Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/36sRmro9C3Qq28wqvmFZXbfQMxA.roa
File: 36sRmro9C3Qq28wqvmFZXbfQMxA.roa (raw, json)
Hash identifier: W7xvbRW3SeYA8f3FYhh7BimhxWEs7PWXMoXEuOhsKiQ=
Subject key identifier: DF:AB:11:9A:BA:3D:0B:74:2A:DB:CC:2A:BE:61:59:5D:B7:D0:33:10
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CACF1B600246B1D516552FE0DF76894ED
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/36sRmro9C3Qq28wqvmFZXbfQMxA.roa
Signing time: Mon 02 Mar 2026 05:07:27 +0000
ROA not before: Mon 02 Mar 2026 05:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207695
IP address blocks: 5.175.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:f1:b6:00:24:6b:1d:51:65:52:fe:0d:f7:68:94:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 05:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfab119aba3d0b742adbcc2abe61595db7d03310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:db:78:d0:90:eb:59:1c:b1:ef:2a:1b:ff:
9e:e1:7a:08:e0:d8:f6:be:ee:0b:1f:d7:b9:57:c3:
dc:cc:67:7d:6b:6b:b8:49:07:f7:63:9d:71:42:d6:
fd:f0:54:16:18:06:60:25:b3:4b:01:e4:e0:76:2a:
18:88:46:59:9d:04:c2:e9:59:38:43:80:a9:ef:53:
f3:a1:24:93:b5:9c:05:11:f4:e1:b2:bb:94:98:37:
30:83:b9:05:d7:4b:dc:60:4a:82:b5:e3:14:df:72:
09:e4:b5:a1:61:25:d2:31:51:9e:2e:57:af:55:3b:
04:bc:9f:5d:df:92:da:2f:7b:68:ff:e9:51:04:01:
d3:6b:b8:e5:59:c4:10:15:32:d8:e7:45:4f:00:52:
12:2e:da:a1:cd:e5:4d:ff:75:91:37:f1:5f:96:df:
18:05:56:aa:78:93:ff:bf:33:62:b3:82:8f:5e:b9:
0d:54:de:cc:7e:67:e4:b5:5a:bc:9c:11:90:0a:74:
17:76:23:a4:07:45:a5:aa:cf:da:95:c7:7c:d1:27:
4d:a3:12:49:be:74:a2:9f:28:81:ca:75:1e:0d:62:
a6:21:3b:a6:a1:c3:d4:f8:65:5a:3f:cf:75:90:a8:
af:05:04:1d:f0:17:67:4b:5f:73:22:1e:ae:b7:bd:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:11:9A:BA:3D:0B:74:2A:DB:CC:2A:BE:61:59:5D:B7:D0:33:10
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/36sRmro9C3Qq28wqvmFZXbfQMxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b0:07:af:77:df:10:be:01:81:59:e0:bb:47:b8:63:81:1e:
5f:ba:ff:78:79:56:97:3e:de:03:a2:72:c9:ef:4e:4e:61:ad:
5c:70:bf:f4:01:c9:33:c2:d7:32:0f:46:13:94:6c:90:d7:41:
66:e2:42:25:ab:1c:a2:07:4b:b4:58:0f:e8:bb:35:19:bb:ac:
80:30:d5:c8:2b:0b:cb:1f:e9:62:25:39:c7:af:86:05:07:a8:
21:0b:c4:8e:f3:8e:75:16:27:2c:20:42:cf:5e:f0:2a:e4:f2:
7e:67:6b:fd:1e:ef:8f:b5:f9:19:8c:5b:42:d7:cd:13:c9:aa:
61:2f:81:b9:c2:fb:a5:a0:fa:6b:e6:13:18:a8:ba:51:ea:8f:
cc:59:86:90:37:80:ac:a9:9e:77:0b:75:68:05:c0:8f:c0:ab:
08:e1:d4:4b:70:06:a4:b1:e1:b2:e7:cd:15:06:49:46:20:39:
a7:ce:fc:9f:f4:fe:b9:b4:bb:78:df:1e:ba:04:45:0d:ac:32:
58:7e:1a:ac:7c:95:d6:0e:63:bc:d0:50:b7:b9:f8:33:36:26:
04:f4:64:de:f8:52:4e:fe:2d:5b:72:41:5a:4c:de:1e:2c:96:
ff:e6:56:0a:e8:87:61:1a:cd:f8:3d:8a:a2:eb:a4:0b:69:fc:
2e:8d:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:14:07 2026 by rpki-client