Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D03CSeDCsGAwzIAZ2VaHdgCyDtY.roa
File: D03CSeDCsGAwzIAZ2VaHdgCyDtY.roa (raw, json)
Hash identifier: oAIvXzURBHub4GF/iVoAkR7DsV440/yL2chDn+0B6fw=
Subject key identifier: 0F:4D:C2:49:E0:C2:B0:60:30:CC:80:19:D9:56:87:76:00:B2:0E:D6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A11E7C539F903EF2BD05E1AA49DC1095F0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D03CSeDCsGAwzIAZ2VaHdgCyDtY.roa
Signing time: Fri 09 Oct 2026 02:27:06 +0000
ROA not before: Fri 09 Oct 2026 02:27:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214598
IP address blocks: 5.175.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:7c:53:9f:90:3e:f2:bd:05:e1:aa:49:dc:10:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 9 02:27:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f4dc249e0c2b06030cc8019d956877600b20ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:dc:ab:63:66:2f:88:02:43:92:a0:57:ba:
e9:96:0b:b6:70:3d:63:bc:9e:f4:1e:a6:22:05:9c:
1f:0b:97:e3:51:cd:3d:2d:5a:77:22:4a:a5:71:8d:
ea:8b:07:9d:c3:8f:3a:e4:51:4d:11:a4:a3:b1:31:
41:5f:7f:a4:e0:3d:a3:a1:83:81:e7:c9:be:c5:17:
e0:38:3c:1c:36:8f:92:bd:09:b0:50:ed:88:01:1a:
dd:29:90:f6:1e:c5:69:e8:80:34:06:e5:18:cb:25:
80:60:12:e9:37:36:c6:50:7b:76:ad:98:2a:45:e3:
48:b9:94:c5:7a:54:3c:0f:61:47:e9:c4:1d:67:b5:
e8:d6:af:58:87:7a:c0:88:65:19:e3:9e:a9:7a:54:
86:54:8e:1d:f5:54:48:09:14:a0:e6:43:5d:ce:d8:
22:79:a1:55:7f:23:91:36:94:e5:99:db:b5:00:e9:
2a:4c:0f:22:4c:e6:bb:a3:9e:3c:6e:b1:c5:7c:db:
c1:b0:59:d9:ba:4f:1d:52:52:59:c3:1b:30:40:b5:
a3:8c:c2:bb:99:9c:71:37:c8:d2:69:bd:3b:95:52:
da:a3:90:a8:17:be:38:28:06:bc:61:6f:82:62:b0:
16:d2:a6:39:b5:0c:fd:66:99:8d:77:67:d0:91:04:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:C2:49:E0:C2:B0:60:30:CC:80:19:D9:56:87:76:00:B2:0E:D6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D03CSeDCsGAwzIAZ2VaHdgCyDtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:46:6f:97:8a:0b:82:22:1b:53:fb:8c:6b:03:56:02:21:be:
29:db:ba:da:4d:df:c7:f7:53:21:57:3d:b0:79:93:55:cb:e4:
17:84:6e:f9:51:e4:0e:f1:b8:52:b8:ef:6f:e3:a7:5f:c6:93:
8d:63:e2:ff:ef:23:14:bd:b2:dd:28:67:a6:fc:14:19:c9:9b:
b8:60:38:e0:f9:26:87:6b:35:01:94:bc:98:2f:60:bf:bf:01:
bc:98:2e:d7:0e:f6:16:cd:c1:b3:98:da:17:f5:e4:38:77:93:
82:66:b5:f5:b2:fd:93:3d:bf:9d:0e:80:3d:a5:d2:87:97:69:
85:c0:10:c4:21:ce:51:45:32:7b:cb:b6:c8:24:2e:df:ce:e9:
5e:5e:b3:76:c3:15:be:78:b7:54:4f:92:04:da:fc:1f:dc:8f:
10:f1:75:9f:1f:85:88:2d:32:3d:08:1b:5e:85:bf:a0:87:f5:
6b:b1:21:28:f9:f6:a1:35:2f:d4:d5:b7:61:7e:ab:2f:a6:ed:
97:40:14:92:a5:58:e1:5c:dd:d4:9a:0a:38:8f:ed:e2:c6:f2:
6d:9a:9f:88:a3:22:95:43:20:41:34:58:78:b2:73:ac:90:a6:
7b:3c:ee:c8:7b:7f:c6:a8:f4:98:f1:fd:e3:9f:b3:c7:95:4c:
74:70:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:45 2026 by rpki-client