Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1VYTuNrVddDt_YyUq37sOGW0_1I.roa
File: 1VYTuNrVddDt_YyUq37sOGW0_1I.roa (raw, json)
Hash identifier: O6WFoQ8RHfUkq0KT2RAhaXtTTGAu1KTo2upjFNG7714=
Subject key identifier: D5:56:13:B8:DA:D5:75:D0:ED:FD:8C:94:AB:7E:EC:38:65:B4:FF:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C9E5A5D318757D518BD9A8D35532888FF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1VYTuNrVddDt_YyUq37sOGW0_1I.roa
Signing time: Fri 27 Feb 2026 09:07:28 +0000
ROA not before: Fri 27 Feb 2026 09:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213661
IP address blocks: 5.231.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:5a:5d:31:87:57:d5:18:bd:9a:8d:35:53:28:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 09:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d55613b8dad575d0edfd8c94ab7eec3865b4ff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:e8:ab:7d:d1:23:8f:5c:b4:98:97:4b:c8:
3d:8b:79:d5:64:e2:02:8d:28:60:3a:67:6a:2a:59:
0b:c4:3a:0c:5d:09:b6:1f:b2:c1:00:ef:cf:99:42:
15:f9:cb:c8:b8:b6:93:b9:4e:7e:8e:09:90:98:11:
3a:b3:61:47:c6:5d:9b:2b:7c:35:97:90:43:49:d1:
2c:f6:6d:bf:9c:96:91:18:64:d7:00:c0:ba:06:06:
6f:3c:da:d1:85:39:30:f6:01:c6:50:d1:14:03:a9:
9b:42:26:18:a4:cd:18:38:ca:95:36:a1:df:8d:ff:
bd:44:89:e9:e9:eb:4b:39:be:aa:e2:1f:25:95:b4:
4d:db:a3:9e:75:d8:af:f3:ba:27:83:96:f0:c3:d2:
58:06:2f:c2:48:55:b2:ed:63:eb:88:40:e3:3a:85:
ad:ee:36:73:df:a4:b0:17:0d:93:4b:c7:94:35:cf:
b0:7b:75:31:69:fe:20:cd:7c:ca:b7:9f:95:02:63:
66:c1:98:cf:c3:90:1c:d4:92:a2:b3:8f:93:76:91:
5f:29:5c:7c:0c:14:42:b0:46:9a:f0:d3:1a:00:d1:
e1:d9:fe:f0:70:4f:ce:6c:16:74:a8:c4:f1:52:06:
d4:e6:5d:1d:fa:2f:bc:ec:f3:34:25:ea:19:98:86:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:13:B8:DA:D5:75:D0:ED:FD:8C:94:AB:7E:EC:38:65:B4:FF:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1VYTuNrVddDt_YyUq37sOGW0_1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.248.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bd:39:cb:d6:2d:1f:fc:78:51:57:3e:11:66:8e:82:e8:f3:
54:74:50:be:9e:9d:76:d7:80:d6:78:b0:01:ae:2b:cc:d6:02:
82:f8:e3:22:ae:ef:54:59:1c:94:8c:55:db:bf:29:5b:d9:62:
8a:05:e2:09:c0:05:8d:4d:ef:19:cb:a5:66:79:5d:e6:4c:0f:
4a:c9:a5:53:16:f8:82:30:c2:38:2e:72:59:ac:91:69:e2:d9:
ec:40:b0:6c:3b:8a:63:b7:89:ce:ec:de:84:2e:9a:67:73:33:
cb:4c:a7:1d:9f:6b:e4:85:3d:70:60:ac:a4:a6:c6:4f:9a:87:
06:6c:73:17:03:84:10:1e:3d:ba:d0:f8:b0:5e:94:f0:37:69:
69:23:5f:8c:68:c7:a8:7b:80:c4:61:47:c0:e6:7c:84:ef:71:
95:14:dc:9a:e2:11:dc:1c:fc:ae:20:9e:31:39:e4:7a:6d:9f:
a0:72:f5:de:56:12:75:ac:86:f3:6e:6a:90:a2:44:7c:b1:40:
86:3c:6a:7d:21:b5:3b:2a:ac:b8:6a:4f:b9:dd:00:8f:fc:cd:
7d:81:43:a5:e7:cd:6c:dc:d5:00:cb:42:e1:9b:88:4a:7c:28:
1e:46:a4:01:39:77:20:3e:f9:42:a6:5d:88:5f:dc:90:76:69:
0d:30:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:41 2026 by rpki-client