Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EId4C19yVpNus6J21l1u2sWWOGk.roa
File: EId4C19yVpNus6J21l1u2sWWOGk.roa (raw, json)
Hash identifier: 6xnXzEbs6w+TE0U24aepAe0LDeUwuUm5mgBG3Uy3IIg=
Subject key identifier: 10:87:78:0B:5F:72:56:93:6E:B3:A2:76:D6:5D:6E:DA:C5:96:38:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CAFC3245CF3B32F04561770F8F6009A94
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EId4C19yVpNus6J21l1u2sWWOGk.roa
Signing time: Mon 02 Mar 2026 18:15:27 +0000
ROA not before: Mon 02 Mar 2026 18:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55154
IP address blocks: 5.175.128.0/24 maxlen: 24
5.175.185.0/24 maxlen: 24
5.231.36.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:c3:24:5c:f3:b3:2f:04:56:17:70:f8:f6:00:9a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 18:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1087780b5f7256936eb3a276d65d6edac5963869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:d3:3f:7f:f6:b7:36:e9:73:34:ee:c6:6b:
8e:41:b8:1a:43:40:d3:75:dd:0f:87:8b:c7:8d:14:
ce:03:b8:22:6a:81:98:46:e7:53:4a:f7:17:48:fd:
74:b0:7c:5f:33:29:5e:d5:4d:7d:cf:46:28:42:13:
96:f8:c3:47:08:99:a8:c7:80:1d:ac:9b:7c:0e:ea:
ac:8c:a6:77:b3:8e:43:07:24:e2:fb:77:51:ff:4c:
f3:ae:a0:56:36:10:8b:56:18:93:f1:a5:a8:e8:0d:
fa:ec:56:bc:b4:a1:8b:af:5a:a0:0b:bd:28:cc:af:
c0:44:04:4a:4b:55:6d:55:db:d3:73:f0:b5:27:30:
23:3c:68:04:db:fe:c2:dd:77:a1:88:3a:c1:1c:91:
4b:4d:06:27:d3:d7:7b:8e:17:92:48:f8:1b:da:16:
e0:9f:75:0b:52:48:42:27:12:cf:e3:cf:a8:d3:06:
89:5d:83:05:32:2b:31:97:c0:94:fd:cc:3f:58:e9:
bb:68:c0:a0:c2:15:82:85:21:90:f4:52:10:81:05:
93:2e:86:ab:1e:3a:38:1f:6d:76:6e:ed:bc:67:4b:
63:7d:ba:ee:08:36:37:08:ef:2a:d6:e7:1b:64:7e:
41:20:55:19:c5:29:97:2f:d9:be:1c:4c:23:f4:37:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:78:0B:5F:72:56:93:6E:B3:A2:76:D6:5D:6E:DA:C5:96:38:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EId4C19yVpNus6J21l1u2sWWOGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.128.0/24
5.175.185.0/24
5.231.36.0/24
5.231.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e2:0c:94:2a:ae:52:01:fc:d8:a5:64:28:87:a4:3c:40:c9:
37:33:b7:94:0e:6f:95:0c:60:d1:48:79:16:01:df:78:7a:ea:
1b:c8:59:8a:e4:c2:ab:21:fc:84:3e:fd:94:1a:00:1c:cb:c0:
19:ca:88:ac:63:d7:fc:1d:11:8d:f9:14:8b:77:b0:b8:23:c3:
d6:7f:ed:2c:14:f8:8d:d2:14:ab:9a:31:33:79:1b:54:93:5a:
b3:12:5a:16:28:f7:96:10:be:03:21:53:17:97:3b:71:80:eb:
e7:34:4b:ec:fa:5b:f7:e2:d3:6d:40:f3:b8:ca:9e:47:09:fd:
f2:34:4a:50:6e:9f:bd:8e:b9:78:ea:39:29:94:9c:5c:36:34:
c8:51:b1:63:f9:e2:c2:08:03:31:1a:a7:fa:a9:2f:d4:d9:74:
3b:5d:7f:14:89:7a:b5:d6:41:9f:a4:3f:e9:9e:9f:a3:7c:c4:
e4:dc:4a:68:84:7c:3f:b7:b6:77:89:17:f9:a4:19:5e:63:e0:
f3:6b:4d:cd:bc:36:f7:df:56:a6:bb:43:3b:5d:42:5e:b2:84:
1f:8a:7f:40:ad:f8:f3:52:48:74:3c:7d:0e:3c:1b:fd:14:a3:
fa:75:2d:a7:ec:f9:25:06:b3:d9:23:2d:47:ef:4f:b6:bd:72:
79:d0:70:24
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZyvwyRc87MvBFYXcPj2AJqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzAyMTgxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg3NzgwYjVmNzI1NjkzNmViM2EyNzZkNjVkNmVkYWM1OTYzODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9bTP3/2tzbpczTuxmuOQbgaQ0DT
dd0Ph4vHjRTOA7giaoGYRudTSvcXSP10sHxfMyle1U19z0YoQhOW+MNHCJmox4Ad
rJt8DuqsjKZ3s45DByTi+3dR/0zzrqBWNhCLVhiT8aWo6A367Fa8tKGLr1qgC70o
zK/ARARKS1VtVdvTc/C1JzAjPGgE2/7C3XehiDrBHJFLTQYn09d7jheSSPgb2hbg
n3ULUkhCJxLP48+o0waJXYMFMisxl8CU/cw/WOm7aMCgwhWChSGQ9FIQgQWTLoar
Hjo4H212bu28Z0tjfbruCDY3CO8q1ucbZH5BIFUZxSmXL9m+HEwj9DfSnwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBCHeAtfclaTbrOidtZdbtrFljhpMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRUlkNEMxOXlWcE51czZKMjFsMXUyc1dXT0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+AAwQA
Ba+5AwQABeckAwQABef9MA0GCSqGSIb3DQEBCwUAA4IBAQB/4gyUKq5SAfzYpWQo
h6Q8QMk3M7eUDm+VDGDRSHkWAd94euobyFmK5MKrIfyEPv2UGgAcy8AZyoisY9f8
HRGN+RSLd7C4I8PWf+0sFPiN0hSrmjEzeRtUk1qzEloWKPeWEL4DIVMXlztxgOvn
NEvs+lv34tNtQPO4yp5HCf3yNEpQbp+9jrl46jkplJxcNjTIUbFj+eLCCAMxGqf6
qS/U2XQ7XX8UiXq11kGfpD/pnp+jfMTk3EpohHw/t7Z3iRf5pBleY+Dza03NvDb3
31amu0M7XUJesoQfin9ArfjzUkh0PH0OPBv9FKP6dS2n7PklBrPZIy1H70+2vXJ5
0HAk
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:23 2026 by rpki-client