Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cUoWUk869Zzto2_un6O3_j5jqVk.roa
File: cUoWUk869Zzto2_un6O3_j5jqVk.roa (raw, json)
Hash identifier: p263wIv4w+xDIJROIJx0xZvhWQepXayqr0KR0FjaXEk=
Subject key identifier: 71:4A:16:52:4F:3A:F5:9C:ED:A3:6F:EE:9F:A3:B7:FE:3E:63:A9:59
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CE6A57E70997AE429B953E3C6E65A2B62
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cUoWUk869Zzto2_un6O3_j5jqVk.roa
Signing time: Fri 13 Mar 2026 10:02:11 +0000
ROA not before: Fri 13 Mar 2026 10:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1
IP address blocks: 5.231.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a5:7e:70:99:7a:e4:29:b9:53:e3:c6:e6:5a:2b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 13 10:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=714a16524f3af59ceda36fee9fa3b7fe3e63a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:55:a9:12:94:d7:c2:8f:af:68:a9:b1:de:
48:a7:78:3b:f5:d3:96:0b:a6:a5:36:aa:f5:76:e0:
ef:c8:6c:10:a9:86:b2:03:f2:e6:42:c7:90:2f:8d:
bc:1a:e5:e1:3f:48:50:59:62:f2:fc:1a:34:15:ea:
12:f7:35:1d:f7:4c:23:47:2c:d5:35:ed:bd:e9:a3:
a9:11:6e:9a:ed:38:04:f2:33:be:d3:bc:8c:cf:8e:
3e:a6:a7:40:3d:7e:9e:bf:44:03:d2:db:d0:8e:21:
a8:54:72:b8:f4:0e:39:2a:e5:be:1c:1d:69:ca:0f:
9f:86:26:8c:9f:1d:f3:bd:0e:32:63:5c:fb:00:9f:
2f:ba:3e:ad:ea:0f:4c:04:72:51:b3:5f:74:34:a4:
84:85:91:db:4f:40:1d:94:b5:7a:e2:c7:ce:8d:5d:
b0:a5:8b:0a:d6:91:fe:ff:8c:e5:2d:b4:54:a1:b1:
78:ab:b1:56:8f:30:91:47:be:87:af:ac:75:eb:2e:
72:a7:a7:5b:99:0c:50:df:da:72:1c:2d:9c:31:5f:
d2:2c:6d:de:58:e5:68:fa:b6:1c:9a:29:fb:df:45:
3e:b7:95:f3:33:d7:80:c5:19:eb:b6:01:c1:ab:33:
1a:8b:68:30:81:71:ee:2b:2a:73:8a:c2:b0:f0:4c:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:16:52:4F:3A:F5:9C:ED:A3:6F:EE:9F:A3:B7:FE:3E:63:A9:59
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cUoWUk869Zzto2_un6O3_j5jqVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.244.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b4:54:30:db:29:30:9c:f7:0f:5d:5e:22:88:b7:b0:6c:90:
80:e0:84:47:60:4e:81:da:d2:64:a2:4b:77:00:8f:d3:0f:78:
6d:09:77:a2:c6:25:20:5c:8c:17:29:19:21:8f:4b:54:b1:00:
af:eb:3e:94:2c:50:b1:19:12:af:c8:e1:6d:df:4b:e4:45:2f:
94:8b:ae:7c:f2:da:95:e5:84:64:ac:88:42:c1:42:50:35:d1:
6f:28:d4:6b:6e:0b:a9:bd:96:26:b4:82:b9:0d:f5:8f:2f:3f:
f6:1c:15:19:8c:c1:61:9c:e8:a1:5e:c7:cd:e2:58:9f:6a:79:
d8:e3:e4:40:f3:b9:4d:fb:cc:48:da:6b:84:38:a9:93:4a:c2:
4f:b5:33:5c:31:eb:32:37:54:3a:1d:b1:c2:02:42:fe:f2:5b:
d0:6f:cc:9b:b4:75:c6:70:28:13:4d:ac:2f:84:5a:25:3b:ae:
cb:85:54:c3:26:07:1e:d1:40:a0:24:f7:13:2c:8f:20:5b:2f:
89:3e:a9:e8:8c:29:47:3e:d8:32:dd:1c:a8:43:49:a8:ff:c5:
22:ab:50:ad:d5:b5:fa:3b:07:ec:bd:44:27:99:79:08:24:a1:
98:4f:01:72:44:b1:43:40:58:a9:0d:de:79:05:2b:80:25:09:
74:ef:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 11:14:13 2026 by rpki-client