Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kawjYIzjwDK_KqVrI59QbYBAeio.roa
File: kawjYIzjwDK_KqVrI59QbYBAeio.roa (raw, json)
Hash identifier: ljM0RD7WoQDFmJTp3mDcBvYqrez7Ys8628skUdiWSrw=
Subject key identifier: 91:AC:23:60:8C:E3:C0:32:BF:2A:A5:6B:23:9F:50:6D:80:40:7A:2A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A132E964EFBB0AADCFB819871C29D6DCA6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kawjYIzjwDK_KqVrI59QbYBAeio.roa
Signing time: Tue 13 Oct 2026 01:38:38 +0000
ROA not before: Tue 13 Oct 2026 01:38:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213367
IP address blocks: 5.231.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 08:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:e9:64:ef:bb:0a:ad:cf:b8:19:87:1c:29:d6:dc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 01:38:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ac23608ce3c032bf2aa56b239f506d80407a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:3d:87:f5:8f:7c:79:06:af:b9:2c:3d:d3:
d1:5d:2d:c1:29:0f:76:d2:e5:91:67:93:c1:f1:9d:
d0:8d:0c:82:a7:de:84:92:6e:bc:b6:45:33:57:57:
03:6a:34:96:3f:df:27:61:a5:90:f2:00:b4:69:9f:
82:be:5e:aa:58:93:79:ee:d7:a0:c0:40:9d:6d:3b:
37:95:48:e0:2b:fd:81:33:20:c6:d2:ed:c5:2b:ab:
a9:e2:1a:b9:da:2c:1f:b9:e1:d5:50:21:25:14:12:
59:c8:c8:ee:5a:2f:c8:06:22:83:f2:8b:1c:94:ff:
51:22:8e:69:87:a6:53:bb:4f:f6:61:bd:87:3f:13:
3a:30:15:2b:8f:1d:13:8f:b1:02:82:87:13:2b:88:
b8:71:67:a6:ed:59:be:df:4a:88:66:f2:04:06:0c:
c0:c3:6a:9c:14:4d:ee:14:21:75:22:36:3f:c8:23:
34:ec:97:11:0e:84:95:85:19:04:3b:e8:c6:32:a2:
c1:b0:8a:8a:ce:6d:54:a7:be:86:2f:c3:23:ab:5e:
7c:e6:40:09:fb:d0:a0:2c:52:73:0c:f6:fb:8f:c0:
9b:57:39:cf:96:04:8d:f3:d1:0d:a4:79:4a:d4:23:
38:33:00:3f:30:d1:bf:90:72:a3:3d:66:0d:ad:81:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:23:60:8C:E3:C0:32:BF:2A:A5:6B:23:9F:50:6D:80:40:7A:2A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kawjYIzjwDK_KqVrI59QbYBAeio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:00:61:e4:3f:c1:d3:79:60:71:b1:31:98:82:8b:4b:1c:a3:
1a:bc:13:d9:f7:59:b5:4d:6d:e6:d9:75:0d:85:78:a5:b5:5e:
d7:b2:ad:13:59:77:89:13:f5:6d:87:5e:58:ec:60:4f:69:06:
bd:28:28:8e:53:23:3b:bc:68:fe:8c:9b:35:02:4a:93:91:37:
a8:0e:f8:02:14:83:eb:ac:29:ce:60:26:e3:d3:bd:04:0d:bd:
21:ae:b7:4e:f5:a2:55:d4:53:c6:04:f7:0f:ae:f1:1d:bf:34:
ee:40:af:c4:15:32:e7:cc:41:5d:23:4e:76:41:45:6f:fe:52:
61:72:f6:3e:26:2d:23:da:cc:ef:a4:09:ff:bc:83:41:85:f9:
18:fa:30:e4:ae:e1:16:3e:9b:4d:d8:2a:fc:4a:4b:55:f0:87:
b0:d0:ab:b7:d0:12:8f:5f:1f:fa:70:3e:63:96:52:0d:21:21:
b6:ee:98:a2:f2:38:83:a3:bc:df:bc:c3:76:e5:15:66:4d:fb:
eb:62:f4:ef:21:7c:b2:05:b0:f8:eb:d0:2a:88:e3:e1:5d:49:
06:58:e9:e5:b1:6e:6a:60:cc:72:c2:23:d3:d4:da:62:fa:92:
49:f4:35:48:5e:8a:d6:be:56:8e:9b:14:e0:05:e0:23:85:1b:
9a:cd:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:46 2026 by rpki-client