Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/5NI6HzXu5cmevKQySM2tMOfOaUg.roa
File: 5NI6HzXu5cmevKQySM2tMOfOaUg.roa (raw, json)
Hash identifier: cKLIKF+ZvgH5pecXDmJJNwlXw/d8/Pu8TzvepmI/nQQ=
Subject key identifier: E4:D2:3A:1F:35:EE:E5:C9:9E:BC:A4:32:48:CD:AD:30:E7:CE:69:48
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FF289E667C05967C96C0AC9CD9EF2FD33
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/5NI6HzXu5cmevKQySM2tMOfOaUg.roa
Signing time: Tue 11 Aug 2026 20:35:51 +0000
ROA not before: Tue 11 Aug 2026 20:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213683
IP address blocks: 201.3.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:89:e6:67:c0:59:67:c9:6c:0a:c9:cd:9e:f2:fd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 11 20:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4d23a1f35eee5c99ebca43248cdad30e7ce6948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:66:70:87:5d:d7:01:6e:0c:f2:94:01:2f:
ed:12:ff:e1:3d:97:1a:80:4d:4a:2c:63:d5:e9:39:
00:ac:42:a3:0d:e5:68:cb:dd:e7:26:06:18:d2:19:
05:b8:b5:f5:22:c0:9d:80:b6:1b:fa:ff:e4:51:9e:
b5:10:8e:72:01:1a:12:34:3b:e3:c8:af:05:2e:96:
bd:3e:da:89:09:46:ad:d6:cc:2e:ee:58:5b:f0:11:
93:34:f6:24:95:e6:5c:79:3b:db:31:eb:93:f9:39:
ca:39:9c:91:5b:cb:80:94:98:a3:56:ed:7f:f1:39:
18:95:91:a2:81:0d:21:b9:23:0e:76:e1:57:34:b7:
cc:b0:0e:57:74:ef:c8:c0:c8:d0:f0:66:30:0d:52:
6f:5c:e5:a1:3b:d9:e0:49:32:1a:3f:21:55:48:58:
3b:ca:e6:62:ad:e3:a7:69:08:20:50:a9:47:9c:f6:
6f:e5:af:a4:e3:47:4a:fa:5d:9b:8e:b7:13:c4:da:
08:e0:aa:6a:17:6e:fb:2b:34:1d:c8:e9:cd:7d:57:
08:9e:45:ef:d0:06:d9:e4:4d:4c:0a:0d:ac:a6:46:
7f:3a:ad:d0:81:b7:e5:2b:8f:08:a3:5f:2c:5c:b0:
2e:91:09:30:cb:5f:57:b7:a9:96:9a:e0:f3:79:23:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:3A:1F:35:EE:E5:C9:9E:BC:A4:32:48:CD:AD:30:E7:CE:69:48
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/5NI6HzXu5cmevKQySM2tMOfOaUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.233.0/24
Signature Algorithm: sha256WithRSAEncryption
33:df:3d:68:e8:6b:98:a3:d2:dd:77:c8:c6:33:0c:97:53:d5:
3c:62:69:2b:43:a3:3f:94:1e:ea:21:48:d9:86:0f:24:a6:27:
8d:6f:cd:ae:de:32:a0:07:bd:5a:60:2c:c0:06:96:b1:92:50:
8c:9d:a5:24:25:f9:c7:55:86:06:4c:e5:17:71:85:10:6e:43:
1c:1f:47:4a:ef:77:59:89:02:27:87:d4:59:a6:6c:c9:e0:86:
a7:03:04:84:a9:09:fb:40:93:77:9c:3d:9f:ba:6c:98:d0:a6:
af:dc:c6:39:93:fc:60:bf:49:3c:65:93:33:3b:38:ba:c5:7c:
52:4d:3f:f1:48:11:5c:31:19:96:73:6f:38:dd:f3:98:eb:92:
46:d6:f2:0c:7c:3d:38:31:fb:38:45:3f:af:90:e6:45:a5:5a:
4f:89:6e:a4:e8:ea:e4:a3:bd:1a:c8:d2:ef:36:ac:1c:ae:2a:
04:e7:b3:7e:90:ce:a5:7c:a9:e1:d2:f1:fe:46:a7:ab:0a:16:
0f:c6:eb:3e:55:d1:d2:74:0c:56:73:39:cf:82:5d:5c:2c:70:
e3:d1:05:78:c6:a5:cd:04:a7:b0:4f:bb:85:43:5f:29:a6:03:
c3:d5:79:18:46:b1:b2:4d:b9:99:5e:04:18:9a:a9:61:7d:33:
a8:ad:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:59 2026 by rpki-client