Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sOiRu9lYtsFFWIMBkJ33GU5RRZU.roa
File: sOiRu9lYtsFFWIMBkJ33GU5RRZU.roa (raw, json)
Hash identifier: 3EqAv5dw4QR0DtV2Clq/WLz2M3Or8s7aYsN2XS3h8jk=
Subject key identifier: B0:E8:91:BB:D9:58:B6:C1:45:58:83:01:90:9D:F7:19:4E:51:45:95
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E5D4C89ACB2376CE82CF2944DB5EF2D52
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sOiRu9lYtsFFWIMBkJ33GU5RRZU.roa
Signing time: Mon 25 May 2026 04:02:37 +0000
ROA not before: Mon 25 May 2026 04:02:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
2a02:2fc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:4c:89:ac:b2:37:6c:e8:2c:f2:94:4d:b5:ef:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 25 04:02:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0e891bbd958b6c145588301909df7194e514595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:a1:fc:6d:fb:96:8e:61:30:e3:9f:b8:90:
97:39:8f:b4:c7:39:f3:c0:b9:17:38:e4:b7:b6:23:
c6:ef:ca:3a:a0:2a:3a:71:51:10:24:24:7a:01:c7:
46:b2:8a:3a:8b:53:c7:2c:41:0b:20:e7:10:a5:f0:
fd:ea:5e:84:22:a4:ad:0a:20:04:08:b6:b2:2b:f8:
83:65:8f:87:f0:91:20:72:db:45:11:dc:46:9f:77:
4b:6f:0c:eb:e7:1c:5c:77:60:26:05:2e:41:8e:61:
fd:8c:1b:67:0a:db:df:86:2d:20:ba:bb:a4:2e:6c:
f7:1b:61:e0:b3:d1:c4:e0:b0:36:78:20:d6:c4:c3:
25:b5:84:3a:77:20:29:ae:01:f6:c7:72:c8:11:40:
61:13:da:b8:09:96:9b:30:25:c9:04:4c:f6:7a:b0:
60:cc:6f:7b:13:5e:67:30:a2:a5:82:6f:ff:73:76:
ef:66:3c:1f:03:85:2f:21:26:c5:f4:6f:f0:59:5f:
12:07:6b:4a:16:2a:2b:a8:62:d7:e9:be:11:d3:24:
57:ad:6d:41:49:29:9d:6f:82:98:74:a6:a9:e2:84:
ca:36:dd:2b:59:6e:89:58:b8:c0:ec:04:2a:a0:a3:
4e:6e:c4:84:d3:c2:da:c0:44:14:ee:c0:41:d7:7c:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:91:BB:D9:58:B6:C1:45:58:83:01:90:9D:F7:19:4E:51:45:95
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sOiRu9lYtsFFWIMBkJ33GU5RRZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.70.0/24
77.90.22.0/24
IPv6:
2a02:2fc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
1e:af:7c:bb:20:88:bf:09:db:3a:17:3e:f6:16:04:8a:0d:29:
eb:83:f0:a0:8b:0c:7d:94:86:f9:b2:71:d6:4e:98:6d:53:a8:
a1:28:62:b9:75:ed:cc:fd:54:ab:8c:1c:9f:f7:05:15:d3:c8:
fb:98:8e:75:c6:d5:3c:eb:51:ea:b9:4f:e9:9a:a8:91:31:1f:
46:fe:48:5a:df:1e:2e:48:db:8e:af:f7:4f:04:3f:b9:95:95:
78:17:e2:d1:59:ef:2f:54:de:82:6f:4b:d2:93:19:e7:3b:4d:
89:3e:6b:19:83:5e:ca:85:c2:4e:4c:1c:67:4c:0a:3f:8b:f9:
3f:b0:4b:5f:d6:03:0f:b9:5c:a4:69:3a:4c:b4:e5:66:4e:b3:
22:f3:30:7c:aa:67:a5:8a:91:ad:24:72:ef:f7:38:8a:64:de:
7e:24:09:2b:f7:73:c7:59:05:5a:ba:77:5a:52:fc:e1:b7:24:
93:4c:a1:eb:81:c3:48:e2:b7:a5:76:79:65:a9:26:fd:36:bd:
ab:ed:ef:d8:7f:12:af:28:87:b0:bc:9a:57:b3:fc:c3:2a:90:
0e:3d:ab:bb:b2:80:44:26:00:3a:0e:53:49:5f:5d:5f:fa:06:
77:d2:cc:09:a3:78:69:fc:dd:5b:d4:e1:d5:8c:5a:bf:ad:fb:
24:d2:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:36 2026 by rpki-client