Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OLfxWltjjBThxcQjgJvH5WvdQVs.roa
File: OLfxWltjjBThxcQjgJvH5WvdQVs.roa (raw, json)
Hash identifier: ejmqe3iihPITsdwefhA6J+2i1rWmhLmufvFIAeezSlQ=
Subject key identifier: 38:B7:F1:5A:5B:63:8C:14:E1:C5:C4:23:80:9B:C7:E5:6B:DD:41:5B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E6316E801BF54D3E41BBEB41B84B60A0E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OLfxWltjjBThxcQjgJvH5WvdQVs.roa
Signing time: Tue 26 May 2026 07:01:46 +0000
ROA not before: Tue 26 May 2026 07:01:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200913
IP address blocks: 5.175.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:16:e8:01:bf:54:d3:e4:1b:be:b4:1b:84:b6:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 26 07:01:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38b7f15a5b638c14e1c5c423809bc7e56bdd415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:4a:eb:e0:a1:3c:da:57:1f:20:1d:5e:e5:
a0:21:4c:25:b3:6e:15:2d:3c:93:8b:04:2b:39:09:
9a:68:1a:87:9b:85:f9:fd:82:92:1e:ee:6a:a5:40:
6e:52:3a:4a:e9:17:87:7e:85:27:1e:fd:a2:bb:42:
44:cb:e4:38:a3:52:16:96:5e:7c:80:ac:8f:bd:eb:
be:88:bf:1a:ce:6e:a8:0a:d6:58:16:ef:fb:e0:21:
69:06:1f:bf:4d:d8:53:45:00:7f:63:11:79:89:7c:
cc:10:e4:63:20:12:91:3f:83:57:4e:21:4f:c7:2d:
56:c4:ba:4c:e0:1b:e8:f5:aa:0d:64:c7:b8:92:8f:
76:d9:62:20:87:94:4b:5a:8f:a6:14:5d:64:3f:55:
d8:74:03:7e:79:5a:d2:4b:94:28:29:88:05:6f:ed:
cd:40:b9:63:98:6d:0e:dd:e8:a0:27:55:92:61:1a:
32:37:63:33:88:fb:68:6f:ee:12:19:5d:a3:da:57:
ca:0a:48:f4:46:2d:4d:3d:e7:b0:15:db:4d:36:87:
f4:08:51:a2:53:d2:02:64:38:ee:30:86:02:b6:58:
6e:17:f2:82:c7:72:2a:68:b5:6d:24:e4:3d:03:73:
9e:c5:1d:8e:d1:ea:d1:bd:0a:c7:07:15:59:b3:b4:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:F1:5A:5B:63:8C:14:E1:C5:C4:23:80:9B:C7:E5:6B:DD:41:5B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OLfxWltjjBThxcQjgJvH5WvdQVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.186.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:6d:42:88:06:96:e4:c7:06:f9:83:24:45:d5:15:e8:6e:35:
d1:59:bc:5e:7f:2b:06:4f:d5:af:49:a1:8f:41:90:60:33:72:
cd:67:bc:0e:a9:36:29:8f:1b:40:59:c4:e6:4c:ee:f0:3f:34:
00:8d:b0:62:a8:4d:42:b9:4a:38:7c:66:34:a7:3e:8b:23:ab:
8e:41:8c:57:dd:40:76:8f:35:fa:b8:76:88:55:46:74:0a:da:
7c:50:71:d5:0b:ac:5a:4d:fa:72:5f:7a:88:32:37:77:99:51:
14:9d:f9:c5:3b:10:ca:a2:f1:e3:29:d7:7c:af:b2:47:fa:88:
91:8b:42:c5:c4:30:b8:cc:4a:a6:7e:f4:ff:b3:6a:c6:48:d4:
76:1e:74:8b:17:61:79:03:de:28:dc:a1:35:cd:5f:39:5e:35:
47:1a:b0:91:08:cf:3b:32:ee:98:b9:24:4d:1b:56:16:f9:2f:
c0:af:78:6d:83:86:4f:0e:e1:02:56:b3:9c:a5:14:17:0c:ae:
ce:07:cb:3f:b5:6e:af:9c:2b:a2:b3:d9:6d:ab:fb:6f:8d:25:
5b:94:42:a9:ea:4d:a3:93:09:0e:2b:1c:b9:34:f4:3b:c2:09:
dc:c6:e6:84:44:13:2a:da:50:b9:2a:b0:e7:6e:ca:31:62:53:
f6:1f:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:23 2026 by rpki-client