Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xF3Z7FiQLwetrGeRqC5vlWoNAMg.roa
File: xF3Z7FiQLwetrGeRqC5vlWoNAMg.roa (raw, json)
Hash identifier: zLfmTSsAMp/goiSvXkbPESHOJcHo14nnbOxgYGouAvw=
Subject key identifier: C4:5D:D9:EC:58:90:2F:07:AD:AC:67:91:A8:2E:6F:95:6A:0D:00:C8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FFA85EDC29644E8A48C727A80E3E9DE04
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xF3Z7FiQLwetrGeRqC5vlWoNAMg.roa
Signing time: Thu 13 Aug 2026 09:48:28 +0000
ROA not before: Thu 13 Aug 2026 09:48:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:85:ed:c2:96:44:e8:a4:8c:72:7a:80:e3:e9:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 13 09:48:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c45dd9ec58902f07adac6791a82e6f956a0d00c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:da:72:2a:d6:b8:71:91:c8:07:40:fa:0f:
7f:f4:58:0e:55:42:93:37:6e:5a:49:42:d1:7c:cc:
ae:0a:01:92:45:ec:9d:26:9e:a0:dd:39:95:c3:d4:
f3:51:3b:66:76:e6:14:79:1a:da:93:62:46:ac:1c:
00:e9:fd:ba:b9:8c:f4:34:07:6f:a6:1a:8e:b0:ae:
f3:e5:d0:de:c2:75:7f:b6:ab:d5:f5:2d:0e:98:7e:
4b:b8:9d:4e:d5:e9:10:b4:b1:a4:35:83:9a:8b:24:
f5:cf:a1:01:26:42:3d:ce:49:cf:65:81:83:cf:3f:
6e:7c:f0:11:48:61:2b:e3:21:65:2f:a7:f5:b4:cb:
41:e0:2f:27:5d:45:00:e8:0d:fb:c8:e4:48:6c:c6:
76:97:d7:25:23:fd:63:66:84:ed:34:99:9b:99:8c:
0a:15:d2:cb:e2:4d:cc:b6:c1:27:6a:bb:31:c8:93:
15:90:49:2a:7e:f8:24:d9:2d:51:cf:aa:61:8f:d6:
bc:7a:cf:f9:16:c7:29:c3:c6:68:83:1c:92:d6:87:
b7:a1:6a:04:a6:25:fd:3d:71:b6:46:30:cf:b3:1b:
a0:73:16:1b:51:13:e5:91:5e:c8:06:dc:e4:77:86:
86:4b:67:7e:63:6b:fa:1b:3c:66:bc:3d:a2:b9:7b:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:D9:EC:58:90:2F:07:AD:AC:67:91:A8:2E:6F:95:6A:0D:00:C8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xF3Z7FiQLwetrGeRqC5vlWoNAMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3b:7f:b5:4e:ff:80:bb:3e:f7:d0:8c:81:71:1a:78:ba:9a:
94:67:a9:74:56:b3:0b:dc:fc:2e:70:8d:7c:07:82:54:27:a0:
e7:4e:59:ad:ba:94:42:cb:61:41:b6:83:95:fc:20:f6:59:77:
12:fb:bc:0a:05:61:af:1d:1f:f8:71:03:de:d2:67:77:5e:01:
6d:49:ca:c6:25:82:8a:f6:26:78:bf:fd:32:33:94:dc:90:4a:
98:5f:d9:cd:d2:8d:ef:7b:35:a3:34:a0:cf:29:0d:ba:4a:6f:
97:96:85:ef:47:f6:d0:e9:7c:b8:eb:70:e5:6a:e2:81:36:bc:
1f:83:10:06:46:23:2b:51:d5:dc:18:03:e2:90:99:82:81:45:
76:68:89:90:6d:ee:a9:81:40:15:69:b3:bc:8f:3b:2b:e8:c0:
85:0e:de:11:87:08:29:3a:5f:2e:b7:d3:04:77:41:9d:5d:e8:
78:cf:c0:77:ca:fc:17:0e:54:2c:da:f7:5a:5d:53:63:61:db:
3d:63:aa:12:80:ed:80:81:2a:b4:1c:0e:a2:ec:90:15:42:07:
c3:75:c5:35:b4:6b:c1:96:da:85:e7:4d:7b:df:80:1b:a5:32:
5f:0f:1e:43:5f:c5:78:ff:d8:14:eb:28:e7:6c:81:a4:f6:b8:
25:2c:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:38 2026 by rpki-client