Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xnW9PwPbCmPU6mr39oSJFNIKlYw.roa
File: xnW9PwPbCmPU6mr39oSJFNIKlYw.roa (raw, json)
Hash identifier: dB+cFZXGUZnbAk0p1vmM+PStKviEKjakmoF1sVoGR/U=
Subject key identifier: C6:75:BD:3F:03:DB:0A:63:D4:EA:6A:F7:F6:84:89:14:D2:0A:95:8C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0E7D8BA594EC958D29325B172DD5BD1CD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xnW9PwPbCmPU6mr39oSJFNIKlYw.roa
Signing time: Mon 28 Sep 2026 11:48:55 +0000
ROA not before: Mon 28 Sep 2026 11:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209866
IP address blocks: 5.231.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:d8:ba:59:4e:c9:58:d2:93:25:b1:72:dd:5b:d1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 28 11:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c675bd3f03db0a63d4ea6af7f6848914d20a958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:e5:d7:2d:46:68:fe:52:55:c3:4e:60:6d:
05:77:58:f5:13:24:27:74:5f:b6:50:23:df:9f:16:
6b:0e:9e:f5:31:3d:60:75:eb:68:a4:e5:63:93:55:
97:7d:03:2d:66:ea:03:2b:eb:d1:58:1a:4b:a9:20:
d1:70:71:86:38:0d:cb:a1:25:c6:53:66:eb:6a:4a:
f4:26:3c:5e:e2:45:9f:59:23:96:67:2a:e7:52:d8:
d3:98:37:ef:d8:f3:0a:be:57:37:7d:d1:8b:58:53:
26:a7:d0:23:e1:23:7d:e5:2e:42:a9:15:27:b9:ef:
e2:27:a1:aa:58:71:db:6d:b6:00:8f:ec:69:97:63:
ac:0a:20:0d:2c:b4:c5:a0:e5:54:c8:9c:5d:54:0c:
32:77:21:d4:5b:43:30:28:a4:27:6a:ab:58:9a:64:
57:ad:84:96:6a:11:94:27:3f:4c:62:d1:e0:8f:5f:
00:4f:31:e3:9b:4b:36:3d:5b:79:d4:73:a4:f2:f1:
8f:40:b2:7e:5e:1d:9f:06:af:85:6a:00:cf:65:f6:
3f:5b:8a:e1:a1:a3:ce:72:50:2b:31:9e:31:ea:10:
56:da:ff:f5:15:a7:8f:7d:16:3c:45:00:41:b1:1f:
fe:d9:60:04:7d:0f:56:8a:77:81:0c:57:71:63:11:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:75:BD:3F:03:DB:0A:63:D4:EA:6A:F7:F6:84:89:14:D2:0A:95:8C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xnW9PwPbCmPU6mr39oSJFNIKlYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bb:71:0c:21:09:99:0d:16:fa:3b:57:f9:04:71:d0:48:0e:
9d:39:c6:88:c4:38:0a:89:76:dd:99:96:88:f0:46:c8:bd:85:
eb:66:e7:8e:be:12:37:30:7e:61:50:f6:7e:02:c3:a6:cb:46:
0b:ed:f2:59:17:cc:32:37:cb:58:36:99:99:79:57:07:f8:f7:
a1:23:8f:8c:af:22:4c:cc:f3:b5:64:b3:dd:70:3e:96:db:3e:
22:7c:f8:4c:64:fd:9c:29:5b:b1:fc:c5:3a:41:19:7c:bc:14:
a4:84:b1:26:22:7d:5b:1f:c6:61:5c:7f:f7:ec:bf:b7:54:05:
be:93:0f:5e:82:02:a3:a6:7f:dd:76:04:cb:66:af:0e:11:e8:
2c:95:91:a1:14:24:e8:c2:20:91:12:30:af:a6:6d:89:79:0a:
85:d7:9b:89:ac:4f:94:9a:1d:32:61:ed:3f:88:5f:a8:56:04:
11:19:50:b7:3c:9f:76:d5:d1:f5:09:ea:6d:d8:93:75:33:eb:
0c:98:ed:9b:64:ea:ed:d4:23:bd:05:77:8b:18:2b:a1:b5:b0:
84:4f:38:0e:8b:67:51:b3:9c:35:a0:19:e7:06:bf:40:88:33:
42:4b:bb:94:c2:fc:03:87:53:4e:10:2e:18:72:86:d9:db:ed:
0e:36:8b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:32:11 2026 by rpki-client