Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gr0xC13pQXGrlAbgTctDQJwrhcw.roa
File: gr0xC13pQXGrlAbgTctDQJwrhcw.roa (raw, json)
Hash identifier: PbNsQhhsbIFxDaFJlGSWos/xD4nzuKkD+m1WRjfFXho=
Subject key identifier: 82:BD:31:0B:5D:E9:41:71:AB:94:06:E0:4D:CB:43:40:9C:2B:85:CC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E912AEFCC39993FDA2DD5B14D8EDF8373
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gr0xC13pQXGrlAbgTctDQJwrhcw.roa
Signing time: Thu 04 Jun 2026 05:46:10 +0000
ROA not before: Thu 04 Jun 2026 05:46:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 5.231.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:2a:ef:cc:39:99:3f:da:2d:d5:b1:4d:8e:df:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 4 05:46:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82bd310b5de94171ab9406e04dcb43409c2b85cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:5f:d8:42:de:e6:22:c1:6a:4c:25:ec:88:
b1:fd:fa:76:3b:c8:de:6e:15:07:ea:b3:55:a6:78:
9b:85:87:05:1a:fc:77:e4:05:41:31:ab:7c:d4:fa:
28:c4:58:65:e6:87:55:1e:ab:ef:66:7b:36:40:7f:
0b:00:ed:e2:ec:e1:2f:b7:f1:79:3f:48:8b:0f:f9:
a9:1d:05:03:05:a5:04:01:41:c9:7a:52:fc:58:24:
e5:5e:18:05:8e:3e:48:7e:3e:41:cf:ed:45:bc:1c:
cf:7a:44:9c:42:a4:df:1d:a6:d8:8a:40:18:10:ae:
71:6e:c2:3a:8c:bc:c2:f6:26:e6:92:08:9a:67:dc:
9e:f7:3a:f0:49:6f:a0:3b:78:77:7e:9c:e8:31:c5:
97:55:46:a1:d2:54:62:e3:f9:cc:f1:e3:18:a6:e5:
00:c0:44:0e:3e:58:bc:a0:c7:2e:56:64:30:3d:5e:
d4:5e:84:af:cd:6b:8e:46:f6:9a:86:b6:0a:c5:84:
e8:0e:f9:1c:bf:3c:c2:6f:62:ef:7a:e7:a7:0b:61:
03:55:c8:5c:bb:7d:77:ae:8f:89:50:75:04:0f:c1:
5a:92:c6:4b:10:8a:e6:3e:4e:02:22:c9:76:cb:94:
08:1e:be:b1:bb:3e:a8:a8:72:67:35:99:c3:65:53:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:31:0B:5D:E9:41:71:AB:94:06:E0:4D:CB:43:40:9C:2B:85:CC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gr0xC13pQXGrlAbgTctDQJwrhcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5a:23:5c:b2:c3:33:ec:7a:82:3e:a9:53:22:79:d8:c1:53:
2b:30:85:a5:7f:6e:f7:b9:b1:20:7e:9a:9d:aa:31:ee:72:86:
49:5e:e2:dc:c7:dc:dc:50:43:68:5f:94:7c:39:a6:7b:e7:ff:
a6:1f:28:e5:63:98:8a:f1:84:2d:72:88:5e:59:b0:13:e3:c1:
a9:22:7a:8f:a4:4f:f5:6d:f5:1c:35:82:12:fa:b6:ca:2b:8f:
30:af:a8:8d:7d:57:7c:58:a2:54:ab:e5:95:0b:fe:77:58:b7:
47:fe:f0:c9:ae:c5:b7:73:08:c1:d4:4f:6f:11:c8:c7:c2:e6:
ed:1e:0c:83:ff:0c:3b:00:e3:90:c6:a6:6b:00:5b:e9:d6:0e:
44:09:82:21:a5:cf:02:1b:6f:f7:0c:27:b0:46:1a:e5:3e:44:
f4:3c:5f:db:fb:69:4b:e9:3e:08:34:64:07:56:2c:6d:aa:88:
c5:50:db:05:61:5c:48:9c:e8:f5:00:81:93:f5:a5:0e:77:e9:
94:7e:d6:23:a2:40:1c:29:1a:dc:65:c2:31:34:93:1d:aa:1a:
38:4e:cd:c0:33:5b:39:6a:90:8d:d3:6a:86:01:73:fd:a8:d8:
b9:30:e2:a6:4b:33:fb:b5:cd:40:ef:76:19:fe:2d:5c:bb:b3:
38:b8:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:26 2026 by rpki-client