Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9y8knwCd6P40EuB22xdBdSdF36k.roa
File: 9y8knwCd6P40EuB22xdBdSdF36k.roa (raw, json)
Hash identifier: h+VhjoSxs6qlBu/JIaAE+P7VqZqBo+EvUKTpWmF9la0=
Subject key identifier: F7:2F:24:9F:00:9D:E8:FE:34:12:E0:76:DB:17:41:75:27:45:DF:A9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A058D7CDFBB8A1A8FC0A59CF9A2759FEE5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9y8knwCd6P40EuB22xdBdSdF36k.roa
Signing time: Mon 31 Aug 2026 17:22:12 +0000
ROA not before: Mon 31 Aug 2026 17:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
2a02:2fc0:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:d7:cd:fb:b8:a1:a8:fc:0a:59:cf:9a:27:59:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 31 17:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f72f249f009de8fe3412e076db1741752745dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:4c:83:96:0c:49:7d:91:f4:3b:20:8e:1c:
e0:04:4f:5f:ea:1a:04:0e:68:5b:c9:94:81:f8:c0:
8c:fc:06:09:ff:6a:fc:2b:f2:ac:ee:07:6a:47:b3:
77:52:3e:05:73:18:b2:09:b2:d8:80:2f:17:7e:f5:
bf:db:63:21:ce:76:5f:74:7b:5f:8b:ea:53:69:af:
7e:de:8e:2b:6e:0a:d4:e1:f4:eb:a8:91:dc:b0:5c:
e4:38:5e:01:e0:2f:8e:34:c2:28:11:08:94:89:b0:
f4:65:30:aa:e3:4b:20:a7:c0:39:93:7c:0c:04:06:
5a:9a:93:e9:6a:a1:da:19:9b:71:a1:58:ef:eb:76:
b7:0d:25:96:32:f9:ca:25:9c:66:80:a2:3f:ef:fb:
47:3f:3f:8a:67:c0:7e:79:e1:44:13:06:a7:af:70:
b3:84:11:61:bc:90:82:30:b2:3f:ed:f2:30:b9:ea:
b2:4c:de:b8:49:b0:c1:7a:82:01:4a:e6:b3:21:7a:
72:e2:e6:7a:6a:78:96:a4:a8:b1:52:31:c2:bc:63:
c9:42:25:91:e7:63:3f:e9:42:89:5b:10:12:d7:d6:
94:d7:1a:02:53:5f:12:90:0b:93:2a:25:64:7e:2d:
1f:4a:ae:52:d9:fb:df:04:4e:90:5c:72:a6:bd:7b:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:24:9F:00:9D:E8:FE:34:12:E0:76:DB:17:41:75:27:45:DF:A9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9y8knwCd6P40EuB22xdBdSdF36k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
IPv6:
2a02:2fc0:e::/48
Signature Algorithm: sha256WithRSAEncryption
80:73:b2:fc:9d:8d:34:e9:23:85:1f:12:31:21:b9:8f:d4:b9:
60:1f:b5:9e:24:45:1e:07:68:de:3d:63:b1:cf:9a:43:77:fd:
f4:ef:ee:a9:a8:01:16:95:01:db:87:66:fa:0f:1c:c3:71:c0:
e3:8f:d2:29:41:77:8f:91:d0:b0:c2:aa:db:12:9a:53:c4:3f:
63:bd:15:a9:1b:80:61:cc:13:2e:5a:9a:ce:cd:12:75:6b:1c:
09:87:c8:86:bf:22:32:51:bc:b1:0a:4e:10:2b:8f:ae:f3:ed:
a5:cc:5b:31:8e:fd:6f:b4:70:0b:ae:29:23:68:e2:dd:6f:2d:
47:fe:aa:fd:ec:cf:2a:c3:ab:bc:bf:3a:38:e5:8d:c3:e4:4c:
0f:14:f0:3b:18:1c:95:0d:bc:57:d9:02:83:80:2e:f1:b4:55:
c7:fb:34:0e:9e:3d:2b:c4:be:b6:c9:39:d6:3b:d9:df:ae:75:
c7:34:8b:f4:f1:c2:19:67:49:3c:e9:34:19:02:49:4e:aa:15:
e3:43:1a:69:a1:53:16:0a:df:6e:1e:a2:c3:38:ed:bd:36:01:
74:53:5f:bb:da:81:c9:12:e3:9c:4e:87:d7:4f:c3:b5:3e:5b:
8d:1a:41:e2:ad:ac:a9:3f:b5:c2:a7:f1:4d:ef:80:18:37:0b:
65:c8:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:39 2026 by rpki-client