Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HIxdWS57vrOjnQpLS6qVDVssHCs.roa
File: HIxdWS57vrOjnQpLS6qVDVssHCs.roa (raw, json)
Hash identifier: iaSeESANqgjgUXxf1sXyomVPuNLH6/0ExI2pbdvsqPI=
Subject key identifier: 1C:8C:5D:59:2E:7B:BE:B3:A3:9D:0A:4B:4B:AA:95:0D:5B:2C:1C:2B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F74AD30AFA1F91F7FF02E3D523A37E9A1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HIxdWS57vrOjnQpLS6qVDVssHCs.roa
Signing time: Sat 18 Jul 2026 10:02:15 +0000
ROA not before: Sat 18 Jul 2026 10:02:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.230.195.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:ad:30:af:a1:f9:1f:7f:f0:2e:3d:52:3a:37:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 18 10:02:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c8c5d592e7bbeb3a39d0a4b4baa950d5b2c1c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:e8:c9:5e:8d:c7:1d:b8:09:1f:f4:d8:0e:
78:5d:ab:c6:3a:42:b7:ba:f5:5f:aa:e9:d3:49:69:
c7:bc:dc:c7:41:59:5d:d1:f7:18:d1:41:42:56:8e:
b2:14:8c:76:fa:90:76:a2:05:e3:d9:62:f1:97:a3:
3d:0a:42:f1:31:43:eb:8d:9a:fa:0f:98:d3:97:d5:
4f:da:ab:8a:43:47:5a:e2:4e:21:2a:b7:a0:c7:fe:
91:17:0f:e5:6f:04:ca:b8:99:2d:6b:fb:57:b5:69:
31:26:e3:ee:09:7d:a4:27:ad:66:33:36:db:58:e5:
05:62:a1:d4:cd:cf:eb:c6:dc:43:ac:d2:0c:14:55:
8d:2b:d1:f5:7c:d9:48:7e:4b:b3:78:41:f4:e3:bf:
c7:f0:79:67:fb:d2:0a:3e:5d:04:49:84:ff:1a:b9:
6c:a9:30:13:73:56:c0:c1:91:b1:3a:45:bc:98:53:
8a:16:c6:da:c1:60:e6:5f:65:e7:21:1f:3f:d2:d3:
09:08:71:59:21:61:6b:ea:a6:50:9d:d0:0c:3f:a1:
97:80:e3:79:45:5e:2e:b3:f5:d9:12:86:0b:ff:61:
13:16:5b:02:b5:b3:43:cf:ba:ee:39:6b:0d:e0:05:
19:9e:e2:67:ee:7c:4a:cd:26:25:47:31:30:cc:3a:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:5D:59:2E:7B:BE:B3:A3:9D:0A:4B:4B:AA:95:0D:5B:2C:1C:2B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HIxdWS57vrOjnQpLS6qVDVssHCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.175.211.0/24
5.230.195.0/24
5.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:53:6a:f6:fb:cd:1f:b3:96:a1:d7:a8:13:57:68:7f:8c:1b:
33:20:9c:14:95:b7:52:a3:70:4d:c4:1a:74:54:7c:04:0e:17:
18:ca:ea:66:18:40:88:a0:2a:0a:bc:90:25:94:e5:5d:e5:64:
88:eb:d8:d7:17:88:14:52:d7:76:a5:2e:e4:79:2a:13:83:3a:
04:55:a2:95:0d:0e:13:73:fc:c8:3d:34:36:5f:b7:f1:7a:5f:
31:16:a1:8d:da:96:d5:7f:0e:52:ac:ad:45:35:fc:a9:4c:5e:
c1:dc:0a:a8:92:ec:24:71:7a:fb:a5:1a:0c:c2:75:62:cb:ab:
c1:03:bc:f6:ef:09:e6:d8:f0:a3:f1:f5:67:02:fb:70:02:1e:
60:f6:f3:e6:1e:62:8e:a7:a4:9d:90:0d:26:7e:a8:09:df:31:
48:09:f7:4c:67:16:5e:19:bb:48:3c:e2:33:e1:03:34:52:d2:
3d:d5:9c:f4:6f:03:5f:5b:71:bd:46:8b:ad:12:b3:99:74:30:
4f:83:89:3e:60:ae:25:cb:7d:66:ba:08:61:de:4e:d3:1f:bc:
f7:c8:09:c9:67:a4:53:05:5a:29:34:0b:e4:c3:b8:26:e6:56:
94:a2:64:f5:28:e5:76:9b:73:4a:b3:13:bd:f6:25:b9:a8:36:
38:6e:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client