Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rtJ1be_V7NYg7luKJErJQFBMR-I.roa
File: rtJ1be_V7NYg7luKJErJQFBMR-I.roa (raw, json)
Hash identifier: BW8AO8LZ36dz0F9q5ZGHSro/jL5kHzhVHu7W1YvEtDc=
Subject key identifier: AE:D2:75:6D:EF:D5:EC:D6:20:EE:5B:8A:24:4A:C9:40:50:4C:47:E2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0600D05DBDABB9D4B11F3C49AB2FB0310
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rtJ1be_V7NYg7luKJErJQFBMR-I.roa
Signing time: Wed 02 Sep 2026 02:57:41 +0000
ROA not before: Wed 02 Sep 2026 02:57:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 5.231.203.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:0d:05:db:da:bb:9d:4b:11:f3:c4:9a:b2:fb:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 02:57:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aed2756defd5ecd620ee5b8a244ac940504c47e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:4c:67:e7:1d:ed:7c:2a:8e:e0:69:9b:b1:
e7:1b:1b:0b:37:2f:f1:a8:1b:26:13:59:d9:b7:b4:
bc:ee:a6:fe:f4:98:70:3d:d6:40:3a:b9:02:c6:61:
92:6d:aa:55:4b:a4:fb:46:a7:b8:56:b1:12:22:10:
c6:1c:6a:f6:6d:81:84:2b:29:f1:05:a4:70:58:09:
22:5d:eb:ca:29:e6:9e:79:e8:c2:43:5d:6c:cb:14:
b1:de:da:b7:9c:04:da:10:b7:88:ac:45:1b:a3:9b:
2e:07:44:71:73:9a:c5:ed:ac:0c:9a:20:21:2c:b5:
a7:1b:63:44:ec:95:3b:96:51:d9:49:c3:63:39:df:
d2:9e:d0:53:94:0a:d7:9e:05:29:4e:95:32:b1:c6:
b6:1e:a3:31:e2:53:99:8f:ef:80:d2:02:5a:dc:67:
26:1a:8d:54:33:c1:a5:1e:b9:56:ef:d5:02:25:23:
d3:93:90:19:79:d1:d7:92:61:56:b6:f9:e3:cf:5e:
c4:bc:7c:83:0c:a1:50:f7:2b:af:08:cf:c9:2f:bb:
6b:17:86:83:c7:8c:bf:c2:1f:fe:fd:41:04:bd:4f:
59:0f:37:5b:8f:a5:62:56:e7:c8:f5:5a:60:d4:b1:
e1:26:d8:c8:e7:63:c5:ae:b0:99:28:79:00:a8:bc:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D2:75:6D:EF:D5:EC:D6:20:EE:5B:8A:24:4A:C9:40:50:4C:47:E2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rtJ1be_V7NYg7luKJErJQFBMR-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.203.0/24
94.103.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:46:83:4f:a9:9a:44:b1:04:08:ca:46:d0:b8:46:51:3e:f4:
94:6d:c3:31:dc:05:5c:b5:43:b5:00:6d:18:d2:d6:31:2f:de:
0e:e0:3c:02:cf:fb:5e:10:b1:18:47:f0:38:ba:c3:d0:e6:fc:
f2:2b:ed:58:80:f7:d4:c2:76:36:23:8a:ae:63:14:08:1b:90:
fc:00:44:29:d1:8c:8d:15:91:1c:64:b4:55:28:f6:00:ee:fc:
47:82:fa:4e:cc:1c:8d:29:ae:fd:33:8f:87:1e:a8:1f:aa:a7:
e6:85:f5:4c:b1:d8:3e:19:07:ad:b8:3e:27:48:51:c5:5d:56:
dc:5a:e7:f9:04:59:5f:7c:e1:6a:1a:91:1d:6b:33:34:ec:2f:
33:a3:85:32:7e:50:c2:15:d4:ce:72:12:1e:34:f8:5f:56:f3:
66:85:6b:8b:41:f4:d1:1a:7a:7f:6f:8d:51:ac:de:89:2e:7e:
97:12:39:5a:20:18:23:34:68:ee:66:19:59:ef:f5:42:30:52:
39:51:1f:ff:d5:07:ef:32:3b:8b:b6:a9:d2:b9:e3:00:e2:35:
eb:b2:53:f1:7b:12:ed:33:b3:7f:70:58:b8:cf:20:f3:85:6d:
0d:52:cf:8f:6b:d7:f1:10:0a:a5:e6:8e:87:f7:70:e3:df:57:
67:ab:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:07 2026 by rpki-client