Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B3CjsqjWdSfnfcyUAztIm1HDSns.roa
File: B3CjsqjWdSfnfcyUAztIm1HDSns.roa (raw, json)
Hash identifier: h8pB53Xo+H9i/I4F8MG7ZA+CuDbW15zeV69TzaYZL54=
Subject key identifier: 07:70:A3:B2:A8:D6:75:27:E7:7D:CC:94:03:3B:48:9B:51:C3:4A:7B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C90DFBC0E3E07A7CE59441B7476979F71
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B3CjsqjWdSfnfcyUAztIm1HDSns.roa
Signing time: Tue 24 Feb 2026 18:18:27 +0000
ROA not before: Tue 24 Feb 2026 18:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24875
IP address blocks: 5.231.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:df:bc:0e:3e:07:a7:ce:59:44:1b:74:76:97:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 24 18:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0770a3b2a8d67527e77dcc94033b489b51c34a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:4e:d5:a3:77:21:ef:13:29:7e:c6:80:39:
14:fa:b9:6f:50:cf:c7:8a:07:d3:6f:2e:af:b8:f1:
2d:ff:26:b7:04:a7:82:c1:5f:9b:c5:30:06:fc:77:
90:eb:56:42:88:e1:7f:14:d4:ba:f8:df:14:20:d7:
6b:01:99:c9:a5:44:7c:42:f0:53:83:27:92:c5:5d:
94:72:30:62:ec:f5:aa:7b:3d:8b:5d:c9:f0:64:6d:
de:8c:a3:8a:6d:27:62:e8:48:5b:f0:63:4d:fa:da:
56:83:b3:d4:83:88:bf:12:90:90:c0:e2:68:dc:c9:
56:14:3b:e7:ea:7a:da:b4:1f:3e:38:29:12:b3:9c:
af:c0:58:8d:b1:06:40:9b:cb:ed:42:ae:6c:a8:ee:
8e:34:2e:75:f3:52:64:64:74:ef:0c:06:72:1e:0a:
45:8b:7d:75:fc:d2:2d:5a:d1:78:34:9b:53:15:b6:
41:f2:b0:f0:c2:70:01:00:d8:5b:5b:9b:cb:de:dd:
a9:ee:1c:84:b4:57:42:92:22:07:92:83:83:80:3b:
64:46:6b:36:5c:6a:6a:00:11:d3:4a:b2:4c:21:42:
43:95:20:28:49:0d:ff:1d:95:14:8c:2f:24:57:13:
64:16:c7:45:2f:d9:d7:4b:11:26:50:55:ff:ae:10:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:A3:B2:A8:D6:75:27:E7:7D:CC:94:03:3B:48:9B:51:C3:4A:7B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B3CjsqjWdSfnfcyUAztIm1HDSns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c9:48:f1:48:82:0b:2d:6d:21:2a:ba:f0:b5:f4:04:de:62:
fc:20:c4:e7:24:34:27:52:87:7b:e7:19:09:6d:1f:16:8a:79:
54:eb:71:6c:2d:6b:8b:dc:aa:b5:a8:e1:a3:67:1b:21:e1:60:
cc:69:12:55:24:93:27:50:9a:a4:99:eb:50:af:17:b2:ff:70:
04:9f:c1:cf:1c:54:b0:dd:81:5d:c6:6a:e7:cb:9f:c0:59:62:
22:9e:c3:fa:6f:f8:a8:bd:77:b0:19:4f:3d:b2:69:28:7f:04:
4f:2b:82:66:0c:97:3f:0f:d2:3f:fe:58:b0:dc:d5:0d:c8:76:
5d:ac:cc:de:0d:c2:6e:51:2b:c0:8b:06:21:eb:0d:46:0f:fd:
96:99:54:58:33:3d:78:d5:52:39:b7:85:50:9f:42:33:8b:c1:
16:92:6a:57:90:f1:c4:33:11:61:7f:fd:a0:66:28:88:7d:be:
af:5a:23:21:6a:2e:88:ac:c7:0e:6e:93:85:db:40:a7:cf:ff:
64:51:16:bf:de:38:04:a0:54:8c:49:3d:c0:52:43:09:dd:40:
80:b6:58:f6:c1:4d:bb:e2:e3:a9:3e:5b:a5:fe:9c:70:a6:01:
31:ab:67:c8:ee:58:74:85:99:70:b1:dc:51:0a:df:b1:61:45:
08:ed:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:10 2026 by rpki-client