Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4AX0d-3lP--hW3fylQ_h8tk5zbo.roa
File: 4AX0d-3lP--hW3fylQ_h8tk5zbo.roa (raw, json)
Hash identifier: ujoZr/5BUtPZ1wptbiLfiS7/oG+Jzu8ZvhKNx+I1yuM=
Subject key identifier: E0:05:F4:77:ED:E5:3F:EF:A1:5B:77:F2:95:0F:E1:F2:D9:39:CD:BA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A14335C5216E68B82124303F80F945E1DD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4AX0d-3lP--hW3fylQ_h8tk5zbo.roa
Signing time: Fri 16 Oct 2026 05:35:59 +0000
ROA not before: Fri 16 Oct 2026 05:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200456
IP address blocks: 5.175.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:35:c5:21:6e:68:b8:21:24:30:3f:80:f9:45:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 16 05:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e005f477ede53fefa15b77f2950fe1f2d939cdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:df:c3:b4:e6:17:3b:6e:45:07:6f:03:9a:a7:
ff:04:3f:93:98:a6:5e:3b:5f:e1:40:e8:43:8c:ba:
cb:c9:0e:a3:db:82:a9:56:91:66:b8:3d:d5:3e:75:
bf:6a:d1:7c:59:0a:50:74:c3:af:84:3e:63:34:df:
b9:4a:1e:9a:59:9a:0f:a0:94:ca:42:25:1e:49:37:
36:91:8c:45:48:33:b9:47:92:85:f9:11:d7:c4:6a:
18:da:4d:5a:4d:c3:d9:b5:94:ca:40:bd:97:ca:21:
27:96:43:2e:21:48:d3:20:d5:bb:1f:db:2c:d6:e5:
ed:9c:5c:25:ce:1c:75:d3:b9:48:9c:fd:c8:ab:e4:
22:b8:2b:5a:d6:ca:08:f3:ce:52:3f:4f:31:35:e4:
7d:24:2f:60:45:e3:5a:d4:a4:5b:0e:c6:84:75:3b:
ff:53:17:e2:78:61:94:10:c0:1a:f1:e9:70:d9:47:
03:2e:cc:86:3e:dc:24:f4:e5:c8:68:d6:1a:1f:24:
08:b7:4f:32:ad:64:c8:52:63:ac:e7:95:a4:14:99:
15:1f:aa:69:09:a6:c5:d7:c8:76:d8:f9:a8:56:f0:
cb:ad:1c:86:61:22:df:fc:10:30:17:ca:20:e5:af:
37:5f:fd:1a:44:ab:f3:fe:f6:d7:16:54:40:74:56:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:F4:77:ED:E5:3F:EF:A1:5B:77:F2:95:0F:E1:F2:D9:39:CD:BA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4AX0d-3lP--hW3fylQ_h8tk5zbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0e:e4:be:5f:c9:13:31:37:38:4c:70:44:41:de:ef:58:85:
28:a7:39:a0:84:5b:78:8c:f5:c4:03:c1:f1:4d:ae:8b:38:07:
1d:d6:fa:13:29:cf:ee:ad:50:84:54:e3:86:08:34:7a:cd:a8:
bd:67:df:ab:d0:05:22:0b:4f:cf:27:e7:1e:9b:f0:48:aa:ae:
c0:fe:a4:c3:da:34:ba:30:6b:82:96:d4:f5:16:ea:23:49:63:
a3:d5:78:f9:59:51:28:30:db:d5:a5:99:8a:78:d3:6a:59:c1:
a4:7a:92:bd:b9:e5:ad:1e:a0:d3:25:69:4d:cf:34:61:4b:8a:
1e:3d:68:11:a8:57:66:dd:a3:f3:0d:e7:47:30:74:2f:86:e7:
a1:c3:9b:a8:57:79:ed:ce:a1:d4:26:ef:56:84:2e:fe:2c:01:
20:66:ab:2f:60:25:f7:90:78:3b:5a:38:86:5f:54:87:c4:18:
e3:a7:df:04:c0:78:28:20:aa:61:00:6e:60:fe:50:6b:15:79:
c3:65:f5:22:8f:5e:d4:c7:bd:27:a4:33:bb:97:13:53:0b:2a:
3d:a2:7d:03:a1:c2:63:39:84:09:71:0e:b1:09:4c:ee:41:c8:
1e:95:94:85:7a:65:3d:fb:15:31:b0:47:f7:79:05:3d:dd:3b:
63:d7:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:41 2026 by rpki-client