Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h-_mEoWCS4Nps8hcaBx_AXyyVXY.roa
File: h-_mEoWCS4Nps8hcaBx_AXyyVXY.roa (raw, json)
Hash identifier: DBdbrBpFyodY31P8HOqCJuynyMqhZ64mec/zqDtvypk=
Subject key identifier: 87:EF:E6:12:85:82:4B:83:69:B3:C8:5C:68:1C:7F:01:7C:B2:55:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0656FCD2A56EE8FE3D56DC8A6A89FC509
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h-_mEoWCS4Nps8hcaBx_AXyyVXY.roa
Signing time: Thu 03 Sep 2026 04:03:40 +0000
ROA not before: Thu 03 Sep 2026 04:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:6f:cd:2a:56:ee:8f:e3:d5:6d:c8:a6:a8:9f:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 04:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87efe61285824b8369b3c85c681c7f017cb25576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c8:20:77:6e:9a:1f:65:ff:47:82:1e:e0:24:
e6:db:e8:75:50:51:4d:5b:f4:73:5f:03:8b:4a:2e:
34:4b:0e:d8:f8:2e:8c:db:71:33:87:51:9f:dd:1a:
4c:46:6a:c7:a5:53:fc:5b:97:cd:67:05:83:cb:35:
98:c5:ea:af:6a:70:d1:39:1a:76:79:cc:e5:9b:95:
a0:62:93:31:22:09:57:53:ac:c8:a6:8f:bd:2a:37:
a6:0f:79:4f:f8:02:66:e9:06:36:f3:a2:62:46:24:
e0:4c:c9:56:3b:21:74:52:c7:94:0d:d0:61:f8:c6:
68:db:8c:93:7c:fa:c5:44:8b:30:f1:6f:87:7b:fb:
b8:20:2c:c2:f6:bd:d4:dd:59:99:f1:84:ff:8a:af:
aa:77:a7:b7:37:19:4b:df:06:51:f1:5b:08:ce:31:
4d:bf:0b:b4:50:d4:8c:da:cd:b6:28:cf:50:8e:ce:
60:39:7c:f7:3d:50:9e:9f:f7:15:f4:ba:c2:d7:0a:
98:fc:98:60:ac:9c:d3:76:e2:8b:21:b4:e0:69:c1:
63:b4:63:2f:32:e3:a5:e7:f1:b1:9e:9b:52:22:c4:
b8:6b:37:57:e9:35:bc:2a:74:f8:3c:02:b9:22:0f:
c8:00:5b:b6:99:db:be:f5:d4:4f:69:23:85:84:e6:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:E6:12:85:82:4B:83:69:B3:C8:5C:68:1C:7F:01:7C:B2:55:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h-_mEoWCS4Nps8hcaBx_AXyyVXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6d:c0:78:84:aa:ac:93:dd:93:e9:0b:2e:e8:41:f5:4e:87:
45:56:dc:3a:26:05:3d:59:16:7a:7e:f7:77:7e:6f:26:58:82:
78:5e:68:38:4b:ff:e4:a3:dd:cc:49:67:97:23:2a:b4:ed:51:
3f:33:a3:2a:6d:31:47:dd:7d:7c:a0:60:06:7d:75:4b:44:98:
c2:9d:5c:cb:03:33:83:2c:33:e4:91:da:6c:0e:b0:aa:ba:4f:
b3:55:76:e3:fd:8b:30:c4:2b:4f:00:e2:dd:95:18:29:a8:95:
ce:cf:d4:ca:7f:8a:4a:e1:ef:b3:e8:d9:e3:af:b2:3b:68:6d:
62:32:3c:1a:0d:a1:3d:2e:1c:9c:a1:b2:2d:98:41:a7:ce:01:
81:b3:e2:c0:ee:f9:7d:ce:62:89:b9:dc:0b:a1:73:40:97:ee:
52:31:88:2f:89:5b:99:d8:11:f8:77:4f:73:8a:e0:a2:d3:37:
f6:ff:19:4e:f0:84:cb:38:4a:d2:b0:3d:25:be:eb:8a:bf:ee:
84:5a:bb:cf:c5:a4:70:76:5d:b6:0f:6f:31:c9:16:57:c5:21:
42:3d:05:02:47:c6:d0:11:e0:7c:45:0d:80:65:6e:d4:ac:4d:
bc:9e:ae:4a:09:59:46:b4:a2:18:e3:6e:61:e7:38:53:e2:b5:
6a:43:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:33 2026 by rpki-client