a:0f:9c:44:91:83:e8:20:ef:9d:3b:d1:1b:
10:21:24:77:48:63:c7:c4:e0:8f:71:d1:6c:e8:6c:
59:5d:39:c5:77:35:f1:1e:a3:be:04:4b:2e:c2:77:
fc:54:bd:26:e8:86:c7:00:ec:9a:fd:3f:bb:52:ff:
c9:b4:1d:d4:9d:76:40:fa:1a:ff:a3:1e:36:89:6d:
5e:f5:72:c3:07:2d:c0:5f:fb:ac:56:84:c1:d2:f1:
77:a5:e2:c1:44:45:10:ea:60:0a:a9:61:5e:99:62:
99:1c:e3:8c:14:f5:48:65:75:df:e0:1d:a0:b6:4b:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9B:DC:8D:42:DB:0A:F3:45:93:E1:E7:B5:6D:E7:9A:10:16:15:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ZvcjULbCvNFk-HntW3nmhAWFU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.46.0/24
5.231.254.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2c:85:b1:bf:4f:09:14:0d:c9:ba:d9:9a:c4:19:2e:af:bb:
bc:b9:bd:42:39:31:c3:30:16:b4:ad:4d:0f:b5:c4:3e:4a:ed:
0c:76:61:32:e6:e8:19:cb:e0:fb:66:46:cd:77:65:14:cd:9b:
20:ab:93:b5:0d:bd:17:13:76:a9:1e:58:67:30:e5:c9:2f:f7:
58:5f:f8:df:a0:4a:ee:4f:0b:53:04:b4:5f:d0:84:e1:d7:b9:
80:e6:c3:98:ee:48:fd:a2:30:19:2b:58:ef:99:0e:b0:8e:5f:
b4:3d:a8:80:d8:3e:b8:07:af:de:56:5d:26:59:84:da:1b:8e:
25:d0:de:07:7a:0d:a6:66:37:68:68:97:ef:ab:71:c2:9e:22:
5a:3b:51:f3:86:21:13:6a:ce:3d:a2:21:79:fb:5c:67:cd:08:
2b:82:21:60:8a:da:bc:91:2c:2c:77:d8:fe:0f:e7:31:8c:ea:
f5:fe:93:d7:7f:b0:04:4d:fb:24:82:c3:6d:4e:e2:64:a6:d4:
dc:32:1e:ea:01:48:2b:a6:68:fb:7f:7f:e3:f5:39:b1:b4:33:
82:c3:08:dd:57:9d:5e:e1:c6:fa:ea:98:54:a1:27:e0:bc:53:
7f:4b:68:af:bc:c4:57:4a:59:92:a3:88:91:af:5a:5f:b7:18:
ae:18:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:47:19 2026 by rpki-client