Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A8MG3ugjojCgRlhok651184WDT4.roa
File: A8MG3ugjojCgRlhok651184WDT4.roa (raw, json)
Hash identifier: EzQHIfIZ8JRYums+na3LyJksuUnWB1VbDYzjhJ5LiRs=
Subject key identifier: 03:C3:06:DE:E8:23:A2:30:A0:46:58:68:93:AE:75:D7:CE:16:0D:3E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A098EF34268CC8AA4533DC3372FD4E55EA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A8MG3ugjojCgRlhok651184WDT4.roa
Signing time: Sun 13 Sep 2026 04:03:28 +0000
ROA not before: Sun 13 Sep 2026 04:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62403
IP address blocks: 5.231.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:98:ef:34:26:8c:c8:aa:45:33:dc:33:72:fd:4e:55:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 13 04:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03c306dee823a230a046586893ae75d7ce160d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:26:08:ab:d8:42:d9:e9:e9:da:05:6e:b8:
b6:c3:36:bf:97:d0:ad:28:97:e2:64:d4:1f:e8:43:
81:c3:aa:9d:f3:e1:4c:b3:69:e3:d5:e1:58:20:d3:
0c:c7:5e:89:49:f8:8c:06:22:f4:a7:32:3e:3f:12:
5c:25:6e:be:69:8e:44:53:46:50:5e:a3:2b:e3:90:
6b:7f:b4:ee:06:8b:43:23:c8:f6:71:62:c8:dc:52:
20:7a:9c:b8:d1:bf:cd:53:59:84:56:c2:1a:aa:d0:
95:d8:c4:10:76:02:25:0e:b2:d6:b8:2a:0a:bb:44:
45:b1:5f:5d:bd:2e:b9:e9:04:5b:9f:34:56:bd:70:
ba:6f:b8:5e:e5:0d:82:52:c4:8c:a7:4c:3a:77:71:
cc:f7:eb:a1:53:0f:e8:1f:24:72:52:7a:c3:ab:e7:
b0:82:2a:11:98:db:b2:53:2b:23:ea:90:ee:1b:b7:
f4:23:c4:75:0e:ab:d3:73:e2:69:92:3f:6c:94:46:
33:ed:1e:ad:fd:94:32:88:ba:b4:05:95:1b:fa:5a:
fd:28:9d:9b:af:d6:78:5c:ca:9c:32:24:0d:ea:a3:
62:42:fa:a0:a9:bd:89:77:84:b8:b7:c0:9f:2f:2e:
af:8e:0c:82:28:d9:00:5c:88:d7:1e:58:bc:fe:77:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:06:DE:E8:23:A2:30:A0:46:58:68:93:AE:75:D7:CE:16:0D:3E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A8MG3ugjojCgRlhok651184WDT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a6:5c:a2:f3:76:e3:40:99:16:79:e9:17:f3:b2:7b:68:0f:
05:34:06:dd:4f:bc:0e:81:48:68:d6:bb:2e:02:07:6d:1d:91:
10:d3:04:a2:39:34:f7:ba:f6:c3:e2:ec:8a:0f:c9:ca:a4:98:
7e:b7:59:6b:1f:35:5f:cc:03:5b:40:14:c9:46:64:ed:a2:87:
bb:74:01:dc:6a:12:98:50:b3:2c:b1:8a:d2:70:4d:f8:73:9c:
3c:a5:07:8a:8f:2d:5f:3c:2c:fb:1e:47:f4:2c:92:35:fb:a5:
5b:42:1d:cd:bc:af:96:f9:c1:35:74:d8:4c:a7:7f:f8:a5:c3:
92:ab:f1:e3:0a:1d:ae:3e:84:ce:03:2c:a8:74:c7:8d:f3:79:
07:5b:ee:1d:4d:ce:85:c6:d3:79:94:20:71:29:81:96:e2:bf:
bf:62:f4:f9:44:0b:08:bd:79:f0:e5:4f:ba:8a:24:6f:67:a3:
f6:ac:c5:b6:4b:25:ba:5f:be:9b:6a:74:82:d4:dc:93:82:33:
4a:55:35:e1:61:a2:b9:d8:de:3c:73:2e:2b:72:b2:65:e2:47:
88:7c:c5:35:70:69:5c:a1:22:b1:af:ff:31:5b:79:73:d9:91:
e6:59:c8:2a:de:fe:5e:83:21:f5:00:d8:2a:c5:24:1c:3f:da:
fa:95:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:40 2026 by rpki-client