Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OVaHnvU2FxiIL4DCu6HcBVU3nbA.roa
File: OVaHnvU2FxiIL4DCu6HcBVU3nbA.roa (raw, json)
Hash identifier: EJ9fSd+Q4OXfrpYwy8O1q4Lx4vzA3V1amzX+M73k6sU=
Subject key identifier: 39:56:87:9E:F5:36:17:18:88:2F:80:C2:BB:A1:DC:05:55:37:9D:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A107E3C884B4FC89B2F0081BAD576E2F80
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OVaHnvU2FxiIL4DCu6HcBVU3nbA.roa
Signing time: Sun 04 Oct 2026 17:08:50 +0000
ROA not before: Sun 04 Oct 2026 17:08:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47272
IP address blocks: 5.175.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:e3:c8:84:b4:fc:89:b2:f0:08:1b:ad:57:6e:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 4 17:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3956879ef5361718882f80c2bba1dc0555379db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:73:75:15:fc:cf:a2:1e:53:68:a6:7f:0b:
68:45:78:9a:41:2c:1e:22:de:81:8a:4d:0a:4f:94:
04:f8:8c:43:e9:56:0e:f1:f2:d0:10:b6:61:83:7d:
ab:c3:3f:57:dc:a9:eb:5d:f7:4d:9f:a8:5f:84:81:
76:26:ea:d3:45:8a:10:d0:49:92:fb:68:24:75:15:
6a:8e:ce:b5:30:36:88:d8:4c:d4:eb:20:1b:ea:be:
f1:11:af:3e:b1:40:7d:15:44:4b:05:07:0b:d4:b1:
08:97:f4:e6:2f:45:db:a6:19:6b:e7:cb:53:1e:35:
50:1c:7c:bc:22:25:04:d4:7d:45:79:7f:d7:bd:a6:
65:2d:c8:b6:d0:11:c6:8d:ff:44:b7:f8:1b:d2:97:
7a:ee:29:9b:76:c5:35:8c:6b:9e:f2:37:25:f7:2f:
c9:b6:60:60:2d:8c:a7:c9:cf:ed:d0:2f:1a:83:27:
01:ad:2b:d5:04:53:9d:7a:ce:86:94:8f:a5:39:2e:
29:75:10:54:50:8e:a6:e7:53:08:a7:ea:eb:b0:aa:
55:67:f9:f9:72:00:ce:d9:e5:48:8a:80:e3:82:2c:
98:99:92:67:66:a3:f1:ac:a6:bf:ce:9c:a6:23:74:
2d:20:fd:1d:4e:3d:0e:92:72:db:4b:1b:5f:15:99:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:87:9E:F5:36:17:18:88:2F:80:C2:BB:A1:DC:05:55:37:9D:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OVaHnvU2FxiIL4DCu6HcBVU3nbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.210.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c4:ed:be:57:e8:6b:19:05:06:07:ae:e9:e5:b6:c7:3b:fe:
6b:62:dd:ab:74:81:f4:8d:77:47:4c:19:f2:3f:f3:6b:6b:0b:
24:ae:c3:c1:ec:1d:e9:5f:be:b3:fc:f1:43:41:0a:ba:95:4d:
09:b1:87:25:09:25:87:4e:06:30:c5:57:79:77:c2:76:03:b0:
19:ef:42:7f:5a:b8:fb:25:69:1d:50:51:85:24:42:8b:74:c6:
19:c6:b9:f2:fc:51:3e:ef:92:28:e1:42:49:ff:40:3f:06:48:
da:ff:c6:72:06:50:92:dc:ef:17:a5:a7:e2:76:7a:94:e5:3f:
61:67:d9:f5:35:e9:70:a3:d4:57:90:35:05:b2:a2:57:3e:94:
bf:10:83:a3:b5:49:8e:60:db:b1:d2:dd:e7:cc:78:09:0c:bc:
e3:5b:72:ce:5b:61:a5:bf:d3:c6:34:00:8c:b3:0a:b9:01:de:
22:6f:2f:bf:41:e3:77:fa:5f:1a:33:6c:33:17:26:15:dd:7d:
d2:70:4e:71:39:64:8b:ec:c1:ae:f2:49:22:de:6b:c4:8e:ee:
40:3b:d9:64:c7:18:f5:82:63:0c:0a:f8:1a:82:8b:6a:ad:40:
7e:e0:93:d2:12:d5:8e:ac:e1:49:49:4a:2b:7a:25:6e:ba:8c:
e3:aa:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:35 2026 by rpki-client