Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lXvQBxC5WXomBqOY05JlGwrdXPw.roa
File: lXvQBxC5WXomBqOY05JlGwrdXPw.roa (raw, json)
Hash identifier: vbXNQyQKpEy2ypO0aZI2EvnB4ZXp29a4IGwDnAsxpRM=
Subject key identifier: 95:7B:D0:07:10:B9:59:7A:26:06:A3:98:D3:92:65:1B:0A:DD:5C:FC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C8E9D1E438E729ADB36CF08477FFF595B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lXvQBxC5WXomBqOY05JlGwrdXPw.roa
Signing time: Tue 24 Feb 2026 07:46:27 +0000
ROA not before: Tue 24 Feb 2026 07:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200275
IP address blocks: 5.231.122.0/24 maxlen: 24
5.231.127.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:9d:1e:43:8e:72:9a:db:36:cf:08:47:7f:ff:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 24 07:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=957bd00710b9597a2606a398d392651b0add5cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:b7:54:15:08:cf:e0:4e:85:92:d6:ac:8f:
dc:ea:1b:46:0b:6a:76:72:ac:64:aa:0b:d5:23:f4:
93:e5:95:81:5e:51:73:9e:c3:72:a9:10:81:de:e2:
40:07:ce:4c:d7:0b:36:25:1e:39:0a:b7:ba:3a:71:
de:61:3e:47:b4:27:9c:34:71:fe:6a:20:17:d7:38:
64:74:99:14:36:82:03:29:88:f1:93:6d:66:6d:46:
4e:b0:32:4d:17:ac:5d:88:8b:09:11:0c:98:fa:e4:
24:74:3c:56:1f:bb:df:98:2c:ca:dd:f5:5f:f0:a1:
d9:d3:4c:38:8a:24:58:d8:0f:9a:e4:e6:d8:98:5c:
d3:64:31:2b:55:5a:63:55:46:8c:cb:37:71:19:22:
56:d5:f8:62:4f:7e:2a:ac:c0:59:bc:b0:d5:d0:cd:
83:1a:57:b5:0f:c7:a8:cd:05:7b:32:0f:c0:37:47:
a2:04:1c:40:3d:02:ae:c5:12:2d:ae:43:dd:38:12:
17:6c:33:28:cb:1b:c4:0a:d9:40:f9:51:26:59:60:
f0:49:03:49:bc:51:ba:09:52:fb:52:f6:56:3c:6b:
27:dd:65:c3:c7:db:66:ae:fa:52:76:49:53:0c:e3:
c9:32:bd:46:de:59:a4:6b:c3:4c:61:a3:63:f0:51:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:D0:07:10:B9:59:7A:26:06:A3:98:D3:92:65:1B:0A:DD:5C:FC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lXvQBxC5WXomBqOY05JlGwrdXPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.122.0/24
5.231.127.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8b:41:ac:77:55:db:f0:03:ee:98:71:b7:58:df:8a:4d:fa:
61:4b:a0:71:74:a7:f4:5a:3f:7e:79:92:d2:0f:0a:79:77:b4:
02:24:d6:0c:68:74:60:e9:c4:f3:a6:fd:3b:65:2b:13:68:c2:
b2:43:e3:ea:3d:a7:c4:8d:53:06:7d:36:10:9c:ef:77:e1:83:
3c:74:3f:7e:3b:18:a4:31:5f:fc:e0:6b:c9:33:81:bc:5f:67:
5d:3b:24:a5:01:90:44:66:85:80:51:df:65:6f:be:9e:38:8e:
2e:84:55:bc:51:fb:0c:9b:17:1a:5b:5b:d2:01:2b:de:7e:2a:
82:f6:b2:9b:73:53:14:79:24:c4:e9:7a:05:c2:09:ac:9b:fd:
93:37:87:a9:03:fb:51:ee:ef:f2:a2:3d:70:1c:32:ee:d0:fc:
7d:94:d8:d6:ca:0f:e8:36:b9:46:3a:5f:dd:4c:54:c8:af:2a:
d3:c4:7a:68:92:c3:00:f8:b8:33:d7:1a:cd:7f:f6:49:c4:86:
cd:85:ce:93:d6:c5:67:1e:6c:6c:45:37:f3:84:19:20:3a:b7:
a0:ed:a6:6e:6b:48:78:d9:b4:89:f1:79:eb:48:40:1f:56:3f:
72:3b:08:1c:ea:09:a9:79:c4:0d:aa:98:58:55:fb:b1:fa:15:
cb:8f:34:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyOnR5DjnKa2zbPCEd//1lbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjI0MDc0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdiZDAwNzEwYjk1OTdhMjYwNmEzOThkMzkyNjUxYjBhZGQ1Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNy3VBUIz+BOhZLWrI/c6htGC2p2
cqxkqgvVI/ST5ZWBXlFznsNyqRCB3uJAB85M1ws2JR45Cre6OnHeYT5HtCecNHH+
aiAX1zhkdJkUNoIDKYjxk21mbUZOsDJNF6xdiIsJEQyY+uQkdDxWH7vfmCzK3fVf
8KHZ00w4iiRY2A+a5ObYmFzTZDErVVpjVUaMyzdxGSJW1fhiT34qrMBZvLDV0M2D
Gle1D8eozQV7Mg/AN0eiBBxAPQKuxRItrkPdOBIXbDMoyxvECtlA+VEmWWDwSQNJ
vFG6CVL7UvZWPGsn3WXDx9tmrvpSdklTDOPJMr1G3lmka8NMYaNj8FFe+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJV70AcQuVl6JgajmNOSZRsK3Vz8MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbFh2UUJ4QzVXWG9tQnFPWTA1SmxHd3JkWFB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABed6AwQA
Bed/MA0GCSqGSIb3DQEBCwUAA4IBAQCBi0Gsd1Xb8APumHG3WN+KTfphS6BxdKf0
Wj9+eZLSDwp5d7QCJNYMaHRg6cTzpv07ZSsTaMKyQ+PqPafEjVMGfTYQnO934YM8
dD9+OxikMV/84GvJM4G8X2ddOySlAZBEZoWAUd9lb76eOI4uhFW8UfsMmxcaW1vS
ASvefiqC9rKbc1MUeSTE6XoFwgmsm/2TN4epA/tR7u/yoj1wHDLu0Px9lNjWyg/o
NrlGOl/dTFTIryrTxHpoksMA+Lgz1xrNf/ZJxIbNhc6T1sVnHmxsRTfzhBkgOreg
7aZua0h42bSJ8XnrSEAfVj9yOwgc6gmpecQNqphYVfux+hXLjzRQ
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:58 2026 by rpki-client