Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3e0_zWbCtOj4YdUBSSmvJVRlgTg.roa
File: 3e0_zWbCtOj4YdUBSSmvJVRlgTg.roa (raw, json)
Hash identifier: uyTjgeDzp81YJc867vpkBbEc/zeF8Bt25W6vte4YdD8=
Subject key identifier: DD:ED:3F:CD:66:C2:B4:E8:F8:61:D5:01:49:29:AF:25:54:65:81:38
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A180E57E09301ED9F94871C04280C24431
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3e0_zWbCtOj4YdUBSSmvJVRlgTg.roa
Signing time: Wed 28 Oct 2026 05:04:45 +0000
ROA not before: Wed 28 Oct 2026 05:04:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 5.175.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e5:7e:09:30:1e:d9:f9:48:71:c0:42:80:c2:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 05:04:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dded3fcd66c2b4e8f861d5014929af2554658138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:ca:26:71:f8:22:89:ee:29:99:e8:5d:74:
ff:09:80:05:31:60:82:39:a1:e2:d2:2b:2d:99:18:
ca:a1:24:4d:f6:7d:ec:0b:32:08:af:c9:18:56:5e:
3d:d2:d1:a7:91:0d:c6:24:14:60:fa:60:23:9e:9e:
37:2c:f6:bb:27:e0:0f:70:bf:ba:9d:25:5c:e6:a8:
05:46:5b:2f:28:92:46:b7:7c:30:1e:47:9a:0a:62:
dc:16:54:4e:54:64:76:f4:29:40:b3:53:ab:ad:01:
f0:47:f2:bc:fa:8f:73:37:7b:f0:ba:b9:73:ff:ac:
42:cc:56:d3:f6:70:91:30:bd:46:c6:ba:d0:a9:36:
55:45:6b:dd:dc:a8:58:3d:b7:38:32:b3:0c:e7:59:
18:e0:48:9e:19:77:04:28:3b:e9:a4:e9:a6:95:58:
fc:ed:52:01:0a:4b:ba:dd:09:b3:99:a5:40:99:70:
cb:9d:a3:2a:08:ab:40:56:18:e1:b5:48:77:08:82:
c1:d5:c6:7a:b5:7e:76:00:19:31:43:fa:eb:39:6a:
4b:f8:0c:87:7b:63:c7:a4:0a:5d:76:28:7e:0d:47:
70:60:1a:eb:e5:13:0c:28:93:6c:6c:c4:ab:8f:a0:
06:1e:a6:ce:50:77:72:30:7d:c2:d2:1e:94:5e:c8:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:3F:CD:66:C2:B4:E8:F8:61:D5:01:49:29:AF:25:54:65:81:38
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3e0_zWbCtOj4YdUBSSmvJVRlgTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9e:99:b8:53:4f:26:ec:7f:ad:ec:a4:ae:c4:81:00:1e:cb:
85:04:3b:bd:7f:28:34:0e:d0:67:05:45:3a:ab:86:55:8a:56:
6b:5b:84:2a:7a:be:2f:c5:f1:2a:04:29:79:32:58:e4:d5:33:
f9:e9:b8:37:9d:0e:72:9c:95:10:3b:2b:85:1a:ae:ab:ed:39:
0c:55:34:3c:40:4f:5a:18:7c:36:16:e1:4f:6f:5f:23:bb:2f:
43:3c:d6:75:19:88:95:6b:6e:83:6f:8e:b0:2a:e3:2d:7d:94:
45:b0:5d:ed:81:c7:79:0e:9c:9e:3f:c4:86:11:f4:36:83:98:
93:86:17:21:0e:f7:01:54:b8:da:30:1b:a7:70:58:f6:1e:d0:
c1:1e:82:b3:08:f4:b6:ea:56:4a:b1:85:06:60:74:a0:89:cd:
54:2e:ed:7d:9d:cc:c0:bc:ac:de:d0:15:73:91:68:58:ef:e7:
6d:b3:ba:92:22:ab:b2:4c:95:fe:99:d0:1d:11:c0:c1:3c:18:
ec:98:b9:a7:0e:b1:c8:85:3e:22:6d:af:2a:17:1d:2e:c9:0b:
81:86:25:81:05:31:9c:39:63:97:93:52:04:3c:95:3f:3c:7a:
01:a0:1d:e6:61:54:70:ff:7a:4d:25:60:49:c6:c8:15:84:7f:
6a:8e:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 23:51:24 2026 by rpki-client