Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dPU15OpwoK2FlgrDoZCHAQvpfGg.roa
File: dPU15OpwoK2FlgrDoZCHAQvpfGg.roa (raw, json)
Hash identifier: phpcT4ln5F87Md+uWtOBBBCk04Euswsho6piMWcpqSQ=
Subject key identifier: 74:F5:35:E4:EA:70:A0:AD:85:96:0A:C3:A1:90:87:01:0B:E9:7C:68
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D4C5EFBB8499DD2972BA98BAAB7C39DBA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dPU15OpwoK2FlgrDoZCHAQvpfGg.roa
Signing time: Thu 02 Apr 2026 04:06:26 +0000
ROA not before: Thu 02 Apr 2026 04:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213493
IP address blocks: 5.231.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:5e:fb:b8:49:9d:d2:97:2b:a9:8b:aa:b7:c3:9d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 04:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74f535e4ea70a0ad85960ac3a19087010be97c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:9b:1d:ca:ee:7d:57:fa:83:e5:b3:ad:29:
51:cc:6b:8d:f9:ee:c0:51:ed:b4:f1:63:e9:61:3f:
8e:5d:28:02:d0:25:ce:d1:2d:e6:71:1b:a6:0b:b1:
e2:42:2c:ce:fe:50:27:de:2d:9c:c6:aa:c3:94:35:
f3:c9:e8:7c:04:60:47:06:75:84:69:e9:c5:59:b3:
14:ee:33:14:47:5c:09:4b:af:e1:3b:68:2b:5f:e2:
29:0c:4b:7c:46:7c:9e:99:5a:2b:1a:b3:bd:25:27:
00:3f:be:63:93:91:9f:1d:9e:de:cb:49:b3:f1:e6:
32:67:f1:44:79:96:cd:c9:0b:48:1e:78:b5:13:a3:
73:bf:ec:65:6b:33:0a:fe:01:b7:3d:03:6b:c0:3b:
30:38:00:df:b1:02:c9:4d:14:57:c2:ca:7f:c3:f6:
92:66:79:b8:ab:77:14:6e:b3:b3:96:df:d9:82:bc:
cd:ea:c6:47:28:3b:ad:7b:81:7a:15:48:dc:54:0b:
1c:c8:a2:8e:f6:57:77:5f:88:a9:d6:24:1a:9c:da:
00:b8:e3:c7:d9:a5:c0:ad:be:43:60:7c:68:07:15:
ed:b9:59:d0:9b:eb:42:70:e3:05:53:d3:57:4c:cd:
33:91:4e:90:92:da:52:75:2c:13:71:e6:6d:55:06:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:35:E4:EA:70:A0:AD:85:96:0A:C3:A1:90:87:01:0B:E9:7C:68
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dPU15OpwoK2FlgrDoZCHAQvpfGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:5f:c9:e9:47:57:34:21:fa:c2:6a:c6:bc:a1:56:69:1c:36:
c7:23:f0:b9:3e:cc:bd:05:30:11:68:6b:92:1b:a8:81:77:d5:
79:45:51:39:11:ec:21:c6:9a:ef:ad:ce:58:fe:f2:f9:61:88:
f7:97:c8:27:56:47:d9:7b:2f:a7:ea:35:fa:1b:26:9a:43:50:
8e:ba:03:1f:31:82:79:bb:4f:e3:f6:36:58:b1:d6:02:00:3a:
95:9c:de:79:9c:5d:5c:58:80:3c:5e:e0:71:4a:b4:53:83:0c:
cf:15:8a:6d:b4:78:11:bb:49:5e:40:df:ff:0c:cf:6f:61:ad:
3f:c8:b6:4b:06:26:88:94:4c:c2:96:6c:46:41:d5:17:b3:80:
53:09:e7:8f:b8:1e:4d:aa:a1:f8:d1:91:7b:ac:d4:58:0c:c9:
91:64:1f:f4:b4:7c:e7:23:39:c0:b5:0d:6b:65:b7:22:99:ab:
99:b6:80:cb:bf:bd:d9:b2:1b:e6:05:92:a0:4a:47:1d:e0:2c:
7c:00:7b:78:a5:6c:5d:5f:c1:be:76:fe:0d:ce:48:2c:83:30:
a0:71:ed:ce:d2:e4:6a:d5:56:de:6e:7b:2e:88:0f:a5:ce:0d:
66:ca:2b:e4:fa:28:4c:f3:c8:b0:05:f5:76:3f:21:b8:94:48:
a3:a5:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:27 2026 by rpki-client