Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/96SRTL7GMEXpBYtZwHTCqFkv7MI.roa
File: 96SRTL7GMEXpBYtZwHTCqFkv7MI.roa (raw, json)
Hash identifier: WKybMml2lXg6jPZPs58yVxWURCsVX7cbHRc/dOdpmHE=
Subject key identifier: F7:A4:91:4C:BE:C6:30:45:E9:05:8B:59:C0:74:C2:A8:59:2F:EC:C2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E42BDD407F1D786F338FBDFCC022A4160
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/96SRTL7GMEXpBYtZwHTCqFkv7MI.roa
Signing time: Wed 20 May 2026 00:16:37 +0000
ROA not before: Wed 20 May 2026 00:16:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208476
IP address blocks: 5.175.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:42:bd:d4:07:f1:d7:86:f3:38:fb:df:cc:02:2a:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 20 00:16:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a4914cbec63045e9058b59c074c2a8592fecc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:03:39:93:a4:c2:14:65:e7:99:76:f7:88:
4c:26:a9:a4:16:96:48:54:8c:75:e2:4d:1c:bc:0d:
e9:47:4a:5c:da:a9:02:fe:4f:e4:6c:cc:67:b4:42:
6f:7f:0e:b8:05:d3:3c:68:55:d4:4d:43:7a:ee:09:
63:5b:34:fd:f1:85:be:f4:d5:d1:db:c4:15:b6:cb:
de:77:04:67:28:5c:69:28:7f:f8:a9:18:a0:23:1d:
11:5d:d1:ed:82:ea:d8:b7:3d:9f:03:a9:79:3f:af:
1c:8a:10:a5:8a:90:7e:cf:ee:41:a6:92:bc:3c:fa:
75:8e:45:76:3e:6b:ab:36:89:ef:0a:71:f9:87:99:
64:0c:d1:46:f0:23:bd:85:c8:8e:65:44:60:1b:d5:
3f:93:f4:c1:58:c1:b7:9f:42:3a:33:f9:3c:6e:1f:
67:bf:ca:e6:a3:c8:c4:cf:5c:e0:92:23:7f:a9:3d:
7e:c3:7b:40:b4:24:f2:7d:65:46:23:55:54:ba:f5:
af:ee:6f:60:34:e9:6b:57:4b:fe:68:0e:83:36:0d:
57:96:45:56:30:c4:40:9d:fa:c2:59:b1:86:3f:93:
fb:c5:6a:3c:12:30:11:b0:4e:12:9b:5b:5d:43:91:
33:e3:54:a0:2d:32:b5:06:d1:3d:da:51:11:34:79:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A4:91:4C:BE:C6:30:45:E9:05:8B:59:C0:74:C2:A8:59:2F:EC:C2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/96SRTL7GMEXpBYtZwHTCqFkv7MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:04:25:b6:59:5a:75:e9:84:15:52:02:15:0e:60:7a:7a:15:
87:9b:50:f1:ee:48:00:ec:04:83:cc:23:1f:1a:3c:7e:50:79:
79:ba:d2:e6:ec:8e:cc:72:b8:f7:11:98:c0:40:f7:83:06:07:
c0:82:0d:40:97:6d:77:ac:de:20:64:98:4a:26:c6:ae:e1:11:
10:3d:ad:df:5c:37:47:48:d1:08:35:3b:a9:1d:2e:18:96:81:
28:79:eb:7c:40:e7:d9:8d:cf:70:3a:3d:c2:c3:ac:b7:f3:86:
f1:39:76:2e:45:99:af:d7:d9:0e:c9:4c:09:a6:e7:43:66:39:
b6:6c:9c:66:08:8b:99:96:e3:ee:1a:b6:ff:c5:7d:bf:87:70:
a0:d2:ba:fe:1d:72:78:53:cb:d5:97:85:83:eb:58:57:9e:44:
e7:08:8c:90:91:b7:95:cb:d6:fb:68:e5:b2:eb:ba:04:63:0e:
0d:62:25:b3:10:d4:f6:2c:c3:a5:24:bb:fd:44:02:d2:17:ff:
be:e8:d3:7c:74:ea:8f:1c:70:87:76:e6:e5:90:26:e5:b4:c2:
49:db:53:32:22:42:58:5c:12:4c:e2:f3:cc:c7:e3:57:23:4e:
f8:1a:ca:2c:fe:95:ed:32:07:13:24:cd:8e:41:a7:c9:6a:2c:
3c:85:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:26 2026 by rpki-client