Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O13HJGmitdjd2vYkZi4JUhV9YI4.roa
File: O13HJGmitdjd2vYkZi4JUhV9YI4.roa (raw, json)
Hash identifier: 8JVOX9kNaBkn+qqslVj8PVO0wCmQt1RUlHcnItxEryU=
Subject key identifier: 3B:5D:C7:24:69:A2:B5:D8:DD:DA:F6:24:66:2E:09:52:15:7D:60:8E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1169E2B5DFD3F391968F7E164346266F2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O13HJGmitdjd2vYkZi4JUhV9YI4.roa
Signing time: Wed 07 Oct 2026 13:47:06 +0000
ROA not before: Wed 07 Oct 2026 13:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214127
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:9e:2b:5d:fd:3f:39:19:68:f7:e1:64:34:62:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 7 13:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b5dc72469a2b5d8dddaf624662e0952157d608e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:4f:c2:2f:06:51:2e:00:a7:3a:20:58:2d:
fd:d6:74:da:be:03:50:fb:7f:17:73:59:93:f5:f8:
0b:fd:4e:a5:fc:ba:24:86:83:fe:c5:3d:9e:64:f8:
f1:ab:e4:d6:f2:88:a3:d8:ba:29:e7:dd:aa:5a:e3:
be:f7:89:61:04:e3:26:ea:56:b1:b8:21:91:08:e0:
67:32:97:8d:48:3a:d3:08:02:b8:7e:e1:07:96:02:
d2:86:33:89:45:b7:26:6c:5a:dd:14:71:aa:a2:ea:
1b:c1:d9:38:16:7e:15:13:fb:33:a3:b8:96:12:fe:
bc:2a:13:a3:3b:dc:26:5e:80:e4:31:73:90:97:2a:
e8:56:27:09:8b:5c:7f:59:36:74:09:3b:1e:a2:b7:
d1:03:dc:67:fd:65:58:9c:ae:6e:fc:df:2d:59:54:
da:bb:b5:40:a0:9b:ab:b4:92:98:74:ac:11:b8:2b:
44:d5:c9:ab:d0:73:bf:10:a4:96:ba:90:a2:84:f5:
59:c7:b5:95:ad:bb:d4:f5:35:68:1b:b6:a6:93:28:
b3:5a:62:3f:78:01:2c:54:64:a2:13:0e:d9:f6:e5:
dc:38:59:be:08:fd:b7:a7:7e:f3:a4:06:ac:40:97:
1c:5d:1a:8d:e7:7d:c2:1b:e6:a5:23:a5:0a:21:ec:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:C7:24:69:A2:B5:D8:DD:DA:F6:24:66:2E:09:52:15:7D:60:8E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O13HJGmitdjd2vYkZi4JUhV9YI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:26:33:ac:db:2c:f0:3d:d5:4e:ea:f6:6c:c8:08:1f:7b:b4:
e3:2a:dc:e3:f9:3c:5a:dc:01:19:4d:ad:7d:44:27:92:75:c4:
9c:00:9e:a9:7b:e2:d8:39:11:e0:cb:3f:51:06:c4:55:4e:51:
25:cb:1a:8d:33:68:83:a8:95:66:9c:3f:e2:19:4d:7b:aa:1c:
d2:02:b9:4d:2b:c7:c7:4c:fd:84:79:b6:8d:eb:7f:d5:28:fb:
a4:2c:9c:e0:62:f0:9f:18:c1:c1:a2:42:aa:6e:e2:4a:16:51:
f4:cf:58:b2:0d:3d:7b:f9:51:a2:24:b4:b4:e3:99:dc:24:93:
31:ec:14:fc:56:13:4d:be:c3:88:43:bd:91:8c:63:18:4a:ca:
33:ea:73:68:85:22:bc:f5:46:3e:6b:b6:2f:11:9b:45:0d:41:
5f:b7:71:d3:a6:72:16:f8:8f:8b:16:e3:98:5b:9d:8d:ad:23:
32:25:94:15:59:e0:28:e1:f6:55:90:9c:32:db:43:fa:59:50:
af:4b:6d:b7:13:89:42:ce:8e:7d:16:76:dd:d9:4d:60:8b:de:
65:48:bd:77:6a:3f:c8:74:60:df:77:40:b4:e2:96:94:5d:54:
af:f1:90:7c:b0:75:b6:58:a7:8b:47:02:1c:68:bb:f2:69:a8:
4d:23:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:40:07 2026 by rpki-client