Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fODfohuFxmQuTzQS5TWmDaI9SjQ.roa
File: fODfohuFxmQuTzQS5TWmDaI9SjQ.roa (raw, json)
Hash identifier: cdKuY/Mty/31Poy0Bq+Jp2FLs6JRjJfQ6NtKiNpgAVA=
Subject key identifier: 7C:E0:DF:A2:1B:85:C6:64:2E:4F:34:12:E5:35:A6:0D:A2:3D:4A:34
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A159F7CC226DB125444C4A24B8B21A166B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fODfohuFxmQuTzQS5TWmDaI9SjQ.roa
Signing time: Tue 20 Oct 2026 15:39:34 +0000
ROA not before: Tue 20 Oct 2026 15:39:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 5.230.179.0/24 maxlen: 24
94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:f7:cc:22:6d:b1:25:44:4c:4a:24:b8:b2:1a:16:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 20 15:39:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce0dfa21b85c6642e4f3412e535a60da23d4a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:b6:ed:6a:5e:08:f3:58:43:82:11:d7:50:
41:43:60:14:1e:29:46:cb:97:92:4b:cb:1a:c0:c7:
18:81:69:8d:b3:9c:e2:64:6d:d7:39:5a:ff:79:da:
73:7f:8d:76:38:79:3c:38:4a:4f:fe:72:d6:4f:25:
fe:6b:85:4b:6e:a4:31:86:a6:98:8f:c6:5a:1d:09:
80:8b:6c:0a:c4:c4:dc:b0:0a:d9:cd:ad:dc:72:db:
c4:66:7c:56:25:66:f1:3b:32:57:b9:5f:84:a8:3e:
77:e4:bb:dd:dc:93:07:94:1d:c1:24:0e:1d:8d:8e:
71:39:70:e4:96:ec:7f:9f:4c:b6:52:cf:09:60:f8:
7a:39:f7:59:56:68:8e:8e:a9:bd:8d:63:42:ce:4b:
1f:ba:19:09:40:dc:dd:e1:a7:2b:8e:e3:f7:d3:70:
5b:81:3c:d3:c8:c6:2d:2a:04:02:35:3c:d2:12:22:
cf:ca:62:79:26:c5:f2:3b:d4:21:1f:f7:45:ed:ed:
c3:73:02:36:27:28:c1:86:24:28:8f:0a:21:37:06:
96:98:28:1b:d7:d0:b0:6c:d2:ca:5a:53:51:3d:88:
0c:6c:d0:b9:10:bc:87:f7:6c:57:fa:00:f6:02:1b:
60:58:61:37:e9:3a:e1:64:92:85:87:f6:4e:55:c6:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:DF:A2:1B:85:C6:64:2E:4F:34:12:E5:35:A6:0D:A2:3D:4A:34
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fODfohuFxmQuTzQS5TWmDaI9SjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.179.0/24
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:ad:76:10:cd:5d:ee:6d:27:87:56:81:45:06:df:51:2e:
57:d2:5c:a9:c3:9f:d4:9b:31:b7:54:6b:29:91:00:68:50:36:
45:00:b7:f5:b9:53:22:dc:1a:d2:8b:74:60:e5:dc:a1:88:4b:
0f:44:57:e0:47:ec:e7:5e:c0:ae:38:23:5c:c6:0f:93:62:2d:
ca:fb:d6:d2:57:30:1d:eb:a1:08:e4:cc:53:81:6d:14:d4:68:
e4:f5:ca:0e:31:ca:65:57:d2:f5:43:81:3b:bb:3d:4b:15:d8:
f4:27:0c:35:ba:56:bc:d3:a2:47:27:67:81:1a:c4:79:e1:ce:
ec:d3:25:0b:ca:20:59:0e:7a:d9:ed:2a:85:47:6b:23:3b:ab:
9b:54:15:cf:bf:65:7b:2e:59:fd:a8:21:d7:69:10:9c:85:b2:
7f:7f:1f:7c:42:45:80:7a:2f:6b:8f:54:bc:9d:99:bb:3f:66:
f0:ee:2b:e7:27:fb:d7:7f:38:04:77:aa:75:19:c9:99:e3:8f:
3f:b6:2e:b6:d1:a1:73:09:eb:a4:49:31:37:99:67:85:2c:13:
29:0f:97:b6:e6:15:3f:18:6b:ff:fb:34:00:ef:b4:ba:d4:05:
f7:90:80:59:f2:62:ea:ce:6f:46:1c:86:dc:d4:a4:8b:db:61:
fb:d4:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:40:29 2026 by rpki-client