Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBb6Zkwt21GWJMbA4BjCPcXYzXg.roa
File: QBb6Zkwt21GWJMbA4BjCPcXYzXg.roa (raw, json)
Hash identifier: GdMBUU8lvvfaPByzWb5qNjbjGmwwakn8HvYIODRp78w=
Subject key identifier: 40:16:FA:66:4C:2D:DB:51:96:24:C6:C0:E0:18:C2:3D:C5:D8:CD:78
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A033C7849326B103B1EA786CB730C90769
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBb6Zkwt21GWJMbA4BjCPcXYzXg.roa
Signing time: Mon 24 Aug 2026 12:38:28 +0000
ROA not before: Mon 24 Aug 2026 12:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:c7:84:93:26:b1:03:b1:ea:78:6c:b7:30:c9:07:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 12:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4016fa664c2ddb519624c6c0e018c23dc5d8cd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:4b:92:9f:1c:b1:92:f1:a5:10:d8:79:ba:
e1:65:27:1d:c7:7d:d7:39:b0:ad:8a:56:36:f8:87:
c2:07:2f:39:ed:f6:5b:2f:53:e8:05:05:58:d5:70:
41:79:23:a8:b4:a1:12:cc:b8:e3:c9:cf:94:a9:4d:
e4:73:32:d4:9d:ed:34:f5:28:34:8d:75:93:51:23:
32:5d:c4:48:b1:7a:17:67:a3:b5:7d:e5:9d:2c:14:
ff:1a:d0:da:74:86:42:09:38:78:38:70:81:bb:4e:
42:e1:64:77:15:e6:92:24:de:5e:9d:45:71:78:3a:
cb:06:04:28:45:4f:cb:73:dc:39:fd:82:cf:d5:62:
a6:7a:1e:86:97:d1:de:51:5f:88:56:32:f7:e0:e1:
23:24:ec:e9:c0:c3:77:b8:8f:6f:ec:b5:4e:b3:6b:
ba:42:06:a9:7d:90:f0:47:78:ab:9f:9a:e3:e5:7b:
e6:ee:ca:9c:04:a6:2b:01:63:88:9b:a4:25:75:6d:
d1:b0:41:24:3b:64:07:58:86:da:26:63:09:fd:50:
6b:23:65:a2:70:e6:85:de:d5:08:23:da:12:46:3f:
a3:73:94:7a:38:27:00:21:67:ab:59:33:f1:ea:56:
73:3d:03:a2:2b:a3:fd:1a:bf:75:54:cf:55:75:a8:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:FA:66:4C:2D:DB:51:96:24:C6:C0:E0:18:C2:3D:C5:D8:CD:78
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBb6Zkwt21GWJMbA4BjCPcXYzXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cc:2c:32:fc:e3:ab:78:34:93:ec:b8:34:7f:22:77:9a:58:
77:78:19:1c:6b:73:48:b1:85:a2:cb:0c:5a:ba:7e:38:6c:1b:
f7:8f:4f:54:e1:ae:4c:98:0e:8e:db:6d:d2:3f:58:91:08:28:
93:67:78:1f:c9:7e:bf:c1:e4:c3:94:a6:9e:7d:b2:db:18:f3:
b1:66:0c:9f:0a:d8:f1:4b:85:c3:3c:39:98:0c:4d:2f:fd:87:
80:95:08:c1:c3:ab:89:35:38:2d:cb:a2:85:ae:9a:9b:dc:42:
47:82:6e:3f:a3:2e:bc:53:26:f3:bf:b5:e7:f1:8b:1c:c9:48:
ad:bb:46:23:0b:f6:22:a8:52:9d:d5:88:29:28:86:2d:06:cc:
98:78:c1:97:48:83:6d:60:74:53:82:b9:da:12:66:dc:8f:46:
17:db:e3:cb:a2:cb:ae:de:26:07:a4:27:ed:16:f9:58:1b:ef:
f8:78:91:8a:57:9e:97:e4:3d:c5:78:a6:85:1c:32:f3:2c:97:
10:c9:83:9f:b3:d5:bb:88:6c:7c:32:ef:87:0c:bb:d4:4b:c2:
f5:4c:29:1b:c6:d4:c1:35:0f:7b:59:b7:32:fb:d6:b4:e8:4d:
a5:e7:e0:f7:17:9c:31:2b:3f:34:91:61:55:a4:28:6b:f6:9a:
3e:17:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:45 2026 by rpki-client