Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0U-1T_tQArTKFSxuch_ajj1k2CI.roa
File: 0U-1T_tQArTKFSxuch_ajj1k2CI.roa (raw, json)
Hash identifier: kWs0mC8mOSLlAVYD9mTAjZka9ZnkqFZV36fQCeW712s=
Subject key identifier: D1:4F:B5:4F:FB:50:02:B4:CA:15:2C:6E:72:1F:DA:8E:3D:64:D8:22
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C90DFBC839031673AF1986C393331A9B3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0U-1T_tQArTKFSxuch_ajj1k2CI.roa
Signing time: Tue 24 Feb 2026 18:18:27 +0000
ROA not before: Tue 24 Feb 2026 18:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214127
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:df:bc:83:90:31:67:3a:f1:98:6c:39:33:31:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 24 18:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14fb54ffb5002b4ca152c6e721fda8e3d64d822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:da:dd:20:59:27:29:46:24:00:8b:35:4a:
1c:d9:aa:bd:f4:7e:33:5b:57:22:70:de:d3:d8:42:
63:07:c0:10:bb:02:f2:30:ef:fa:6c:30:df:21:9a:
cb:a9:e0:c0:22:5a:22:9c:35:8f:53:d5:fa:23:c5:
5b:c5:93:0f:ea:a1:71:55:73:85:ed:28:cb:86:3e:
33:45:f7:30:26:8c:dc:1b:48:b9:e6:6a:2e:e5:02:
65:6a:f0:c1:7d:da:90:62:bc:cc:18:de:9a:49:38:
0f:0b:32:16:fe:2d:02:7d:04:44:ac:05:22:2e:42:
a3:09:f6:f6:d3:38:2f:fc:d4:68:dc:ba:6d:7b:9f:
36:ee:f0:bf:c2:07:95:55:cb:3b:d4:4e:a4:72:7f:
d0:d3:2c:95:82:20:d8:f2:a5:1e:1c:16:ce:4b:3c:
12:4f:3c:dd:4c:94:c3:e9:7e:be:5b:c1:29:58:ef:
d2:e8:ab:cb:3c:f0:33:19:20:82:48:2c:bf:34:66:
46:a7:f6:0e:f6:cb:72:c6:1a:2f:0f:3c:25:29:4f:
81:92:25:e5:a1:66:3b:11:04:47:7f:08:ce:fb:2a:
17:81:53:fb:8a:35:40:59:97:24:2f:94:be:1c:d1:
9f:a5:57:3f:83:8c:a1:7e:21:23:81:92:c8:fb:91:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4F:B5:4F:FB:50:02:B4:CA:15:2C:6E:72:1F:DA:8E:3D:64:D8:22
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0U-1T_tQArTKFSxuch_ajj1k2CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:d7:ea:6e:d9:67:a8:53:c1:ed:a0:10:38:d8:07:f8:cb:c6:
a8:56:c6:2a:86:7e:bf:79:c7:e5:e0:b6:03:46:c9:1c:35:9c:
8a:cf:62:33:67:20:2b:e8:96:0a:36:04:14:be:30:ae:9b:7b:
12:7e:2b:ba:28:73:20:0a:da:e5:80:bd:fd:52:2d:d2:e8:51:
c2:0b:68:eb:e3:f0:cb:20:a6:ab:db:60:ce:2f:8b:0c:a2:0a:
83:14:01:28:ce:0a:44:74:f0:26:3f:4a:42:4a:a6:75:5c:dc:
3e:1b:d9:f5:52:e7:88:01:de:e8:78:36:64:e1:93:41:ca:e1:
79:c2:12:4d:0a:a4:74:c7:0d:31:bd:63:c1:82:6b:ad:f5:53:
40:47:07:06:dd:18:f3:92:fc:e6:c2:b4:83:fb:f6:92:40:1d:
90:48:9e:9d:32:89:84:9b:02:76:29:97:95:b7:4d:49:11:8f:
d7:56:12:0b:9b:33:41:9a:28:63:e6:34:e9:f7:9d:f0:44:5f:
cd:2a:7c:c0:d0:24:2f:31:4d:fd:9c:a1:55:d2:1b:52:a5:5d:
3e:28:8c:9b:2f:fd:c1:94:28:d2:c4:65:70:85:36:c5:11:54:
44:99:6d:8c:89:21:73:6d:d8:d2:c4:db:74:7f:81:13:20:fd:
2a:61:e1:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyQ37yDkDFnOvGYbDkzMamzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjI0MTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTRmYjU0ZmZiNTAwMmI0Y2ExNTJjNmU3MjFmZGE4ZTNkNjRkODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ja3SBZJylGJACLNUoc2aq99H4z
W1cicN7T2EJjB8AQuwLyMO/6bDDfIZrLqeDAIloinDWPU9X6I8VbxZMP6qFxVXOF
7SjLhj4zRfcwJozcG0i55mou5QJlavDBfdqQYrzMGN6aSTgPCzIW/i0CfQRErAUi
LkKjCfb20zgv/NRo3Lpte5827vC/wgeVVcs71E6kcn/Q0yyVgiDY8qUeHBbOSzwS
TzzdTJTD6X6+W8EpWO/S6KvLPPAzGSCCSCy/NGZGp/YO9styxhovDzwlKU+BkiXl
oWY7EQRHfwjO+yoXgVP7ijVAWZckL5S+HNGfpVc/g4yhfiEjgZLI+5HcjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNFPtU/7UAK0yhUsbnIf2o49ZNgiMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMFUtMVRfdFFBclRLRlN4dWNoX2FqajFrMkNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABec6AwQA
Bec9MA0GCSqGSIb3DQEBCwUAA4IBAQDU1+pu2WeoU8HtoBA42Af4y8aoVsYqhn6/
ecfl4LYDRskcNZyKz2IzZyAr6JYKNgQUvjCum3sSfiu6KHMgCtrlgL39Ui3S6FHC
C2jr4/DLIKar22DOL4sMogqDFAEozgpEdPAmP0pCSqZ1XNw+G9n1UueIAd7oeDZk
4ZNByuF5whJNCqR0xw0xvWPBgmut9VNARwcG3RjzkvzmwrSD+/aSQB2QSJ6dMomE
mwJ2KZeVt01JEY/XVhILmzNBmihj5jTp953wRF/NKnzA0CQvMU39nKFV0htSpV0+
KIybL/3BlCjSxGVwhTbFEVREmW2MiSFzbdjSxNt0f4ETIP0qYeEO
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:18 2026 by rpki-client