Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1KeVtPNkb1YoI46_22GB26QkNgM.roa
File: 1KeVtPNkb1YoI46_22GB26QkNgM.roa (raw, json)
Hash identifier: rpJo36SUuOq2wx4nh997ky/hccawfEbF/wv68smBRs8=
Subject key identifier: D4:A7:95:B4:F3:64:6F:56:28:23:8E:BF:DB:61:81:DB:A4:24:36:03
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D8BB4E5148B9266A39A0116D6C8D3700C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1KeVtPNkb1YoI46_22GB26QkNgM.roa
Signing time: Tue 14 Apr 2026 11:16:21 +0000
ROA not before: Tue 14 Apr 2026 11:16:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199514
IP address blocks: 5.231.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:b4:e5:14:8b:92:66:a3:9a:01:16:d6:c8:d3:70:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 11:16:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4a795b4f3646f5628238ebfdb6181dba4243603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:15:d3:37:11:11:4e:a2:a9:d9:af:58:24:
bf:f5:bb:9e:d5:68:04:88:30:a5:26:86:09:0f:37:
c5:08:ce:25:0b:a0:90:f2:b0:f4:3c:0b:f0:38:9a:
7e:c8:5f:15:1e:43:82:09:3d:f6:18:4f:af:13:4d:
ae:af:6c:cd:99:16:9c:9c:c3:2e:e8:75:c0:5f:bd:
3b:39:3c:e5:89:66:39:0c:b3:24:cb:e2:09:68:6a:
88:e7:d4:47:77:93:77:9f:e6:e3:e5:e6:a7:08:75:
ee:c5:4d:08:85:10:0e:1e:de:1a:28:8d:72:8e:35:
0a:68:f9:bb:3e:67:3b:f5:e0:81:c4:ff:72:ce:d1:
5e:7f:47:e2:42:5b:89:8e:91:e2:90:4c:ff:90:8a:
b5:4f:b0:e0:95:61:09:ad:ef:70:35:75:ca:9a:be:
c3:d3:77:d2:9e:bd:15:99:fe:ce:21:ee:84:3a:b8:
3f:8b:50:d3:e9:c3:6f:38:24:15:2e:30:86:46:eb:
62:f9:a3:17:c5:5c:91:73:a9:5e:df:81:13:80:1a:
64:06:f6:fa:73:fe:d8:b1:35:ca:f2:98:7e:86:83:
5a:9f:44:f0:74:1d:87:8f:9a:55:bd:6a:4a:f8:1b:
2e:56:fb:da:a2:ba:ad:9f:13:75:4e:b8:c1:6e:6a:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A7:95:B4:F3:64:6F:56:28:23:8E:BF:DB:61:81:DB:A4:24:36:03
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1KeVtPNkb1YoI46_22GB26QkNgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:da:00:aa:30:c5:d5:df:13:5b:cb:96:70:02:22:ec:1b:82:
41:7e:4f:73:65:70:2d:e3:41:82:f2:02:4c:5c:2b:21:b4:2b:
e3:5f:c0:c3:3d:64:26:9c:d3:99:3b:da:54:7e:24:19:76:24:
4f:e2:ed:e9:e7:6a:4d:ba:7b:be:f2:1e:d7:5e:59:d0:6a:21:
0b:c8:2b:1e:dc:4b:bb:2c:27:67:08:e4:50:66:b5:13:49:e2:
61:43:e4:35:cb:b1:07:01:cc:77:bd:44:71:98:df:68:60:9a:
85:42:46:3b:d5:c8:fd:35:cd:40:40:88:1e:c3:a3:db:41:10:
a7:f2:bf:be:ba:7e:a2:7d:63:03:30:7a:3e:78:8f:17:57:d3:
2b:44:fe:72:7a:d6:9b:e5:0e:cb:0c:8d:52:76:fb:e2:3e:0b:
66:81:f7:cb:45:8d:d1:79:5d:3e:bb:d3:58:69:7b:30:7b:c1:
2a:7e:4c:1b:2c:e2:bf:21:1f:b6:16:87:eb:b1:cf:41:04:19:
a1:b4:d3:c9:f7:e4:49:e5:a1:9c:cd:ba:c8:b8:1b:e8:64:e0:
90:ec:f8:f3:02:49:fb:64:be:4e:d2:b5:ab:1d:3d:12:25:df:
99:15:0a:2e:89:60:08:4b:08:12:9f:2a:8a:e9:67:39:9b:91:
1d:06:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:25 2026 by rpki-client