Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CUQsI0lwBum_BQDXtyQh1_aIhbo.roa
File: CUQsI0lwBum_BQDXtyQh1_aIhbo.roa (raw, json)
Hash identifier: qU8gN3s13WwSosbsvlq/7k5+JjpcQsP1rxbIZ7fX+zI=
Subject key identifier: 09:44:2C:23:49:70:06:E9:BF:05:00:D7:B7:24:21:D7:F6:88:85:BA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F30A6CD19C07C0A6D8BBCAFB4660FC3AB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CUQsI0lwBum_BQDXtyQh1_aIhbo.roa
Signing time: Sun 05 Jul 2026 05:01:05 +0000
ROA not before: Sun 05 Jul 2026 05:01:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:a6:cd:19:c0:7c:0a:6d:8b:bc:af:b4:66:0f:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 5 05:01:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09442c23497006e9bf0500d7b72421d7f68885ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:73:0d:96:19:f2:e1:0b:b2:ef:27:e9:36:
7e:19:8b:78:46:e6:e8:26:45:c6:e4:74:be:17:36:
52:5d:3f:df:83:d1:f4:20:84:f5:a8:0f:34:31:e8:
b3:aa:fc:d8:1b:f2:06:69:66:61:a4:30:c8:47:f8:
72:aa:0a:c9:74:d5:39:0b:d7:c0:7d:0c:e4:fb:aa:
f6:31:25:d8:d7:d8:6a:c1:e8:71:d8:78:6b:04:b3:
96:61:fb:c2:b1:1c:f9:05:bc:75:d6:53:16:b9:3e:
45:33:df:4b:47:42:7c:f6:ea:d9:fc:f0:5c:7f:d8:
39:e1:a1:17:ec:18:36:9b:72:38:6b:1c:89:9c:ee:
54:8b:92:d7:29:69:53:6e:f6:69:04:77:ea:e3:12:
c3:3e:89:5c:51:7f:c3:66:d8:cb:fb:24:26:60:88:
b2:f9:08:98:f3:1c:d6:dd:1f:5f:38:c8:b0:78:59:
5b:31:d8:8f:e1:ca:54:5b:7e:87:61:bb:ee:d0:2d:
e6:4f:2c:01:cc:24:69:80:b9:bd:1c:1d:a7:d7:48:
53:f2:df:71:79:f3:1a:4c:ab:e4:dc:43:74:0b:ba:
ff:6e:f5:c4:8e:d4:3b:cc:fe:8b:84:96:1c:1e:24:
a3:c1:34:80:52:30:eb:b0:c9:37:2b:a7:f5:bb:19:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:2C:23:49:70:06:E9:BF:05:00:D7:B7:24:21:D7:F6:88:85:BA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CUQsI0lwBum_BQDXtyQh1_aIhbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ea:81:b2:1f:4b:a2:4f:34:37:c1:36:a9:8d:3b:16:67:4c:
72:69:23:0d:7b:95:63:fb:d0:04:67:fa:4b:7a:b1:a6:f0:5f:
d5:7f:f4:0b:46:f9:b5:7b:be:1a:b4:7b:2f:e7:16:3e:61:9d:
28:49:62:00:1a:8a:e3:01:2b:38:16:50:40:2d:ba:4b:45:97:
54:7b:66:84:32:dc:fd:eb:bb:59:08:77:ac:d5:77:0c:16:9a:
ad:30:29:5c:73:18:6d:01:e0:95:e7:8c:af:eb:28:7c:65:6f:
0d:84:98:dd:bd:86:86:16:2b:3e:3b:c7:8a:0f:81:28:1b:04:
e6:ee:15:49:d9:d7:a6:24:3a:9e:e1:18:af:35:59:e2:de:a6:
80:99:66:1f:97:1e:2e:ad:62:81:72:96:bc:2d:1f:41:4c:3f:
a4:5f:03:11:14:43:78:1c:33:c2:85:95:46:c3:a6:71:79:0c:
5f:2f:b5:cb:d4:ce:90:eb:95:24:16:28:2b:77:e6:de:2f:ce:
00:0a:b4:88:90:5c:ee:48:42:d3:21:46:7f:bb:55:ad:55:60:
3a:eb:41:8f:58:c4:14:71:5a:d9:06:8d:86:91:f0:fe:0d:0c:
15:cf:b1:34:31:e9:bf:03:71:07:50:d2:c0:4c:f7:09:f4:a1:
dc:5d:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client