Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vpR9JnKMBVt-zrG2w_D9zqFqheU.roa
File: vpR9JnKMBVt-zrG2w_D9zqFqheU.roa (raw, json)
Hash identifier: i91/tLWisT/RVhu3Ed3d7Ghx0RRDfv6I+2mm1DImqYo=
Subject key identifier: BE:94:7D:26:72:8C:05:5B:7E:CE:B1:B6:C3:F0:FD:CE:A1:6A:85:E5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A148613F02CB23CE85EE29EEB5F4B562ED
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vpR9JnKMBVt-zrG2w_D9zqFqheU.roa
Signing time: Sat 17 Oct 2026 05:41:34 +0000
ROA not before: Sat 17 Oct 2026 05:41:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.20.0/23 maxlen: 23
5.231.20.0/24 maxlen: 24
5.231.21.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:61:3f:02:cb:23:ce:85:ee:29:ee:b5:f4:b5:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 05:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be947d26728c055b7eceb1b6c3f0fdcea16a85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:08:29:70:9a:a6:52:04:08:a8:36:dc:38:
80:d9:b0:ed:89:5a:72:3f:61:eb:c5:85:e5:29:73:
a2:0f:a5:94:8e:2a:6c:ba:45:ad:bd:07:2a:28:df:
51:7c:19:09:ac:46:05:6e:78:8f:05:6a:c7:18:6e:
f9:ec:85:2c:ac:0d:1a:65:33:22:9d:95:08:b2:ea:
e2:7b:e4:c4:9e:ad:26:fa:e7:78:af:dc:73:f1:3c:
c3:8c:1e:01:13:e2:12:d1:61:bc:be:47:cd:3f:96:
43:e3:7c:fc:50:45:0b:44:1a:58:09:fe:27:dd:58:
20:9d:37:6a:9f:50:2d:b7:d4:76:51:d1:39:c3:a0:
ed:24:66:c3:9a:fd:0c:59:99:28:0f:5d:4b:f0:30:
1a:22:e4:41:86:7d:db:ce:4c:82:ae:78:5b:4c:33:
50:57:d5:7b:67:e7:57:4d:56:fd:ab:d3:6e:7d:be:
3e:8e:d4:0d:6f:1f:43:67:be:3a:d5:56:05:90:f3:
5f:1d:34:88:5a:ee:e7:a2:f0:ad:a9:22:f0:0d:bc:
68:1a:3f:43:36:a1:ac:d8:2e:5c:21:75:9d:db:61:
9c:76:c0:36:05:1e:e3:7e:0a:d4:c1:a7:1c:be:a7:
79:14:77:64:ef:f4:fe:76:7e:75:4d:9b:4b:b5:02:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:7D:26:72:8C:05:5B:7E:CE:B1:B6:C3:F0:FD:CE:A1:6A:85:E5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vpR9JnKMBVt-zrG2w_D9zqFqheU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.20.0/23
5.231.30.0/24
5.231.47.0/24
77.90.37.0/24
89.144.31.0/24
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
14:25:a0:89:45:84:2c:80:c9:a5:1c:34:de:c5:5b:14:b5:ab:
e6:97:ec:54:c0:3f:93:a7:3f:cf:b0:e1:40:18:fb:b4:3d:96:
8e:11:4e:d1:9f:e5:61:66:36:e1:f1:71:d9:d3:65:c8:8d:36:
9f:af:7b:53:43:4b:20:01:41:fb:c0:55:ee:16:5f:e4:2f:62:
99:e8:f8:68:14:51:d5:79:29:a2:41:10:3b:4e:52:34:1b:9c:
f4:51:a3:17:df:0e:f1:b5:d7:1c:2a:2a:d8:3b:7f:cc:c2:66:
ea:b6:a1:07:ec:5d:9d:a8:91:52:c8:d6:d8:89:e7:0e:5b:67:
7d:bd:76:8c:63:79:c5:6d:d9:ab:11:b3:00:25:ba:22:80:6a:
09:54:00:84:d0:39:d9:1d:65:52:9c:de:b6:80:57:c9:34:47:
e3:b8:f1:db:62:ef:30:6c:da:2a:4d:0c:3d:e8:d2:14:b7:63:
55:69:6f:a8:a2:3c:13:5d:6d:1f:d2:35:bb:37:f5:4b:2d:03:
d5:4e:9d:04:3f:9e:cb:48:b7:35:2f:80:14:16:35:c5:25:50:
8f:19:9a:73:93:82:7a:74:96:6f:67:76:ec:6c:e0:20:40:e6:
3a:1a:54:98:7a:dd:6f:0f:b4:3c:e1:6f:d0:8b:51:e6:57:50:
59:d4:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:48 2026 by rpki-client