Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UQXsVHcvn45aycBJ73PqdRd8MAc.roa
File: UQXsVHcvn45aycBJ73PqdRd8MAc.roa (raw, json)
Hash identifier: NrXqZIDGL7gQMCRGj3MeeDze/YP8FqUw3VtfEIZqgh8=
Subject key identifier: 51:05:EC:54:77:2F:9F:8E:5A:C9:C0:49:EF:73:EA:75:17:7C:30:07
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1AA6E9DFA2A5BF23809EB74E12D80013D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UQXsVHcvn45aycBJ73PqdRd8MAc.roa
Signing time: Thu 05 Nov 2026 06:38:58 +0000
ROA not before: Thu 05 Nov 2026 06:38:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
2a02:2fc0:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:6e:9d:fa:2a:5b:f2:38:09:eb:74:e1:2d:80:01:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 5 06:38:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5105ec54772f9f8e5ac9c049ef73ea75177c3007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:39:b7:ff:76:d0:49:44:65:5a:7a:fc:13:
3a:69:6d:b9:fa:b6:a5:22:49:29:3d:60:f6:1f:d7:
be:86:27:2b:a4:50:8c:3d:77:6f:67:42:90:e4:2b:
c8:15:ad:03:31:eb:ec:ac:c8:07:fa:97:de:7b:78:
55:52:6e:c8:30:ec:19:a2:c4:04:db:18:4d:85:a6:
2b:ce:21:bb:ac:c2:e6:32:80:b5:ae:17:1a:87:cb:
90:d7:60:74:d3:a6:bb:42:59:5c:1f:17:1c:fb:40:
14:1f:99:ea:a8:a9:08:c4:b0:74:86:ac:33:23:a3:
59:de:52:f8:74:10:1d:28:5b:55:d0:7d:26:0a:ed:
45:04:b3:a6:00:0a:fb:bf:86:42:e2:89:cd:f1:7e:
52:89:2d:fd:75:c3:e2:ec:73:bb:75:d7:f4:3d:c8:
62:f3:a6:cb:f5:15:3e:ff:b7:b2:2a:ca:8f:46:c9:
fd:f0:34:8d:5f:c1:2d:cf:ec:83:c7:09:68:7d:d5:
d7:18:54:61:04:da:b1:31:c4:cd:66:26:37:69:b1:
78:b4:5a:7b:17:d3:e9:d4:20:59:09:52:1a:47:6e:
32:ff:6f:06:85:aa:76:06:05:f4:b3:5d:70:ce:33:
4f:83:8f:df:fb:b9:7e:cf:fa:25:97:a2:e3:23:00:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:EC:54:77:2F:9F:8E:5A:C9:C0:49:EF:73:EA:75:17:7C:30:07
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UQXsVHcvn45aycBJ73PqdRd8MAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
IPv6:
2a02:2fc0:2d::/48
Signature Algorithm: sha256WithRSAEncryption
17:05:7c:b9:65:bb:90:16:e4:6d:40:85:73:e0:31:0e:af:57:
19:e1:1c:63:d4:04:62:e2:7b:70:ab:b0:31:df:7d:d4:e5:a7:
f3:37:72:4d:1c:6e:23:a4:60:d5:e5:12:12:0a:af:0d:a4:19:
1a:eb:d1:a7:90:ab:0d:59:93:4d:cf:ab:79:ee:52:ab:cf:6c:
0d:91:eb:5f:6e:db:0a:3e:c6:86:34:64:e3:1a:54:ee:dd:25:
75:94:ad:51:33:4f:c9:6c:b7:51:40:ad:ff:f1:55:6a:7c:c5:
4d:95:c6:14:5a:d9:b8:40:44:ab:a8:2f:9b:33:41:43:57:81:
62:8c:af:ce:70:9c:5c:5f:84:68:83:bf:4a:6f:e8:52:44:18:
c8:96:4a:95:db:80:01:62:43:d7:b0:49:fc:e0:02:d4:54:35:
7f:57:f8:8d:3a:ac:65:a2:0a:58:8a:ad:b4:35:9d:28:fb:5d:
b5:18:cf:37:8c:56:1a:92:e1:9f:c4:cc:2e:52:10:df:03:83:
a2:cc:33:b3:48:ad:51:b8:91:5a:9c:a2:31:51:ec:91:0e:fb:
d8:35:ff:7e:e4:92:4a:3c:88:49:b8:db:84:8d:d1:d4:ee:0c:
84:9f:b2:3a:0b:e3:b2:d2:98:60:51:d7:11:1c:c4:02:02:c5:
aa:46:4d:69
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaGqbp36KlvyOAnrdOEtgAE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMTA1MDYzODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTA1ZWM1NDc3MmY5ZjhlNWFjOWMwNDllZjczZWE3NTE3N2MzMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+U5t/920ElEZVp6/BM6aW25+ral
IkkpPWD2H9e+hicrpFCMPXdvZ0KQ5CvIFa0DMevsrMgH+pfee3hVUm7IMOwZosQE
2xhNhaYrziG7rMLmMoC1rhcah8uQ12B006a7QllcHxcc+0AUH5nqqKkIxLB0hqwz
I6NZ3lL4dBAdKFtV0H0mCu1FBLOmAAr7v4ZC4onN8X5SiS39dcPi7HO7ddf0Pchi
86bL9RU+/7eyKsqPRsn98DSNX8Etz+yDxwlofdXXGFRhBNqxMcTNZiY3abF4tFp7
F9Pp1CBZCVIaR24y/28Ghap2BgX0s11wzjNPg4/f+7l+z/oll6LjIwCjQwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFEF7FR3L5+OWsnASe9z6nUXfDAHMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVVFYc1ZIY3ZuNDVheWNCSjczUHFkUmQ4TUFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABec6AwQA
Bec9MA8EAgACMAkDBwAqAi/AAC0wDQYJKoZIhvcNAQELBQADggEBABcFfLllu5AW
5G1AhXPgMQ6vVxnhHGPUBGLie3CrsDHffdTlp/M3ck0cbiOkYNXlEhIKrw2kGRrr
0aeQqw1Zk03Pq3nuUqvPbA2R619u2wo+xoY0ZOMaVO7dJXWUrVEzT8lst1FArf/x
VWp8xU2VxhRa2bhARKuoL5szQUNXgWKMr85wnFxfhGiDv0pv6FJEGMiWSpXbgAFi
Q9ewSfzgAtRUNX9X+I06rGWiCliKrbQ1nSj7XbUYzzeMVhqS4Z/EzC5SEN8Dg6LM
M7NIrVG4kVqcojFR7JEO+9g1/37kkko8iEm424SN0dTuDISfsjoL47LSmGBR1xEc
xAICxapGTWk=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:26 2026 by rpki-client