Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2lbuDd9FT9Vbl_qA9mAsRlgja9U.roa
File: 2lbuDd9FT9Vbl_qA9mAsRlgja9U.roa (raw, json)
Hash identifier: /e6/92tzCvQhwGf9ss1mKrkBgS7wUGm0BGqz1wPFXew=
Subject key identifier: DA:56:EE:0D:DF:45:4F:D5:5B:97:FA:80:F6:60:2C:46:58:23:6B:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A032AAC9D71AEE86F9E0A4A22B3DAAD91E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2lbuDd9FT9Vbl_qA9mAsRlgja9U.roa
Signing time: Mon 24 Aug 2026 07:27:28 +0000
ROA not before: Mon 24 Aug 2026 07:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:aa:c9:d7:1a:ee:86:f9:e0:a4:a2:2b:3d:aa:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 07:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da56ee0ddf454fd55b97fa80f6602c4658236bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:99:38:28:0a:de:a7:54:fd:7c:18:d6:f4:
c0:8b:74:8e:a0:a9:b2:f5:db:f9:7a:02:7a:a3:aa:
8a:37:90:86:34:88:5f:1c:66:39:d5:c3:f0:5a:57:
83:f3:8a:74:bb:d4:8e:fe:92:9c:80:3d:eb:c9:68:
9e:7a:cb:20:59:33:50:e6:da:52:98:5e:a9:89:b7:
d5:46:41:48:4a:13:24:26:5b:10:b7:d3:6e:24:b3:
17:90:8f:f8:e4:d1:6a:db:23:6c:2e:3e:44:dd:fa:
f0:e4:cb:b2:45:41:0e:05:d1:39:ea:dd:74:9b:fc:
aa:5a:53:4b:74:31:e8:6e:73:a9:32:6f:6b:10:82:
d2:dc:4b:fd:9e:ae:36:24:d6:f8:0e:be:c2:05:4a:
2e:9d:c0:14:36:1a:a6:3a:c0:db:e6:81:da:21:99:
6b:f6:b7:4d:8a:f6:30:eb:74:5e:2f:7e:7f:f8:c9:
0c:8c:d2:7c:cb:77:1f:dd:b0:f6:d2:f0:54:3d:c0:
75:85:c6:1a:0d:e5:75:7f:c9:2b:d0:c0:70:2c:c1:
36:56:17:33:76:c8:03:0a:31:01:ec:4c:5e:85:25:
88:b4:22:e3:2d:94:0c:e3:c2:f2:66:c2:be:de:e6:
f7:79:00:1b:6f:df:fe:26:50:55:f3:5b:1b:71:27:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:56:EE:0D:DF:45:4F:D5:5B:97:FA:80:F6:60:2C:46:58:23:6B:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2lbuDd9FT9Vbl_qA9mAsRlgja9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2e:e2:dc:87:e7:40:3c:7d:8a:48:5e:7c:79:25:0b:f9:00:
40:9d:78:d3:3a:3b:13:10:3b:fb:8c:a4:ba:e4:c1:a9:62:62:
a9:f9:9f:72:5f:97:7a:92:c6:47:ce:b0:48:b1:07:ae:e7:3f:
c3:96:fe:bc:2e:ab:db:2c:05:b3:8c:89:4d:1c:ef:e5:2b:b2:
e4:7a:65:e5:32:fb:2b:c4:c9:d1:4a:4b:27:f4:2e:cd:fa:c0:
9f:36:ef:09:55:11:17:ad:41:3b:4a:7e:b6:5c:de:42:3c:c6:
59:38:5d:1d:48:8e:70:27:d8:ec:89:91:b4:91:6a:40:13:4b:
81:16:19:e7:75:26:18:fc:c5:9d:3e:dc:ed:ef:90:08:cc:31:
72:79:14:cc:f0:8d:69:c6:1a:dc:af:30:d4:e8:99:f7:bf:2a:
40:5e:94:0b:71:9c:b5:6c:4f:1e:40:91:39:bc:f9:49:5c:8a:
7c:7a:13:b4:b2:cb:95:43:44:2b:b3:c6:00:c2:85:88:e7:c1:
e7:63:22:80:82:09:e3:92:8d:cb:75:af:87:c6:8b:c2:dd:e3:
27:0e:0a:21:b8:d3:a9:13:2d:cc:48:98:73:eb:c6:9b:ff:70:
18:1a:c2:24:01:01:bb:6b:8e:40:5c:bf:f7:3b:4d:35:43:fa:
e3:cc:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:44 2026 by rpki-client