Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rn4V7WVERcuqOVTYojYcsjzqMNY.roa
File: Rn4V7WVERcuqOVTYojYcsjzqMNY.roa (raw, json)
Hash identifier: VPZUNWe8QkUHOsq+Ux46I4fsZSf6FNZDGWHiVhkonkE=
Subject key identifier: 46:7E:15:ED:65:44:45:CB:AA:39:54:D8:A2:36:1C:B2:3C:EA:30:D6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F2643CA2E5063851C8CF55E61AECF305F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rn4V7WVERcuqOVTYojYcsjzqMNY.roa
Signing time: Fri 03 Jul 2026 04:36:44 +0000
ROA not before: Fri 03 Jul 2026 04:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206659
IP address blocks: 5.231.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 14:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:43:ca:2e:50:63:85:1c:8c:f5:5e:61:ae:cf:30:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 3 04:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=467e15ed654445cbaa3954d8a2361cb23cea30d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:85:99:01:80:74:92:6f:a2:20:f4:bb:27:
88:df:c5:dc:79:bc:72:29:f2:37:16:cb:b4:15:23:
0a:7d:99:b7:71:f0:48:01:9d:f9:08:68:18:02:90:
dd:af:5c:c8:03:d3:0f:b4:e6:43:05:71:57:dc:03:
b7:e6:25:a5:48:7b:d7:82:11:45:9b:df:67:bb:2e:
9f:a8:0d:d6:53:37:45:1c:f2:90:b4:7f:05:2f:bd:
4c:05:57:de:45:52:ed:04:7b:78:a5:c0:48:fe:a5:
fb:d6:0e:b8:4e:02:d3:0e:3f:bd:65:43:84:da:3c:
58:3b:08:ed:ae:78:b8:6f:96:3b:63:22:8a:4b:b7:
7c:22:c9:82:ba:59:4a:4e:e6:56:dc:81:e0:da:cd:
8f:13:88:54:2e:4e:2f:75:f6:b4:e0:70:04:c2:b1:
0d:5c:ad:31:9e:be:ce:c7:6e:aa:d9:c1:17:0b:92:
a6:e4:34:84:d4:1e:a1:3e:2e:90:69:59:e1:17:53:
e3:7a:2b:7c:86:99:bd:18:08:1a:2c:51:c2:c2:f3:
0d:25:29:21:fd:a3:c8:9f:b5:ba:07:89:78:27:d6:
fd:1c:33:12:66:e0:3c:f0:e1:54:4e:00:7f:3d:a4:
fe:27:1d:a8:42:9f:21:1f:2e:ed:80:0f:c5:19:53:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7E:15:ED:65:44:45:CB:AA:39:54:D8:A2:36:1C:B2:3C:EA:30:D6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rn4V7WVERcuqOVTYojYcsjzqMNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9b:ca:9c:9e:77:35:26:5c:4b:46:dd:fa:cd:1c:17:8c:0c:
95:27:52:30:03:fe:a1:7e:c9:c2:e7:46:f0:0b:47:2d:ce:20:
5c:03:1d:fe:03:33:37:a3:e3:ab:33:24:21:da:10:c2:12:df:
b1:7d:5a:ca:e0:d8:06:f8:a2:93:11:e2:05:90:3e:da:a3:e9:
c8:c4:f2:9f:65:53:48:71:db:4a:a5:20:70:08:eb:5c:05:17:
8f:d1:9f:08:07:55:ae:6c:11:ac:51:d7:06:3c:31:89:92:52:
c3:55:5b:64:37:71:fb:7b:18:c9:83:06:02:60:6a:1d:dc:60:
be:7d:4c:98:36:75:11:f5:30:bb:d1:54:6d:27:96:ee:f5:da:
3f:8c:58:af:59:56:f2:7d:14:e0:3d:7f:87:66:2c:05:c3:39:
eb:61:dc:9e:46:eb:83:e1:fe:8c:94:3c:b9:91:73:3a:39:9a:
ad:ef:c4:20:00:24:7f:5f:02:f2:2f:ee:8c:c9:31:0f:b9:87:
f3:70:67:38:72:1c:7c:aa:87:ca:7f:ef:ca:7c:97:f7:f9:96:
4f:fe:1c:17:f4:a9:f8:b9:98:d2:02:19:fc:85:99:92:1a:1f:
01:14:48:e4:ff:e3:0b:5b:21:45:8e:bd:1b:ee:08:26:29:49:
dd:75:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 18:14:42 2026 by rpki-client