Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xbAuVj7dE0j4Yq47zCNbfilXIYU.roa
File: xbAuVj7dE0j4Yq47zCNbfilXIYU.roa (raw, json)
Hash identifier: vKsYGmM2X5RxNzKjmEVZ3ZNnG5qARQR6ynV7QEaPiKw=
Subject key identifier: C5:B0:2E:56:3E:DD:13:48:F8:62:AE:3B:CC:23:5B:7E:29:57:21:85
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A06496D444223F258E59E592142105D4F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xbAuVj7dE0j4Yq47zCNbfilXIYU.roa
Signing time: Thu 03 Sep 2026 00:06:41 +0000
ROA not before: Thu 03 Sep 2026 00:06:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215093
IP address blocks: 5.230.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:96:d4:44:22:3f:25:8e:59:e5:92:14:21:05:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 00:06:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5b02e563edd1348f862ae3bcc235b7e29572185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:1f:c9:37:fa:d9:7b:eb:c9:97:60:e2:f9:
92:d9:cd:b7:24:4e:a5:ca:97:c3:68:bf:4e:96:07:
56:7c:c7:f1:73:7d:ac:43:68:92:2a:ae:2c:03:dd:
52:44:fb:da:d9:87:b6:30:0c:a6:05:6a:3e:6a:aa:
18:19:a3:97:61:57:ed:58:c8:8a:f8:22:36:2c:2f:
ab:8c:57:c1:59:1f:ed:f0:d7:b6:2f:ac:8d:9a:3d:
2c:72:de:fc:66:b8:b4:42:95:da:3b:11:39:d0:19:
04:e3:22:09:0a:57:67:ce:60:6b:74:8c:fc:f0:e6:
20:0c:fd:44:88:94:9f:31:7d:e1:32:55:d6:a7:8f:
58:48:87:8b:c4:ec:bd:f8:f4:29:44:bd:b7:82:ae:
3e:38:fc:ad:f4:ef:79:c8:3e:83:7a:02:f8:75:c1:
5c:b7:6c:70:14:3a:e8:ed:4b:4e:a5:77:c9:28:8d:
b0:40:a6:cc:63:01:14:28:d4:cf:fe:6e:43:ab:e6:
cb:3f:dc:3e:e7:9f:49:a3:93:1a:5c:d3:90:3c:49:
f1:59:9a:a0:52:bc:28:8f:d9:8d:b1:8f:9b:ec:c0:
1c:b1:16:9a:c1:b6:bf:9c:a7:f8:42:3e:51:e0:08:
d7:5d:f3:fc:e8:3e:05:56:05:4a:43:31:71:02:e6:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:2E:56:3E:DD:13:48:F8:62:AE:3B:CC:23:5B:7E:29:57:21:85
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xbAuVj7dE0j4Yq47zCNbfilXIYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4a:fe:0e:ac:1e:cb:1a:b9:3f:ee:f9:5e:3d:8c:2a:83:2f:
e2:32:55:58:51:53:11:5d:0f:ab:f5:f5:f1:28:86:f7:64:45:
a7:b1:a7:00:8c:45:20:3c:34:49:36:45:00:7a:4f:cc:9e:3c:
01:e1:26:a1:29:0b:58:10:cc:f5:ce:ba:65:22:45:97:0b:9c:
a0:5e:1f:2a:51:b8:70:2f:3d:3b:ee:74:47:3a:61:ba:ae:23:
cf:12:4a:c8:4f:08:14:c6:a9:fe:48:49:a5:2a:74:96:42:4e:
c0:2f:d6:a0:5c:00:6b:3d:b5:51:80:6b:94:9b:54:38:1a:20:
fc:e6:0d:af:32:aa:40:7d:e9:5c:be:5c:e7:45:c0:29:34:91:
c3:37:6b:28:a1:f5:e8:09:d2:8c:fb:71:b1:6a:e6:76:b7:9f:
9a:be:d0:65:85:b0:f4:38:c4:37:42:2a:d7:3e:d0:4d:db:52:
26:fb:0e:2f:3b:c1:20:ca:75:0a:56:10:de:99:91:4b:57:fe:
74:3c:0c:34:4d:d6:bf:46:42:03:dc:48:8a:dd:73:47:14:71:
d4:ef:53:29:3c:0c:c8:4b:73:f4:7c:b2:44:8a:10:7c:68:12:
a1:62:cd:8a:0a:c7:4c:35:4e:80:92:2e:86:8e:9b:4c:4f:34:
7f:a7:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:41 2026 by rpki-client