Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7qvg_PSKaJYV05QKy8IUAyP7nGY.roa
File: 7qvg_PSKaJYV05QKy8IUAyP7nGY.roa (raw, json)
Hash identifier: QqOZU3pynzYEfhNhM5ywzWbcT5LU4+3taOQbT5vks4k=
Subject key identifier: EE:AB:E0:FC:F4:8A:68:96:15:D3:94:0A:CB:C2:14:03:23:FB:9C:66
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CB0409265551251E00B1250DF77B71B85
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7qvg_PSKaJYV05QKy8IUAyP7nGY.roa
Signing time: Mon 02 Mar 2026 20:32:27 +0000
ROA not before: Mon 02 Mar 2026 20:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 5.175.218.0/24 maxlen: 24
5.175.219.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.41.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:40:92:65:55:12:51:e0:0b:12:50:df:77:b7:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 20:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeabe0fcf48a689615d3940acbc2140323fb9c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:ea:8b:11:4e:21:5b:97:79:8b:d9:d8:c2:
a0:e9:66:fe:fe:a8:63:33:82:07:19:af:3a:a7:f5:
20:43:94:44:d0:88:d3:fc:40:81:d2:38:ad:79:51:
f6:79:93:8c:e1:3b:29:82:03:5e:70:79:c6:a8:f4:
bf:77:ea:e4:59:79:f3:41:b3:48:d7:51:38:ab:e6:
c4:e1:08:68:06:e9:ba:6d:07:7f:ed:35:b5:5e:25:
81:f2:9d:fc:62:d0:24:bc:72:e4:2c:8f:4f:2a:91:
93:98:5b:ef:f3:92:e3:38:bd:a0:7f:77:fa:fb:0f:
6d:d2:5f:bc:80:9a:80:ce:11:ea:d7:1d:bb:e1:85:
53:5e:0f:66:57:b1:fb:ca:41:f0:b4:b2:44:47:c5:
6c:04:07:08:4f:27:48:e1:ee:83:4f:12:ec:4d:3b:
7b:a1:d9:06:a7:f9:8d:cb:0b:96:50:17:48:6e:fd:
1f:af:a3:0b:5a:50:df:85:5f:0d:71:79:d5:2a:4e:
1a:c1:66:e2:c7:d1:99:02:2b:01:36:16:a2:aa:84:
62:58:82:f5:ad:78:2d:06:73:69:b6:b4:96:ed:07:
6f:8c:cc:89:d6:29:ba:26:78:63:5b:9f:05:6c:b2:
0d:cc:47:56:f9:b4:cb:14:85:d4:48:77:44:0c:c6:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:E0:FC:F4:8A:68:96:15:D3:94:0A:CB:C2:14:03:23:FB:9C:66
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7qvg_PSKaJYV05QKy8IUAyP7nGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.218.0/23
5.231.30.0/24
5.231.41.0/24
5.231.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:38:78:6d:9f:90:7a:7f:8d:f7:a8:d8:b3:bb:eb:eb:99:94:
45:c8:1b:68:79:e6:12:4a:12:7d:e5:0a:85:c0:2c:12:48:e0:
d3:10:90:fd:bf:de:c7:00:3b:81:a0:7b:62:21:cd:dd:85:ff:
f8:39:80:43:01:31:30:b1:01:bb:bb:1f:55:e3:47:89:38:48:
c7:a6:c1:c2:ef:53:01:98:3d:fb:71:20:cc:e3:9f:c4:5b:82:
d2:27:3a:9c:30:10:d4:a3:28:c5:43:e5:3b:68:68:df:03:a4:
56:22:71:2c:99:c9:f2:a4:b3:97:11:be:08:5c:de:29:09:53:
da:01:45:47:c3:80:dd:dc:85:38:4a:30:ae:cd:cf:58:f0:f2:
35:38:7a:c6:90:38:cb:1a:94:85:26:fc:4f:10:de:65:7d:42:
80:16:21:eb:ba:1d:f8:d9:f0:44:b6:ee:7c:3f:c8:c4:7c:aa:
3c:42:8c:3d:64:95:17:7a:de:3b:9d:d8:8b:1f:64:9c:03:bb:
2b:47:10:f0:ac:4c:52:aa:e6:5e:e3:e9:48:5b:0e:6d:58:e1:
55:94:83:e3:44:e1:ee:b2:7a:45:e6:ca:f9:5d:a5:15:65:72:
83:a8:98:ad:eb:73:1b:71:26:7b:d0:e1:78:32:74:63:dd:37:
17:40:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:04 2026 by rpki-client