Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hr0ED1DaBo9QCvTCc43xl3GxtnI.roa
File: hr0ED1DaBo9QCvTCc43xl3GxtnI.roa (raw, json)
Hash identifier: vD0pwoopR9EMJOYvDh1pwI42P5TBL9YnPCRvPPQ0UZg=
Subject key identifier: 86:BD:04:0F:50:DA:06:8F:50:0A:F4:C2:73:8D:F1:97:71:B1:B6:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1169E2B181F226EA21954915E42CC837B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hr0ED1DaBo9QCvTCc43xl3GxtnI.roa
Signing time: Wed 07 Oct 2026 13:47:06 +0000
ROA not before: Wed 07 Oct 2026 13:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:9e:2b:18:1f:22:6e:a2:19:54:91:5e:42:cc:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 7 13:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86bd040f50da068f500af4c2738df19771b1b672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:96:d0:be:76:b8:96:e9:d9:cf:3f:3d:3a:
a0:9d:ab:56:f8:ef:ee:7f:44:53:f7:e3:43:e8:ab:
b2:ea:69:a1:04:e7:88:95:ed:98:0f:12:08:be:37:
ad:3a:ed:a6:da:69:72:0d:3b:95:5c:3a:d5:a6:61:
74:78:80:7d:36:c0:af:5c:2f:c5:3d:fe:94:f5:12:
bb:98:a3:57:9e:94:39:50:49:1e:84:49:3f:93:c3:
e2:b4:d4:2d:97:c7:a5:8c:4a:d9:00:07:33:90:52:
14:39:b8:a6:4e:db:b6:d7:a3:ec:65:39:d5:18:81:
a5:8e:fd:18:81:45:dd:f3:a9:de:7f:20:55:68:9e:
48:eb:b7:39:e9:d8:60:b4:04:80:82:3a:4f:fc:a8:
19:29:bd:a5:e4:f9:6e:09:df:33:5e:dd:2d:bd:a6:
03:ab:a2:23:2c:a1:f3:c3:f7:57:7d:97:92:1d:86:
25:51:48:f2:d1:e7:61:52:59:e9:73:e7:e8:54:42:
38:81:5e:8c:a6:f8:0a:f8:e1:18:cf:15:7e:93:1d:
13:22:98:c1:97:e1:ae:62:f4:94:17:0f:18:ea:75:
a2:6b:e9:7a:12:cc:50:c9:11:1a:97:e8:a3:d8:79:
7d:c2:b3:09:74:62:de:f6:f1:f0:89:82:23:46:61:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:04:0F:50:DA:06:8F:50:0A:F4:C2:73:8D:F1:97:71:B1:B6:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hr0ED1DaBo9QCvTCc43xl3GxtnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f9:49:61:33:90:38:3a:b4:f8:d1:a4:48:50:8e:c2:d4:85:
1f:34:0d:6b:3f:cc:18:ec:73:c2:15:46:66:49:73:f6:95:c3:
c3:00:e5:70:3f:97:55:cf:f6:f8:ab:73:0d:8f:16:99:a7:1a:
86:b2:4c:2f:bf:87:99:77:0d:fe:7d:33:ab:36:9b:99:29:7f:
d9:42:90:b1:6c:0a:5b:c9:03:d8:15:52:be:0a:d1:b8:db:70:
00:a7:79:6c:3e:07:1f:7b:98:d4:54:72:48:31:77:cf:55:06:
5e:4d:4d:3a:2a:96:9a:0d:30:36:28:60:f3:5d:36:24:ab:3c:
96:80:7a:d5:d6:6c:ae:cc:3d:e9:a1:53:33:af:a0:df:7c:56:
cb:5b:08:0c:77:d7:88:9a:e0:27:5a:25:6e:ba:67:85:6f:40:
6e:2e:f8:5a:ae:50:3f:c6:d4:a1:df:c3:aa:d4:87:d3:86:43:
62:4c:34:83:a7:76:84:4b:4c:4e:ac:5d:34:84:ca:77:6b:8d:
c5:eb:92:c0:83:27:d4:15:aa:fa:af:54:89:3e:cd:72:d1:16:
00:b7:9f:01:2c:a3:c4:8d:53:bc:c9:7d:92:52:8f:53:ef:46:
58:18:01:6f:91:7d:f3:60:2a:d7:3d:45:30:dd:83:21:be:e4:
d8:e5:a2:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEWnisYHyJuohlUkV5CzIN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDA3MTM0NzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJkMDQwZjUwZGEwNjhmNTAwYWY0YzI3MzhkZjE5NzcxYjFiNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpmW0L52uJbp2c8/PTqgnatW+O/u
f0RT9+ND6Kuy6mmhBOeIle2YDxIIvjetOu2m2mlyDTuVXDrVpmF0eIB9NsCvXC/F
Pf6U9RK7mKNXnpQ5UEkehEk/k8PitNQtl8eljErZAAczkFIUObimTtu216PsZTnV
GIGljv0YgUXd86nefyBVaJ5I67c56dhgtASAgjpP/KgZKb2l5PluCd8zXt0tvaYD
q6IjLKHzw/dXfZeSHYYlUUjy0edhUlnpc+foVEI4gV6MpvgK+OEYzxV+kx0TIpjB
l+GuYvSUFw8Y6nWia+l6EsxQyREal+ij2Hl9wrMJdGLe9vHwiYIjRmF0vwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIa9BA9Q2gaPUAr0wnON8ZdxsbZyMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaHIwRUQxRGFCbzlRQ3ZUQ2M0M3hsM0d4dG5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABec6AwQA
Bec9MA0GCSqGSIb3DQEBCwUAA4IBAQB4+UlhM5A4OrT40aRIUI7C1IUfNA1rP8wY
7HPCFUZmSXP2lcPDAOVwP5dVz/b4q3MNjxaZpxqGskwvv4eZdw3+fTOrNpuZKX/Z
QpCxbApbyQPYFVK+CtG423AAp3lsPgcfe5jUVHJIMXfPVQZeTU06KpaaDTA2KGDz
XTYkqzyWgHrV1myuzD3poVMzr6DffFbLWwgMd9eImuAnWiVuumeFb0BuLvharlA/
xtSh38Oq1IfThkNiTDSDp3aES0xOrF00hMp3a43F65LAgyfUFar6r1SJPs1y0RYA
t58BLKPEjVO8yX2SUo9T70ZYGAFvkX3zYCrXPUUw3YMhvuTY5aKY
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:20 2026 by rpki-client