Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cg9hwZfaugu9xaHv242ISEWP77w.roa
File: cg9hwZfaugu9xaHv242ISEWP77w.roa (raw, json)
Hash identifier: O6FoB2aFPxAFALe3hXUCqIT7Cfcdb7aiNMn3uioXfEg=
Subject key identifier: 72:0F:61:C1:97:DA:BA:0B:BD:C5:A1:EF:DB:8D:88:48:45:8F:EF:BC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F2643C9DE0F6E0E5F304D17C4FE6AF6FB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cg9hwZfaugu9xaHv242ISEWP77w.roa
Signing time: Fri 03 Jul 2026 04:36:44 +0000
ROA not before: Fri 03 Jul 2026 04:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58015
IP address blocks: 5.231.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:43:c9:de:0f:6e:0e:5f:30:4d:17:c4:fe:6a:f6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 3 04:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=720f61c197daba0bbdc5a1efdb8d8848458fefbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:f1:c1:c7:51:43:00:6f:85:97:1f:a9:f1:
f0:d4:0a:0d:de:47:c0:2b:09:cb:a2:a8:8a:0a:8c:
b1:5e:db:31:19:60:02:72:42:0d:55:4f:be:37:10:
b5:29:29:77:9e:eb:71:2f:c7:63:97:48:5d:ce:88:
fb:05:28:fd:4b:c6:ef:c8:fa:ab:db:f2:14:71:47:
44:5c:c1:53:33:65:aa:ac:af:cd:d5:68:6e:33:3b:
48:75:f0:f5:9a:09:3a:65:05:c5:1c:3b:1a:ba:9d:
38:03:95:27:c2:a5:f2:9a:28:13:3a:e2:a7:2e:45:
09:29:ae:5e:b1:da:6b:fa:fe:3e:3d:8b:91:a6:b9:
08:e5:c5:3b:15:60:21:f2:63:de:4e:b5:27:e2:78:
5a:e1:31:d0:70:13:35:fa:f0:d6:6c:e6:c5:f2:f5:
3d:e9:19:7e:ac:42:f9:86:d8:e9:89:1b:d9:49:57:
2c:3e:a9:0f:95:f6:8b:c2:54:6b:c4:fc:88:44:09:
84:cc:ed:49:57:9c:5d:f8:e4:52:e7:c7:bc:7f:a9:
dc:5f:35:16:07:ae:02:ff:0e:f6:1c:e6:54:9c:1e:
f8:ef:16:ee:07:37:96:e4:49:20:b9:e2:e7:4f:5e:
a7:dc:d5:7e:8c:25:b6:98:a4:c7:11:44:5a:c9:e5:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0F:61:C1:97:DA:BA:0B:BD:C5:A1:EF:DB:8D:88:48:45:8F:EF:BC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cg9hwZfaugu9xaHv242ISEWP77w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.97.0/24
Signature Algorithm: sha256WithRSAEncryption
df:9e:22:2c:db:ea:05:43:b8:7b:f7:d9:26:a0:3c:c9:f8:df:
ab:c5:2e:72:bc:73:d5:34:18:43:75:a5:00:19:22:29:fe:a5:
de:75:92:cd:c5:9c:58:2c:05:80:33:d1:16:12:96:92:c7:e5:
22:d0:fd:e4:b5:3d:e3:93:66:14:21:c4:8e:8b:ea:f7:60:c2:
a6:db:7f:d0:e0:b6:72:04:6f:4b:34:61:b5:88:87:0a:ff:ee:
3f:4a:00:d0:c2:11:b1:41:51:3c:5f:da:39:cf:38:d4:7d:47:
93:62:b3:ff:23:3c:00:80:97:c6:31:2f:5f:a1:8b:64:8a:92:
b4:6a:f7:65:be:87:31:06:a1:0f:4f:a5:d6:03:ff:e4:2d:6c:
b2:3d:dd:0f:8f:a0:5c:65:43:7c:0a:de:8b:94:87:e7:9d:c3:
e3:77:bf:0b:44:59:ca:fc:bb:e5:eb:85:79:eb:03:6e:32:11:
8b:10:b9:d2:38:68:1b:cf:2f:53:97:d4:fb:dd:34:e4:0e:a9:
a6:c8:fb:53:02:a4:75:d4:40:72:b0:02:e3:51:76:02:fb:5e:
b0:0a:bc:5f:76:24:7a:de:73:f9:e1:6c:a3:0b:5f:33:04:81:
c2:19:c6:7b:ec:fb:6f:11:21:36:c5:b7:de:18:08:50:13:75:
ff:a1:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:36:01 2026 by rpki-client