Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J2hjEZ9FZXqTloRX8aFUGVFp54w.roa
File: J2hjEZ9FZXqTloRX8aFUGVFp54w.roa (raw, json)
Hash identifier: ZFrou9I4M6G/vkSq+eJ/StIx3WPaxBQsmx2Kw+Snq2U=
Subject key identifier: 27:68:63:11:9F:45:65:7A:93:96:84:57:F1:A1:54:19:51:69:E7:8C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A065C40AD691F920ABE9F66DD371E1C272
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J2hjEZ9FZXqTloRX8aFUGVFp54w.roa
Signing time: Thu 03 Sep 2026 05:35:41 +0000
ROA not before: Thu 03 Sep 2026 05:35:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58015
IP address blocks: 5.231.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:c4:0a:d6:91:f9:20:ab:e9:f6:6d:d3:71:e1:c2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 05:35:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=276863119f45657a93968457f1a154195169e78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:ec:ae:32:f3:86:b4:25:2c:d0:ce:20:74:
de:cb:a6:0f:44:3b:33:1a:17:e7:65:af:59:1a:8d:
1c:6c:91:6e:70:d7:02:2a:4c:ae:f1:40:8f:27:f0:
69:cf:fc:1d:cf:da:d2:03:08:3c:9c:3c:93:72:9a:
f4:9e:ec:4d:a1:97:33:d0:7c:e7:2d:a3:4a:d5:37:
ac:cc:cf:3a:0d:92:be:d1:0a:81:5b:44:7a:5f:72:
5a:99:3f:e4:5b:48:77:c4:1e:77:ae:45:ae:5c:cd:
3a:c1:ce:3b:3d:ae:66:9e:55:45:d1:a7:37:54:0f:
be:7c:b2:f3:e8:24:62:87:5c:23:20:59:31:14:b6:
4c:0e:ba:4d:b0:b1:d2:5d:d3:30:53:aa:df:b8:9f:
b1:ee:d0:c6:67:3d:84:96:57:a8:f4:61:17:c9:75:
98:5f:9d:ce:d5:28:fe:5a:ca:1f:62:62:86:80:0c:
d3:25:a6:b9:f5:6d:e2:92:5b:bc:85:79:3a:b3:c6:
37:f0:40:01:ad:15:bb:70:f5:7b:ef:4f:56:9f:10:
ac:4e:95:8e:a3:dc:9d:49:be:07:7f:57:fe:76:b4:
fb:a4:0d:a0:f9:f5:cc:6e:c1:81:8a:08:74:5c:22:
ca:12:bd:7d:93:58:a2:cd:28:07:7d:2c:e8:2e:48:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:63:11:9F:45:65:7A:93:96:84:57:F1:A1:54:19:51:69:E7:8C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J2hjEZ9FZXqTloRX8aFUGVFp54w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:96:84:3a:2b:1a:ae:46:21:02:d4:ac:1c:a6:91:96:d4:a7:
57:43:93:0b:37:7f:eb:73:bc:0d:fa:c4:19:85:3c:59:4a:55:
74:81:d3:bb:8b:fe:e1:e0:12:40:1e:e0:d1:c9:55:57:09:1f:
5b:60:d8:4c:1c:fd:73:72:28:ef:65:a6:bd:7c:bf:c4:3e:0e:
3a:14:64:67:cb:e3:71:b2:0d:22:5c:b1:6e:f1:93:a2:ff:28:
10:17:3c:ac:ee:41:bc:a0:a2:c6:09:a7:cc:6c:f6:5c:f0:c5:
b7:3a:cf:a8:a2:88:d7:d5:31:7b:50:ec:7a:64:cc:89:f3:d1:
d1:09:3b:67:f8:7d:e7:30:f7:37:0b:c7:c6:2e:bf:b0:c9:f6:
36:42:cb:af:6e:2a:cc:8f:ac:1a:b7:89:3b:29:17:0b:43:b0:
2a:9b:22:39:ca:6c:a3:db:3a:76:9c:ea:74:ec:04:aa:db:64:
b8:c3:a0:43:a0:3d:d7:0e:28:bc:ce:48:9f:c6:9f:fb:9a:41:
89:1e:34:02:5f:0e:8e:f0:27:67:c2:b9:ea:3a:85:dc:21:4a:
9f:2b:ee:3a:36:af:9c:2f:c3:53:cf:6a:07:7d:02:c7:08:52:
c0:cc:9b:63:62:50:c8:fa:9e:85:54:ae:ad:e7:7f:da:4a:ca:
ad:79:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:34 2026 by rpki-client