Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dZxMCOkysWkQisrVXCTq_DLo8yw.roa
File: dZxMCOkysWkQisrVXCTq_DLo8yw.roa (raw, json)
Hash identifier: /nqbJ6LJEzj7uQxY1xyzLBhXnumM04JEAbxh0TdPt4E=
Subject key identifier: 75:9C:4C:08:E9:32:B1:69:10:8A:CA:D5:5C:24:EA:FC:32:E8:F3:2C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A033C784FFF88C27B60E483EC0A27532D4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dZxMCOkysWkQisrVXCTq_DLo8yw.roa
Signing time: Mon 24 Aug 2026 12:38:28 +0000
ROA not before: Mon 24 Aug 2026 12:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214127
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:c7:84:ff:f8:8c:27:b6:0e:48:3e:c0:a2:75:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 12:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759c4c08e932b169108acad55c24eafc32e8f32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:f1:14:e3:b5:6b:6d:4a:d5:84:0c:2a:2c:
35:23:ed:a7:d5:bd:e1:5c:01:4c:45:05:12:2b:ff:
4e:4d:3f:5e:47:fd:4d:3e:a7:27:d2:8c:b9:69:95:
e0:db:7b:84:57:92:04:28:43:84:82:66:ec:20:8d:
2c:c1:56:44:6d:e8:d8:bc:db:db:71:0d:aa:d5:b0:
59:b6:05:d1:ad:ce:80:4d:5e:fb:e4:60:59:f6:4b:
e2:68:c7:01:7a:33:1b:ea:78:0b:94:65:d7:92:a0:
a5:6b:f5:15:6f:2a:9c:cb:1f:84:e2:c9:41:81:11:
3a:74:71:b7:ed:a8:ef:83:d4:ec:28:b1:8b:57:56:
b1:8b:9f:9b:ca:d3:be:a6:3f:87:4c:b5:64:4f:74:
df:4f:4a:00:f7:53:4f:fd:1e:1a:12:af:0e:b9:d2:
3c:16:76:21:b1:d7:4f:a7:f3:8e:9b:c9:28:b0:32:
64:28:11:05:e4:78:b4:51:23:7e:dd:20:27:3d:b1:
3b:07:20:68:10:36:f5:52:1d:83:d4:47:81:94:8d:
1d:47:6e:93:3d:3e:6a:c9:34:ea:4c:e7:cb:46:d6:
15:12:de:1b:c7:03:e3:45:e2:94:6c:7e:36:49:92:
07:0e:02:db:b1:02:2d:02:d7:d4:24:a9:7d:04:b1:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:4C:08:E9:32:B1:69:10:8A:CA:D5:5C:24:EA:FC:32:E8:F3:2C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dZxMCOkysWkQisrVXCTq_DLo8yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:57:61:b7:14:66:7d:b0:7b:a0:f4:68:f6:2a:d2:20:66:3f:
c8:22:10:bc:3a:fa:81:65:3c:ad:b9:d9:eb:21:f5:14:d9:ea:
6d:d3:32:f4:f2:f9:8e:e5:47:ac:76:87:f7:f4:6a:4a:10:4d:
56:8e:c7:52:c0:a1:f7:da:bc:a4:a9:31:ae:0f:59:c2:17:c7:
52:4a:93:6d:b0:4d:0d:1e:f0:f3:c6:3d:ed:c3:ad:16:ec:c1:
38:d5:0d:a7:2d:7e:bb:be:bd:8d:7c:c6:ce:1b:d6:1b:59:74:
e2:8e:ab:ce:27:de:8d:8f:23:a0:23:71:12:c8:ec:17:95:ea:
5e:48:37:a4:f3:33:77:e2:11:19:06:6f:66:1a:1e:b3:1e:05:
1b:f6:a7:60:84:ad:73:7d:af:0f:16:14:56:b6:d7:e4:f4:dc:
d0:71:30:42:fe:61:74:4d:69:f9:b6:23:6b:f0:50:38:0a:22:
6a:e0:49:69:e2:3b:a6:8c:8f:8a:b2:51:12:f5:40:70:87:4a:
59:9b:3f:ac:e0:9b:05:c2:7f:62:f9:1b:2e:4d:d4:18:45:e1:
8b:39:53:3f:08:fc:91:de:14:e0:22:9c:29:dc:13:5c:eb:53:
a2:bc:50:d5:f9:12:59:fa:35:13:f4:ed:07:db:ed:1b:4a:9c:
5e:56:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:51 2026 by rpki-client