Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wH1kMdMjFoPDQPRIx3gGiLmQgNU.roa
File: wH1kMdMjFoPDQPRIx3gGiLmQgNU.roa (raw, json)
Hash identifier: 1h6nfgaEgyUVVvdXj4op+R3ha+rFNfl5S0TRZ+zTD+8=
Subject key identifier: C0:7D:64:31:D3:23:16:83:C3:40:F4:48:C7:78:06:88:B9:90:80:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A136F02A1F5421E452E3EBF34A62E52C7D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wH1kMdMjFoPDQPRIx3gGiLmQgNU.roa
Signing time: Tue 13 Oct 2026 20:24:31 +0000
ROA not before: Tue 13 Oct 2026 20:24:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218428
IP address blocks: 5.230.154.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:f0:2a:1f:54:21:e4:52:e3:eb:f3:4a:62:e5:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 20:24:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c07d6431d3231683c340f448c7780688b99080d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:7b:4f:85:88:29:bb:bd:17:d3:02:a7:60:
b0:ed:07:43:9d:f0:92:cf:d3:e9:6d:55:87:0a:48:
a5:75:21:ec:26:31:a2:df:5e:27:1a:e6:ab:53:55:
51:19:9d:b4:75:05:8b:76:74:12:69:df:f8:2c:48:
1d:60:bd:fc:99:e4:ed:67:e2:bf:20:9d:4a:ed:77:
83:9a:a5:77:61:93:ee:ea:9a:3b:e9:5e:97:2a:40:
bc:0f:24:c9:11:22:0c:a8:23:44:32:20:4e:71:ce:
ba:e5:f3:0a:fd:cb:c6:cb:ad:71:2a:89:7a:71:69:
25:fd:2f:11:94:a1:90:cd:5f:55:71:bd:20:f6:02:
c2:b8:ac:cf:14:58:8e:71:af:b0:70:2d:a8:07:d9:
77:fb:c6:ac:1e:f3:69:f5:bc:41:29:05:0f:88:e4:
19:6d:0a:4a:e6:e1:64:0c:77:74:b8:9e:73:62:3c:
f9:0f:60:96:e7:81:92:e3:27:57:b4:fc:2e:2d:f0:
a5:f4:24:83:e4:c9:c9:e3:31:2c:cd:e1:2e:bb:00:
78:c6:b7:7d:45:18:cb:32:90:a1:40:ae:9b:22:00:
86:4e:c3:ec:83:54:d3:bc:9a:a5:84:c1:15:f9:9c:
80:15:fa:2b:65:53:13:9a:25:f7:4c:b4:1f:7b:58:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:64:31:D3:23:16:83:C3:40:F4:48:C7:78:06:88:B9:90:80:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wH1kMdMjFoPDQPRIx3gGiLmQgNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.154.0/24
94.249.230.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:47:d4:71:a4:18:af:55:fa:8f:ff:e0:3b:68:f4:63:c2:57:
e8:69:33:a2:80:b3:db:6f:67:98:a3:60:46:9a:26:5d:39:72:
2a:8f:26:71:2f:f9:0c:28:62:d4:5f:00:45:6d:03:f4:ac:c1:
27:5a:5b:05:23:50:7e:d0:92:42:88:93:3c:b9:c6:8d:ac:68:
73:dc:16:c0:d5:cb:cc:58:d6:50:b3:91:0a:aa:5b:99:e2:d5:
18:be:b0:0a:20:97:66:c0:c8:b1:63:47:94:e5:c0:a3:6a:8b:
27:f8:07:56:bd:12:76:54:e3:00:1b:2b:f0:d9:b8:fe:5c:4a:
84:2b:eb:f3:8f:8f:ca:5f:d2:57:dd:0a:5c:f8:d5:a7:96:23:
3e:7d:0c:81:c6:84:33:ea:1a:9e:a1:db:7b:c3:d5:0c:d3:f0:
c2:52:c7:b7:fe:77:a0:7d:37:9a:bd:ed:01:d4:90:1d:96:22:
6f:81:c0:b5:f1:25:d3:e0:83:c4:5f:75:a3:da:2b:ee:cc:7f:
9b:2d:68:b6:29:3c:99:c7:f0:e8:ea:e2:90:14:02:9f:61:5a:
f3:5a:f6:0d:05:d9:75:91:8b:55:70:ca:73:88:e8:77:7c:9c:
0c:84:bb:4a:bd:91:9e:24:7c:05:58:0e:e9:96:ea:56:d2:65:
b1:9c:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:47:15 2026 by rpki-client