Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ipvlwGL0e6NUMJStSQAhMZ5TEuI.roa
File: ipvlwGL0e6NUMJStSQAhMZ5TEuI.roa (raw, json)
Hash identifier: mamkBGCh61Osz0RvDS87HbidGjFQrUQQ+Y5+/8vUN9I=
Subject key identifier: 8A:9B:E5:C0:62:F4:7B:A3:54:30:94:AD:49:00:21:31:9E:53:12:E2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0CD0CDDB4084CE267F6A22BC37D5F3A83
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ipvlwGL0e6NUMJStSQAhMZ5TEuI.roa
Signing time: Wed 23 Sep 2026 06:56:07 +0000
ROA not before: Wed 23 Sep 2026 06:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401142
IP address blocks: 5.175.189.0/24 maxlen: 24
5.231.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:0c:dd:b4:08:4c:e2:67:f6:a2:2b:c3:7d:5f:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 23 06:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a9be5c062f47ba3543094ad490021319e5312e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:ff:7e:22:54:92:9f:84:26:65:4e:02:92:
9a:e7:64:b1:34:a5:67:a3:32:ee:1f:16:74:64:38:
87:ad:76:ab:b4:b1:99:af:e7:51:40:59:a5:a8:47:
eb:26:95:97:96:17:42:3e:e3:0e:19:d7:da:a3:b8:
31:bd:ad:69:84:12:33:bc:aa:29:af:7d:70:2c:b0:
21:77:b1:95:49:84:97:84:5a:2e:4b:5c:82:bf:09:
2e:57:7e:8d:75:ed:fe:ba:08:b1:f4:b1:1a:50:45:
ed:71:9c:2d:c5:f4:b8:22:e9:4f:8b:7e:74:d1:b3:
67:00:b4:91:e3:7c:ce:33:ee:c4:cc:37:3c:a5:31:
47:4d:de:12:9f:51:a2:bd:53:9e:c4:0a:62:9b:eb:
bd:87:bf:8e:90:e3:cf:78:5a:23:cc:4a:5e:c4:ee:
22:bd:2e:99:1f:2c:98:7f:87:05:4e:66:ef:a4:54:
03:44:cd:ee:e8:e7:0b:b5:fa:8b:cd:92:df:f4:f7:
2f:ba:80:c6:a8:df:91:24:cb:48:d0:88:1e:dd:45:
db:d0:1b:5a:ef:9d:1d:f6:d6:3a:ee:c5:22:d3:e1:
2b:e8:5e:cc:8b:2d:89:66:f1:0a:44:00:18:e3:20:
b1:b1:b9:8d:30:1a:7c:cb:d2:ac:71:63:5b:3a:1a:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:E5:C0:62:F4:7B:A3:54:30:94:AD:49:00:21:31:9E:53:12:E2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ipvlwGL0e6NUMJStSQAhMZ5TEuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.189.0/24
5.231.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0c:38:86:7f:2e:b1:b0:16:b5:38:46:64:01:0b:3b:70:ae:
c3:24:87:c3:3c:b7:4e:3a:b5:37:0b:29:a1:1f:15:9d:e4:dc:
ae:56:59:9c:2b:bc:ea:90:e0:b2:8e:55:1d:ef:ab:22:fb:3b:
35:b8:94:0d:9c:86:13:a5:ac:05:77:85:5a:c8:ae:92:f0:8b:
0c:07:75:cd:0e:6d:1a:6f:ea:28:74:58:a6:9e:17:27:e9:88:
73:a8:2e:87:91:52:d7:46:1c:0e:da:a6:a6:75:9f:fd:21:25:
51:b4:97:52:03:5e:d9:a2:74:0c:3a:76:57:81:cc:4e:99:89:
45:86:73:35:9a:94:b4:1d:24:af:c4:7d:18:13:c1:1f:fa:42:
88:e0:50:e0:9b:6a:be:01:13:9f:42:f6:09:7f:73:5f:45:1a:
5f:ab:dc:c7:37:aa:50:1a:e9:98:c4:ca:8c:17:ab:bf:c2:85:
57:5d:83:b8:bb:c3:ba:ab:50:81:fb:8b:12:38:e4:a5:52:a7:
dc:ab:3e:48:63:f2:24:48:4c:a4:6f:fb:a5:ff:6d:91:38:1c:
d8:1c:67:a0:20:e8:99:4e:1d:3c:df:05:28:11:d7:fe:6e:68:
83:be:13:48:37:aa:89:18:8c:d7:81:2d:ba:0b:a2:93:7d:2c:
c5:a3:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:43 2026 by rpki-client