Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AniYWzTvj3rrCdEkC8d7lqyxgto.roa
File: AniYWzTvj3rrCdEkC8d7lqyxgto.roa (raw, json)
Hash identifier: odG+2098wyUNBEgEtRjVyrGOp7jf6YeYyK8nFGuvpCI=
Subject key identifier: 02:78:98:5B:34:EF:8F:7A:EB:09:D1:24:0B:C7:7B:96:AC:B1:82:DA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FAD2AF6216E33FA0E601DB6E0407974EA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AniYWzTvj3rrCdEkC8d7lqyxgto.roa
Signing time: Wed 29 Jul 2026 09:18:21 +0000
ROA not before: Wed 29 Jul 2026 09:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198997
IP address blocks: 5.175.246.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:2a:f6:21:6e:33:fa:0e:60:1d:b6:e0:40:79:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 29 09:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0278985b34ef8f7aeb09d1240bc77b96acb182da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:7c:9c:dc:48:df:21:ab:8c:75:26:a2:6a:
51:b4:8f:98:8e:b9:33:e0:7b:ca:24:2d:ab:99:e8:
92:1f:56:14:bd:79:6b:04:f1:a9:ba:2e:a2:b1:ea:
58:41:c3:2b:8b:4d:91:c9:b8:3d:cd:5f:b5:a1:f3:
2e:c9:a0:62:78:eb:aa:4a:cd:43:ed:45:78:0f:57:
00:f9:86:70:ad:6b:19:13:b6:ea:a5:a5:7f:82:84:
98:0e:60:93:76:2e:4a:bf:10:ae:03:f7:1b:3a:2a:
9b:22:bb:e8:06:bd:91:15:aa:f3:c3:a8:02:a6:e2:
cc:ce:63:f9:35:9f:2a:d1:eb:0d:ea:d3:83:8c:cd:
6d:d0:87:3b:7b:56:c8:af:20:b1:f4:16:a3:29:19:
8c:08:26:1a:2e:57:05:87:03:d6:76:84:01:fd:ae:
48:e3:b8:5e:3c:7d:68:b6:b9:67:37:ce:57:04:a7:
ad:31:71:cb:2a:30:b9:9e:81:78:28:fc:87:ea:cd:
08:78:58:f1:d4:1f:92:68:21:a7:03:d5:3c:78:d7:
3f:ce:b8:32:5d:f1:5d:cd:24:e0:a4:d3:90:e5:03:
46:fa:f0:62:de:84:47:cd:18:ec:10:f8:e9:e2:a8:
44:0a:01:70:b9:3e:b1:58:a3:88:e7:ee:81:e3:6d:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:78:98:5B:34:EF:8F:7A:EB:09:D1:24:0B:C7:7B:96:AC:B1:82:DA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AniYWzTvj3rrCdEkC8d7lqyxgto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.246.0/24
94.249.252.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:3e:c1:81:e5:99:21:67:48:57:1f:2f:3f:a3:c3:53:66:30:
05:59:9b:6c:6d:d0:4b:46:c5:a0:92:b3:fa:a9:9a:0f:b2:85:
c4:d9:73:ed:c1:eb:ae:5c:62:79:5a:36:87:4d:c2:87:99:dc:
a0:de:1f:77:41:d5:a0:3c:c6:6c:e7:4f:3d:62:d6:c7:25:b0:
7c:98:77:b1:d2:56:7a:8f:ce:da:68:96:dd:8b:4b:d1:6c:e6:
71:64:f1:20:af:4c:24:23:75:78:ac:ab:47:c2:f4:ac:08:d6:
33:f3:16:7e:2d:dd:17:c7:1f:0d:fd:e7:4e:a4:c1:93:b4:c7:
45:79:63:4a:f8:cf:da:6f:df:93:e1:f7:f3:7e:8b:10:56:ca:
87:37:e3:29:9c:15:b7:7f:2a:64:90:e0:6f:a7:af:c2:c5:1a:
72:91:f7:22:95:e6:6a:f5:50:1c:d9:53:b1:c4:f7:c1:7a:7e:
1e:0c:06:5a:8b:d8:47:94:c8:a4:0e:46:0f:36:47:58:71:74:
88:58:a7:2c:1a:c1:ea:e4:23:f4:83:bc:23:fe:fb:28:22:69:
c7:80:f0:8a:8d:44:36:d0:0d:89:fe:80:58:69:aa:34:20:9f:
06:59:2b:a2:0c:bb:33:69:42:65:51:63:26:5f:d2:b5:8f:f0:
b0:11:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:44 2026 by rpki-client