Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dotqttaWIxWTWgr_bHoFsZak9XI.roa
File: dotqttaWIxWTWgr_bHoFsZak9XI.roa (raw, json)
Hash identifier: CbUghk6DU7NuLSngeOJ2e+yGLYmxYtfGlFOo76KS1z0=
Subject key identifier: 76:8B:6A:B6:D6:96:23:15:93:5A:0A:FF:6C:7A:05:B1:96:A4:F5:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EB183E8BCA26F877ECFA97D4E4BC29F65
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dotqttaWIxWTWgr_bHoFsZak9XI.roa
Signing time: Wed 10 Jun 2026 12:31:12 +0000
ROA not before: Wed 10 Jun 2026 12:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219490
IP address blocks: 5.231.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:83:e8:bc:a2:6f:87:7e:cf:a9:7d:4e:4b:c2:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 12:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=768b6ab6d6962315935a0aff6c7a05b196a4f572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:0b:8a:e8:40:47:0c:c4:ff:c8:8b:6e:55:
42:90:41:a5:fb:2c:93:b3:ae:e9:1d:8b:d0:9c:36:
8e:d6:e8:b2:6f:0f:81:94:ba:df:16:11:ca:33:df:
5a:f9:63:52:ce:0d:31:61:2c:05:1c:6a:0d:7a:8f:
ae:d2:41:6e:10:c0:ca:ed:d5:1b:e6:e6:0a:0e:db:
16:b7:07:9c:75:63:12:93:66:9d:49:e4:36:6e:13:
c5:d0:57:86:ba:ca:e7:98:be:68:af:a3:23:7a:09:
53:ed:7f:54:b4:54:09:7f:97:8b:27:43:92:43:36:
23:ca:f3:7b:29:e8:d7:e7:a0:9d:1e:a9:c3:dd:37:
5a:8b:f3:5f:77:9d:19:c8:1d:0f:40:be:d0:8c:e3:
ba:95:2e:73:d5:7e:28:38:b7:78:a9:9a:fb:04:54:
70:ae:a5:77:dc:19:c4:41:52:5a:3c:b1:cd:84:38:
46:57:a0:99:65:c6:90:2b:2c:a8:99:9e:72:33:5d:
51:ef:0a:66:23:4a:4d:9e:54:a2:80:16:48:dc:27:
58:04:3c:a8:ac:06:73:85:53:e9:8c:88:58:07:e1:
06:5e:a4:c7:16:e3:ee:18:b5:8e:24:8e:21:85:8b:
1b:64:a5:a2:fe:43:4f:6f:df:4b:61:b3:d1:d5:f1:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:6A:B6:D6:96:23:15:93:5A:0A:FF:6C:7A:05:B1:96:A4:F5:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dotqttaWIxWTWgr_bHoFsZak9XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4f:b2:9a:17:fc:5d:43:ec:9f:8a:23:ad:46:44:a0:cd:34:
bd:ca:4c:59:9b:30:43:cc:1f:b5:02:c5:a5:5c:7d:a1:e6:5c:
93:55:5b:d5:52:63:c1:b6:c4:1c:46:a1:de:3a:67:b6:68:49:
05:6f:bd:53:0d:7c:b1:ac:07:5b:9d:f8:83:a0:5d:5e:03:a6:
8e:31:26:df:9b:30:12:5c:16:60:cb:e2:6b:64:2b:b6:39:56:
b6:f6:89:0f:67:f2:75:06:f9:20:64:26:63:fe:0b:6e:e9:ed:
14:ab:3b:1c:df:e0:38:f1:4b:f2:10:cd:ff:57:08:b6:7b:1c:
c8:8d:9b:f7:27:18:b6:7b:f9:4d:78:0e:02:6b:a9:79:72:a9:
d2:18:2e:d4:88:71:44:8a:50:db:22:bf:66:a2:b8:21:09:e1:
e4:ce:23:f5:ac:d3:b8:11:c4:ea:2c:bc:8a:20:47:00:1f:ea:
90:23:a8:d1:89:7e:bd:6b:bc:5d:cb:6c:c3:3b:0a:b1:c4:37:
b8:3c:4d:88:3d:7a:b3:8c:b1:91:c1:06:86:dd:c4:44:79:d4:
c1:7a:a0:f0:c7:6a:13:23:02:8d:da:6b:66:fa:a2:ff:da:a4:
85:1d:ac:69:4b:ff:83:04:99:18:99:15:ac:ae:7f:7c:c9:9b:
69:97:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:13 2026 by rpki-client