Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SPynnkkD3hpiNDCjawfrzHj72FA.roa
File: SPynnkkD3hpiNDCjawfrzHj72FA.roa (raw, json)
Hash identifier: zgAMl2/KGKwB0WR0YaMPMOeXMFzRNc7j1DFavgjiGoQ=
Subject key identifier: 48:FC:A7:9E:49:03:DE:1A:62:34:30:A3:6B:07:EB:CC:78:FB:D8:50
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E8CFB1D62E2B1A8A75AF9691ED54EC2B1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SPynnkkD3hpiNDCjawfrzHj72FA.roa
Signing time: Wed 03 Jun 2026 10:15:27 +0000
ROA not before: Wed 03 Jun 2026 10:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:fb:1d:62:e2:b1:a8:a7:5a:f9:69:1e:d5:4e:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 3 10:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48fca79e4903de1a623430a36b07ebcc78fbd850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:ff:3a:e8:00:7e:30:ee:4f:91:64:db:83:
f6:41:54:c8:fe:87:04:35:00:c0:7d:b6:83:8c:58:
f8:af:e0:61:ea:18:b5:5c:fc:63:ce:0e:67:fb:c9:
7b:a4:06:dc:4a:85:f2:66:65:89:20:95:42:d9:de:
ae:9a:43:fc:a2:79:a7:31:a2:57:23:d0:f0:e9:3c:
88:63:8b:76:ef:2b:8b:1d:27:e2:c2:14:83:e6:7a:
6e:5b:9f:cf:02:8c:50:65:32:6a:ab:e8:5e:ec:58:
59:13:e2:2c:56:89:ef:19:6a:f6:a2:dc:af:95:a1:
d3:0b:7c:13:c4:d2:e1:a8:33:f0:8f:6c:5f:bd:15:
3f:8c:f9:2e:f3:39:cb:1d:55:35:da:d4:ec:41:61:
d3:2b:85:81:31:23:27:a9:ca:e7:6e:3c:e9:90:4d:
ab:6c:da:d3:17:24:28:8f:3a:97:03:2f:91:b5:02:
9f:8b:87:55:ca:b5:f8:bb:7a:36:c4:b8:9e:f2:c3:
ca:7a:cc:43:54:94:a4:01:db:04:d3:28:d6:9c:01:
d2:b8:5c:fe:10:5a:e3:a4:92:88:4d:75:42:37:eb:
55:59:9f:74:3d:43:ea:e8:95:72:77:8f:ae:9b:52:
a2:82:9e:b4:ca:8e:b6:78:a8:55:78:9b:ec:cb:fd:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:A7:9E:49:03:DE:1A:62:34:30:A3:6B:07:EB:CC:78:FB:D8:50
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SPynnkkD3hpiNDCjawfrzHj72FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:33:e7:8a:0e:3a:88:b9:37:e7:a2:70:b7:6a:a4:67:45:5a:
69:02:7a:67:08:1f:b9:85:63:45:08:f4:35:4a:fa:d7:e7:4a:
f0:01:e6:6c:a9:9a:8d:21:66:4d:6d:5b:9b:aa:d7:3a:3f:8c:
d5:69:06:79:db:c6:b7:0c:49:b2:d6:15:3a:98:58:84:4b:9f:
74:55:f4:db:56:5a:44:95:3c:53:f6:d2:96:c8:40:15:b8:e1:
e5:f3:ca:f9:27:17:f8:af:d5:6c:2a:4f:f1:ca:8b:63:63:4a:
ee:39:95:18:63:d2:10:96:25:09:74:f2:c4:1f:8f:0a:f2:7e:
8b:6a:67:89:45:68:2f:88:8c:e1:66:65:2c:d7:4f:b0:54:25:
82:c9:19:14:69:82:b6:c1:91:53:83:36:e2:a1:6b:e0:c1:c2:
04:e4:dc:4d:b3:de:ff:88:03:eb:7e:ef:c3:bf:89:c3:2a:61:
0a:bc:6a:07:12:bd:79:a7:86:bd:77:94:0f:d5:dd:72:5c:15:
27:78:ff:94:fe:74:40:4e:cb:52:0e:4c:cf:ac:d4:69:2a:14:
6b:d0:d8:d6:91:c5:a2:49:2c:64:56:60:28:c6:2f:02:fa:b7:
45:ee:cf:59:df:09:29:c0:08:92:aa:20:9f:a3:62:14:9c:a1:
be:8b:7f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:20 2026 by rpki-client