Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hPuw9IZGqEsBUSLgpS0m80ElndQ.roa
File: hPuw9IZGqEsBUSLgpS0m80ElndQ.roa (raw, json)
Hash identifier: sHFMVDuHSAmIz35fKrUnGjpePT3kjr6aeVyhzdn9Ekk=
Subject key identifier: 84:FB:B0:F4:86:46:A8:4B:01:51:22:E0:A5:2D:26:F3:41:25:9D:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A16E35901D3B51FECDB2EAC181702B5D60
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hPuw9IZGqEsBUSLgpS0m80ElndQ.roa
Signing time: Sat 24 Oct 2026 13:59:26 +0000
ROA not before: Sat 24 Oct 2026 13:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214127
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:35:90:1d:3b:51:fe:cd:b2:ea:c1:81:70:2b:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 24 13:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84fbb0f48646a84b015122e0a52d26f341259dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:21:06:b0:c5:1e:e4:93:85:7b:48:b9:a6:
a2:eb:e6:ad:62:bf:15:91:6e:f9:c2:42:94:cd:2c:
ff:e6:b3:1d:c1:43:b5:2e:e7:ff:a4:32:d1:1a:08:
51:1f:88:22:c0:7b:9e:49:ae:38:6e:ae:35:f4:06:
82:b1:d1:a9:cd:b3:14:90:cd:c6:19:0c:f9:a4:f2:
40:6a:44:56:e8:f2:70:20:e0:b4:74:0d:a7:c2:4b:
55:c9:90:41:08:3b:c1:09:fc:29:c0:f6:81:60:d5:
69:a7:fa:87:64:d2:fd:f8:40:e6:06:78:31:4c:49:
62:f8:0d:46:41:c1:9c:37:88:7b:89:04:89:bb:37:
eb:15:db:66:2f:58:0f:72:bb:2c:24:e9:95:39:71:
8f:b4:77:e7:14:4b:10:d3:1a:39:e7:28:2a:f6:db:
7d:d4:42:15:0f:fa:b0:9e:d1:64:95:91:4b:76:e4:
0b:b0:dc:76:3e:e9:b1:55:8e:ae:eb:7d:b2:fd:12:
0b:f7:57:79:12:b1:27:45:b2:ea:de:50:42:50:32:
6b:7a:cb:48:64:76:67:fc:77:98:b6:4f:af:e1:3a:
f7:0c:bd:fb:60:a8:a1:32:63:c8:00:22:ac:1c:f5:
38:a0:ce:0a:64:65:2c:ed:27:21:05:84:5a:21:8d:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:B0:F4:86:46:A8:4B:01:51:22:E0:A5:2D:26:F3:41:25:9D:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hPuw9IZGqEsBUSLgpS0m80ElndQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:60:e5:8f:3f:73:a3:94:cd:08:e9:cb:14:9e:ee:b6:02:97:
00:51:9e:0e:c0:dc:b1:5f:8a:1c:d9:57:87:e3:3c:51:b5:7b:
8c:dd:ea:45:42:f1:fc:0c:67:15:74:b7:10:ad:d4:14:04:a5:
de:5d:7f:46:a5:de:10:14:de:16:9f:5f:c7:eb:f5:e2:72:05:
3f:9d:7f:be:1e:db:db:ee:a2:b6:06:d2:53:b6:bf:91:9c:53:
a1:87:e0:71:dc:ac:19:a4:14:ff:61:d2:e9:65:3f:09:d3:d9:
f8:0c:6b:1e:59:a5:0b:72:70:bf:41:37:3d:23:08:41:2b:cf:
2c:7e:93:ed:a6:3e:1e:de:70:09:fe:9e:a7:91:3d:c7:4d:ea:
11:53:7f:c1:5e:ff:a3:d0:b4:9f:a5:cd:70:63:4c:cd:2e:1b:
da:91:96:21:e9:5e:ee:7d:90:4e:00:3f:ff:70:57:9c:e1:46:
86:1f:d1:70:76:93:82:c8:a4:1d:2b:a8:9f:74:5e:c4:8a:a8:
81:ff:b5:a6:ad:ad:06:45:8f:40:c0:5a:07:85:03:0a:c7:35:
1b:05:23:8c:74:3f:7d:9e:45:ef:e2:6d:f8:5c:57:41:5d:aa:
f0:6e:23:c4:6a:e2:ec:6e:62:c2:e5:31:ba:68:32:6c:a4:86:
82:cc:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:15 2026 by rpki-client