Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bW3V40eoa9lK5sKvCwZuM53AU2c.roa
File: bW3V40eoa9lK5sKvCwZuM53AU2c.roa (raw, json)
Hash identifier: fqLd5Dz+pknkTMUHvU+0u/rApCDRQbl8D2Oe+uG+mTI=
Subject key identifier: 6D:6D:D5:E3:47:A8:6B:D9:4A:E6:C2:AF:0B:06:6E:33:9D:C0:53:67
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C36909E9BB5FF0E5E38F050606E1604DF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bW3V40eoa9lK5sKvCwZuM53AU2c.roa
Signing time: Sat 07 Feb 2026 05:26:13 +0000
ROA not before: Sat 07 Feb 2026 05:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:36:90:9e:9b:b5:ff:0e:5e:38:f0:50:60:6e:16:04:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 7 05:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6dd5e347a86bd94ae6c2af0b066e339dc05367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:8c:eb:09:52:d0:3b:84:64:06:81:94:db:
8b:04:97:d8:0b:21:a2:57:eb:ff:cb:96:72:93:f7:
7d:50:6e:8c:48:39:a0:37:1e:66:bb:ec:cc:ae:b9:
2b:bd:bb:64:95:7d:f1:01:c7:25:98:86:2c:27:55:
af:14:1e:13:17:67:c7:8b:cd:83:bf:61:5b:1a:75:
95:15:29:66:06:67:a1:64:a2:f6:5c:1d:5d:a1:74:
50:d4:45:1d:1b:1d:04:d8:d3:53:35:8b:6b:89:e1:
d0:30:3b:32:2e:ce:05:45:7b:10:b7:2a:92:96:5e:
cd:ec:70:7a:eb:32:0c:39:09:3d:ed:24:c9:60:c4:
3c:12:18:1d:7b:cb:f0:aa:a7:14:54:48:5e:b6:d3:
e2:6a:42:5b:f2:a5:23:d6:7d:1d:ea:5c:28:3e:95:
e0:de:0b:ba:45:47:e9:49:20:86:08:ec:15:3c:50:
96:0e:a9:5d:23:5a:36:e8:e3:06:ff:3c:ed:c2:38:
7b:e6:cb:75:91:b5:96:7b:e2:af:72:68:07:c2:6a:
ad:20:56:62:c3:d5:0c:0e:fc:8d:a4:00:10:1b:10:
a1:75:6a:76:3d:c6:02:3b:d5:50:1b:26:b2:73:fa:
f4:3f:97:0f:5a:d2:14:5d:57:06:58:15:8e:48:d0:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:D5:E3:47:A8:6B:D9:4A:E6:C2:AF:0B:06:6E:33:9D:C0:53:67
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bW3V40eoa9lK5sKvCwZuM53AU2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cb:ee:3c:e8:de:84:22:14:49:4d:b2:50:ee:d4:83:fa:73:
54:da:56:92:f5:d3:9e:fb:28:fd:87:ed:49:69:c6:bd:9b:fc:
11:1a:7e:c2:1c:41:4a:68:db:03:ac:59:6c:f2:0b:f0:34:be:
67:2c:28:af:8b:d4:ea:c4:e4:40:8e:3d:16:c2:60:a5:62:9c:
86:a0:53:91:5c:ad:e1:be:d7:cf:87:15:91:ab:d3:38:b7:9b:
62:77:22:8d:8a:40:63:e6:a9:25:e2:a2:fd:70:18:88:dd:d6:
0d:0f:a1:b5:06:73:f9:77:7c:e8:45:7e:d6:dc:24:42:07:8b:
f1:52:60:e7:66:ca:7c:e7:f6:7b:b7:8d:9c:e9:d1:0a:db:73:
e3:a2:f9:8b:8f:ea:06:48:d5:a6:c5:0a:77:50:2c:86:91:a4:
b2:13:9c:43:09:cf:a9:9a:d7:b0:97:d5:e6:42:9a:ac:b3:82:
40:0c:09:e1:66:21:83:24:cb:f9:69:d3:2e:76:4e:41:24:8e:
1c:7d:1a:fa:c9:83:f0:62:a3:66:30:8c:20:68:96:d6:b8:92:
13:f8:14:57:bf:a4:ad:44:6b:b3:61:26:46:ff:2b:5c:8b:8e:
3e:c6:b8:3f:51:6d:fa:d8:a4:ba:a9:1d:8a:f0:ac:9d:81:11:
7b:31:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:42:37 2026 by rpki-client