Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rdKpguU7kACk5GpI_iB7-zbNSM4.roa
File: rdKpguU7kACk5GpI_iB7-zbNSM4.roa (raw, json)
Hash identifier: 0/Cx9KlPlS+fVIyfYIRSMaxl2sEoaH3PptrJJxkd8N4=
Subject key identifier: AD:D2:A9:82:E5:3B:90:00:A4:E4:6A:48:FE:20:7B:FB:36:CD:48:CE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D8AF3C520B63EA27198F72FB558DB504A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rdKpguU7kACk5GpI_iB7-zbNSM4.roa
Signing time: Tue 14 Apr 2026 07:45:24 +0000
ROA not before: Tue 14 Apr 2026 07:45:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:f3:c5:20:b6:3e:a2:71:98:f7:2f:b5:58:db:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 07:45:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=add2a982e53b9000a4e46a48fe207bfb36cd48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:1f:9b:f7:ce:7d:0c:08:0b:28:8d:86:3a:
bc:c4:6e:3b:cd:d0:32:5c:93:8a:c6:1b:c8:cf:89:
7d:4f:ce:16:fb:a7:22:9f:80:e2:c7:be:79:8e:e2:
4f:10:1a:04:94:50:27:4d:f4:9c:46:9a:49:0e:6e:
72:9b:89:ba:97:cf:41:43:f4:bc:22:4a:5c:60:66:
76:e5:f0:7e:ce:10:a6:23:4f:fb:c8:01:87:a3:e7:
aa:7f:29:2c:c2:9f:ee:c2:3a:66:5f:9f:8e:ab:8a:
7d:a1:8e:b7:ad:09:d1:5f:3f:b7:53:c5:fa:e0:9d:
5c:fe:0c:59:47:c7:e9:56:91:d0:03:1c:4b:20:38:
49:a4:bf:ee:1b:74:e1:a0:67:6f:d2:62:73:11:66:
e7:cf:e4:63:92:10:52:c1:cd:76:e7:78:26:fc:b8:
6d:6e:d7:2f:a0:ba:df:78:8a:58:98:bd:7b:97:88:
b1:54:f9:f2:82:43:5c:da:df:02:51:09:15:62:eb:
84:d4:69:13:9c:31:96:1c:f2:a2:32:dd:f9:b4:7e:
ab:59:fc:04:07:33:4c:87:a2:29:4a:8b:77:13:6a:
fc:0f:83:35:b7:c2:59:af:f9:aa:13:2f:f9:94:70:
56:06:47:41:5a:c3:e1:c6:be:29:ae:c1:e8:45:1c:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:A9:82:E5:3B:90:00:A4:E4:6A:48:FE:20:7B:FB:36:CD:48:CE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rdKpguU7kACk5GpI_iB7-zbNSM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:a1:be:5a:bf:f5:d5:1e:cf:bc:0c:fb:48:6e:2c:a8:62:e0:
98:6b:54:c5:20:5b:d1:24:01:21:34:c3:e4:67:3f:2b:10:e1:
64:43:5e:f6:40:d3:2a:da:1d:95:9f:24:43:6a:c4:f0:cb:b6:
4e:58:e7:f7:1d:61:fe:52:b8:4f:ad:b7:e5:d3:35:a0:f7:f5:
94:90:80:65:33:80:36:78:3b:ae:37:87:d5:08:96:68:8d:db:
a1:8b:25:de:b1:1d:08:64:3e:1d:a7:dc:98:68:5d:cc:7b:7d:
f0:d3:b8:3e:80:da:ce:d6:a4:cb:95:70:70:96:0c:9f:4d:c3:
55:16:c0:45:0a:ad:08:c8:a7:3c:b9:40:c3:58:c9:92:c3:2f:
db:67:14:03:3f:30:e0:c9:43:83:da:0b:34:a0:4d:ab:67:fc:
55:07:a9:06:b1:7d:d3:80:f8:a9:75:f8:56:f1:bb:1a:31:b4:
23:c8:a8:d5:0b:fb:51:2c:4c:84:1a:e5:01:ef:7a:10:1a:02:
c6:8b:1e:30:2d:c4:ed:4d:60:e3:48:d6:bb:6b:80:24:0f:10:
96:bb:f0:6e:92:77:e5:3c:1b:5a:0d:0a:76:b5:d6:ab:51:b0:
21:b7:fb:98:15:71:9b:cd:12:dd:83:b0:2a:b4:b2:1d:9a:0e:
f5:46:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:43 2026 by rpki-client