Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8Ob_XX6MuNyJ4CeeEom_Ox4TGM4.roa
File: 8Ob_XX6MuNyJ4CeeEom_Ox4TGM4.roa (raw, json)
Hash identifier: bgd6S0QTDsVF2d1fYEgE+wkVYRMPlZ8BSgDBsEhNGz4=
Subject key identifier: F0:E6:FF:5D:7E:8C:B8:DC:89:E0:27:9E:12:89:BF:3B:1E:13:18:CE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F691849479B97653C0A40000DB9D32FB7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8Ob_XX6MuNyJ4CeeEom_Ox4TGM4.roa
Signing time: Thu 16 Jul 2026 04:03:46 +0000
ROA not before: Thu 16 Jul 2026 04:03:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213493
IP address blocks: 5.231.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:18:49:47:9b:97:65:3c:0a:40:00:0d:b9:d3:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 16 04:03:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0e6ff5d7e8cb8dc89e0279e1289bf3b1e1318ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:1c:88:ec:18:09:3f:d8:e2:92:54:79:ab:
02:e6:61:42:e2:e0:16:06:ea:64:ea:ae:93:b1:38:
4e:41:bb:70:c2:eb:4e:5f:51:e2:c5:ee:27:98:70:
99:85:6f:bc:36:b7:e7:b4:f6:8a:ec:6d:c7:27:98:
46:1e:26:47:c3:cd:3e:47:be:10:0c:51:c0:46:29:
4f:d1:3e:23:a7:a3:12:73:62:e3:6a:65:a6:7e:3b:
a5:e4:e9:2a:b6:cb:7c:40:e0:e7:31:1a:da:dd:66:
00:80:06:c6:2b:27:8f:f7:ae:38:d6:61:87:de:8a:
b8:74:3f:bc:0b:c0:e3:93:1b:25:70:4a:8c:19:a8:
82:bb:36:99:d3:ac:3c:86:65:41:6f:34:15:d2:69:
1e:2d:80:35:fa:ff:39:2c:82:2d:cf:5d:37:ea:1d:
06:04:91:49:cf:ef:ae:00:e6:68:d7:5f:04:18:96:
09:20:70:14:bc:6e:8e:49:41:ab:da:9d:ce:95:6d:
a3:4a:66:9e:70:8e:64:37:eb:7a:30:00:68:3f:a8:
98:e4:5a:63:c3:f3:81:ba:57:6b:c9:cb:23:14:56:
c3:ae:30:59:2a:41:6d:1c:6b:34:0b:9e:15:7e:ca:
b8:83:dd:1f:f3:12:a2:a4:e7:88:ec:5c:3b:8e:f2:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:FF:5D:7E:8C:B8:DC:89:E0:27:9E:12:89:BF:3B:1E:13:18:CE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8Ob_XX6MuNyJ4CeeEom_Ox4TGM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c6:09:3b:b5:0c:f6:5f:d7:10:84:c8:1c:cd:0a:81:29:f5:
57:45:73:0c:b5:23:32:92:c5:b0:97:04:9c:80:76:ef:2c:ba:
0c:50:1c:10:7e:87:31:06:90:54:34:80:2f:03:0e:8c:fb:99:
ab:e5:b3:d5:d9:ae:53:b4:42:88:93:5c:37:80:c4:f1:69:7b:
bf:56:de:cd:20:50:80:bf:19:b2:c0:67:ba:c3:31:e8:91:7b:
41:13:72:c7:12:87:e3:9f:6a:b0:9c:f7:4c:67:ce:7a:ff:57:
03:ab:30:a8:9e:fb:ad:b4:04:04:26:9c:39:9e:72:74:1a:01:
26:1a:0c:c2:68:7a:9d:6b:e7:d6:e3:56:4c:73:fb:53:36:47:
66:3f:60:c8:97:89:8f:04:85:34:50:c3:76:cf:35:46:e6:b4:
0a:e2:48:0c:b9:b7:98:12:6f:aa:4f:38:a5:73:21:db:5a:86:
c3:b7:f2:d9:d5:a4:ba:5b:f6:60:9c:70:02:fe:6a:8f:2b:de:
e7:69:12:6a:ed:8e:3e:56:74:c7:1f:22:75:8d:fc:8d:a1:4a:
77:0d:cd:b5:a0:51:0a:6c:e1:11:9c:32:61:69:b4:70:13:cf:
6c:e2:94:35:27:59:23:76:3d:22:89:fa:d8:52:3b:63:21:8a:
e0:af:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client