Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9dU1HAu_-6QWkSvTVFGnTRPbmUw.roa
File: 9dU1HAu_-6QWkSvTVFGnTRPbmUw.roa (raw, json)
Hash identifier: S882YU/tjbhY9RdvI4bS8mhBtxXKLqzQzZ6v5ApePiM=
Subject key identifier: F5:D5:35:1C:0B:BF:FB:A4:16:91:2B:D3:54:51:A7:4D:13:DB:99:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E32D4A83FD78C5A0B3C6BBEA90F575E12
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9dU1HAu_-6QWkSvTVFGnTRPbmUw.roa
Signing time: Sat 16 May 2026 22:07:37 +0000
ROA not before: Sat 16 May 2026 22:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30893
IP address blocks: 5.175.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:d4:a8:3f:d7:8c:5a:0b:3c:6b:be:a9:0f:57:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 22:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5d5351c0bbffba416912bd35451a74d13db994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:f9:a8:d0:58:5b:0b:8b:72:3b:7f:fc:cd:
f1:74:59:74:c5:cd:06:93:84:03:c4:e1:4f:b1:7f:
c2:1a:6c:3a:71:0c:ee:64:3c:9f:c3:23:0f:d0:c0:
91:4a:c2:c9:53:7c:ef:d9:8b:12:29:a6:f3:ed:77:
d8:54:6d:54:7c:61:db:59:f2:3f:47:7b:7a:31:83:
24:32:47:c3:b2:0b:9c:cc:a7:e7:c7:f8:0e:75:9d:
3e:3b:04:82:c5:a1:78:62:f7:e0:2e:ca:f5:75:f6:
3f:73:99:18:28:95:dc:3b:28:0e:38:ef:aa:87:36:
41:cd:54:c5:22:77:fc:61:af:02:f0:64:47:08:2a:
f5:8d:17:8f:b2:0c:45:d3:77:5d:53:af:56:0a:62:
26:31:db:76:f1:b7:3f:e1:ad:70:23:58:d1:af:f9:
96:f3:2e:7c:72:71:97:28:47:28:3a:16:0f:87:ed:
cc:a3:3d:0f:d1:71:28:d3:40:8b:bf:df:9a:87:3f:
6b:b5:44:5c:94:87:5a:06:d3:0b:27:0c:6f:f8:22:
af:27:d0:9c:29:01:9c:f5:28:76:b3:ab:10:5d:d4:
4e:db:c7:d9:f1:3a:c4:b2:27:fc:39:4a:ab:91:68:
e3:83:d3:b2:4d:65:3d:a1:5a:1c:33:28:f9:06:b0:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:35:1C:0B:BF:FB:A4:16:91:2B:D3:54:51:A7:4D:13:DB:99:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9dU1HAu_-6QWkSvTVFGnTRPbmUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.218.0/24
Signature Algorithm: sha256WithRSAEncryption
04:79:a3:99:9d:f8:85:87:42:3d:2f:30:bb:fd:de:2d:5b:49:
9e:55:f7:76:17:a3:08:42:73:cf:83:5b:d1:4f:61:65:33:76:
29:bb:dc:f8:f7:6e:4d:2b:21:c4:18:d8:f9:90:29:a5:61:32:
d1:4b:69:2d:c9:d6:c3:d5:b5:82:1e:67:4f:b9:5e:33:3a:05:
48:1e:c7:75:c2:ac:b0:a3:03:96:3b:17:5c:d0:19:fb:95:d0:
49:51:b7:8c:01:a5:6e:50:c4:bd:91:a9:bf:d4:f1:e5:be:4c:
26:fd:95:69:a8:31:6b:80:c2:5e:61:1b:b1:73:f0:46:48:bb:
87:86:b7:e6:e9:01:70:8c:ca:a6:b6:07:df:0e:fc:6d:df:bc:
fe:46:93:ce:19:b4:b0:ab:a2:57:6d:57:65:29:62:b8:10:dd:
d2:3d:bd:77:24:61:f2:52:a4:df:b1:35:7c:5c:96:e4:c9:12:
d8:8d:fd:b8:b5:c9:6f:fc:49:18:16:46:d1:f5:04:6b:05:dc:
4a:e7:f6:2e:de:71:e1:2c:40:0b:54:ac:3a:08:2b:53:ba:64:
85:4b:c1:53:12:f7:03:7d:e8:26:0c:67:14:81:da:42:5b:ff:
30:5d:81:cd:f5:bf:a0:a3:a9:df:cd:87:b6:dd:36:9f:8b:e2:
f9:a7:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:09 2026 by rpki-client