Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5xAO7vzObUkHOqVEcC4Af8sn2Bo.roa
File: 5xAO7vzObUkHOqVEcC4Af8sn2Bo.roa (raw, json)
Hash identifier: 08kaUO+3QxF69Sf4u13qPvlMWEJCqxPGpWxaoLsjASY=
Subject key identifier: E7:10:0E:EE:FC:CE:6D:49:07:3A:A5:44:70:2E:00:7F:CB:27:D8:1A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A100545BEA84A832C8EEB69377A2A17A45
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5xAO7vzObUkHOqVEcC4Af8sn2Bo.roa
Signing time: Sat 03 Oct 2026 05:54:50 +0000
ROA not before: Sat 03 Oct 2026 05:54:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58015
IP address blocks: 5.231.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:54:5b:ea:84:a8:32:c8:ee:b6:93:77:a2:a1:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 3 05:54:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7100eeefcce6d49073aa544702e007fcb27d81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:c1:db:d9:62:b8:3a:f3:16:24:c8:d7:7c:
bb:59:bf:02:67:fa:9e:4c:57:e5:d8:fd:11:d6:72:
92:7d:97:d7:18:f2:b0:1e:05:83:c9:47:4d:85:19:
3a:02:19:68:b8:12:78:4a:b3:ac:75:dc:76:7d:13:
34:f2:4f:ec:41:3e:34:96:5f:ba:36:3b:fa:c6:5e:
e2:c6:7e:c8:00:ba:9b:a0:3e:dc:4b:4b:2d:1c:ff:
3c:82:91:c8:b3:d0:e2:82:e6:23:85:92:0d:b6:35:
45:a0:76:cb:ea:0a:70:e9:6c:85:2e:1b:ba:00:52:
a0:00:c8:89:23:28:8f:e3:32:6d:6d:af:b0:7e:8c:
c5:ca:f3:ef:04:47:45:bd:82:22:6a:8f:eb:20:d0:
11:bd:e9:cb:b9:c1:3a:e8:0b:71:5b:4d:5c:90:96:
7f:52:87:70:40:d9:54:7c:1c:a9:6f:e8:66:04:e9:
26:75:1e:66:e6:1e:7d:be:62:02:d4:f8:89:72:6b:
d9:c4:3c:7e:0a:2c:22:fb:d0:7f:9d:14:17:8f:f3:
3a:b7:33:d2:6b:3d:98:49:4c:42:b9:71:15:99:31:
76:29:a0:ec:91:a4:f1:74:fc:57:bc:39:ce:ab:17:
df:1c:7d:8b:cc:a2:ef:ef:1a:4f:4a:26:48:03:e4:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:0E:EE:FC:CE:6D:49:07:3A:A5:44:70:2E:00:7F:CB:27:D8:1A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5xAO7vzObUkHOqVEcC4Af8sn2Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.97.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f4:3d:8e:90:29:de:ed:21:0b:62:d4:dd:ba:89:97:4f:ca:
b9:e5:c3:df:43:c3:d1:33:e1:26:ca:bd:7f:1a:cb:ea:01:52:
a2:da:84:38:ca:49:a9:14:f5:04:24:70:50:f0:9f:d2:54:5f:
82:35:bb:bd:f3:79:93:d3:1b:19:0d:df:4d:8f:35:11:4b:4e:
50:44:d1:c9:1b:5c:92:b4:8d:64:51:6a:98:90:da:30:8d:6f:
49:f0:c3:e9:b0:2b:a1:50:1b:31:6f:73:85:b4:40:1d:db:a2:
b6:25:8f:f0:5e:48:18:0a:4a:c1:b7:4c:d8:67:d0:c3:55:c4:
dc:57:dd:75:ab:b4:ec:a1:ef:6d:5b:70:13:dc:bb:4d:04:06:
90:83:67:60:db:4b:2d:55:a0:05:12:db:96:ae:7b:fa:24:3d:
70:78:ad:e1:aa:9c:cb:98:45:c3:f2:ae:d5:ff:9b:2c:a9:d3:
e4:3d:8b:5c:56:80:3c:8f:92:39:32:09:d6:f9:9b:e4:82:44:
d5:3f:4d:6d:38:8a:d7:e4:23:e4:0f:78:3f:d2:97:1e:59:bf:
cb:27:74:3f:27:b6:43:17:05:05:07:36:58:07:76:a5:72:73:
06:a9:6b:07:17:99:17:c0:6d:13:6c:a3:a3:94:41:84:7d:a6:
5c:f9:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:46 2026 by rpki-client