Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ATVTuzm9fnn_hfNZZJsdHApV5Vk.roa
File: ATVTuzm9fnn_hfNZZJsdHApV5Vk.roa (raw, json)
Hash identifier: spkRpocbiQgxE6ij/bKIknEMy8JEC14xyLP8IY31fRw=
Subject key identifier: 01:35:53:BB:39:BD:7E:79:FF:85:F3:59:64:9B:1D:1C:0A:55:E5:59
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FDD69E3A9D00083A9341A7FCE7B6E75A9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ATVTuzm9fnn_hfNZZJsdHApV5Vk.roa
Signing time: Fri 07 Aug 2026 18:08:52 +0000
ROA not before: Fri 07 Aug 2026 18:08:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 5.230.17.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:69:e3:a9:d0:00:83:a9:34:1a:7f:ce:7b:6e:75:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 7 18:08:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=013553bb39bd7e79ff85f359649b1d1c0a55e559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:e1:a8:83:3d:87:f7:19:44:f6:8f:be:0f:
0f:5c:b2:9c:0b:13:63:63:f6:8d:70:d4:a4:15:fb:
92:3c:d9:0f:53:21:b2:93:fe:81:2d:9c:79:55:d0:
95:11:57:20:a8:3f:34:65:3b:b9:b6:0d:31:b5:4c:
98:52:d2:5b:a5:67:8c:8c:5a:3b:76:11:17:7d:cf:
65:76:a2:02:ac:a7:23:69:04:40:2f:80:91:72:7e:
39:ff:47:f8:96:78:f0:62:e2:ba:5f:d0:d2:63:11:
59:70:22:d4:1b:bb:e7:7f:1a:ca:8d:b6:2a:e2:0b:
2a:85:ae:67:8b:e7:fa:02:74:c5:ea:93:88:d3:52:
1c:ca:fc:20:85:a5:0d:fe:b0:d0:f4:3d:5f:26:ee:
be:70:28:e4:74:f9:ed:ef:cc:77:d8:b4:8d:5b:26:
df:88:80:cd:f8:62:9f:80:17:54:7c:63:e9:ab:f0:
f6:5c:cf:3c:25:ed:c5:64:29:9d:a8:de:fd:62:d2:
73:ab:6e:8b:dd:c8:86:f7:e3:9d:60:0a:a8:c5:2c:
c7:95:7e:fb:1d:2f:fe:84:eb:71:9e:46:73:c1:15:
e2:a7:34:cd:fe:7f:bc:1b:b9:a8:57:87:e8:c3:70:
ba:3d:2d:a3:6b:7e:45:8e:e2:76:24:5e:27:54:fa:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:53:BB:39:BD:7E:79:FF:85:F3:59:64:9B:1D:1C:0A:55:E5:59
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ATVTuzm9fnn_hfNZZJsdHApV5Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.17.0/24
94.249.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:97:96:3a:ba:ed:eb:41:cb:e8:25:b3:c4:7b:30:53:4d:43:
a1:40:7c:7b:ca:21:49:22:5b:8f:ca:4d:d4:e8:86:e7:bf:63:
fa:5d:e2:49:0f:a6:21:ba:e1:20:01:21:9c:1a:92:79:80:dd:
49:57:b3:53:8f:eb:c5:14:17:63:83:f7:72:5e:3a:fb:03:1a:
7d:65:2a:3a:53:96:61:24:4c:50:bd:4d:f6:f3:4a:8d:c0:d6:
63:18:5e:77:38:0e:f3:88:9b:6e:15:a7:39:43:27:c2:ac:eb:
c7:d3:e7:52:44:43:a5:79:cf:76:55:c6:48:24:5b:41:e4:f9:
9e:de:f4:89:c7:86:0d:74:f6:8e:15:7a:75:ed:b5:34:ea:ee:
47:33:06:c7:22:47:ae:24:fe:e8:5e:0c:dc:18:5f:cc:6f:8b:
67:66:8c:86:e1:f2:0e:ac:19:44:c8:64:bf:28:98:6a:58:85:
cd:54:fc:e4:62:44:e3:5a:e2:ad:14:58:2b:64:b2:5e:b4:3d:
5e:b1:51:1e:a8:bd:39:f9:27:4c:90:c0:2b:1d:b2:05:85:3a:
f3:9c:eb:87:d9:cf:20:05:de:45:58:e3:d6:93:3e:69:07:e9:
25:cf:97:9a:e0:ef:42:e8:73:a2:b1:8e:27:f7:c6:cc:6e:8c:
0f:5a:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:37 2026 by rpki-client