Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Qp6JyqUvtWBGU3F0NlRyVxG6JdM.roa
File: Qp6JyqUvtWBGU3F0NlRyVxG6JdM.roa (raw, json)
Hash identifier: KpCUEEa5Gb+rTLrnxoIO8z/Ap2F8qpjFok+WhC1D/xw=
Subject key identifier: 42:9E:89:CA:A5:2F:B5:60:46:53:71:74:36:54:72:57:11:BA:25:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F05B022C812C906F1AB7EAE3D3B9F3233
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Qp6JyqUvtWBGU3F0NlRyVxG6JdM.roa
Signing time: Fri 26 Jun 2026 20:47:37 +0000
ROA not before: Fri 26 Jun 2026 20:47:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213850
IP address blocks: 5.175.164.0/24 maxlen: 24
5.175.179.0/24 maxlen: 24
5.175.245.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:b0:22:c8:12:c9:06:f1:ab:7e:ae:3d:3b:9f:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 26 20:47:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=429e89caa52fb560465371743654725711ba25d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:95:3f:34:08:ca:46:d4:52:0e:7b:bf:72:
67:6e:8c:b8:1e:a6:2c:84:a4:07:4c:38:a7:20:f2:
25:fd:8d:96:31:d2:87:8a:3c:39:22:b5:b3:e2:59:
c8:2b:50:56:87:c5:9f:84:aa:c0:bb:2b:d3:0b:65:
fc:cb:03:ad:9c:ba:84:60:a5:95:70:4c:09:a4:e1:
20:59:0b:43:cb:3c:f3:cc:8b:eb:9e:98:1e:26:63:
95:80:72:54:47:59:26:d5:4b:a7:f4:f4:f4:2d:63:
79:eb:5b:92:1c:0b:4e:c3:b8:29:95:49:55:ba:ad:
79:25:af:c4:1b:c5:a3:e0:f2:27:3e:48:9b:84:7e:
f5:e6:5c:42:74:54:65:39:ef:ba:77:d1:83:c5:83:
e6:ad:90:90:b4:49:b2:2e:c6:12:39:be:c2:19:9e:
de:3c:05:97:df:17:ab:47:94:99:96:51:fb:1d:53:
13:0c:72:57:2f:83:ec:69:ca:7b:a4:6b:97:e5:66:
59:e3:50:e7:4a:c6:36:61:76:97:59:14:03:d5:e4:
56:da:d5:35:27:60:67:40:f9:ef:5b:a6:a3:c1:b9:
aa:a7:bc:a8:35:65:b3:7b:10:79:28:3c:11:a9:47:
81:42:1f:51:bf:ab:11:b9:c8:de:91:36:b8:17:25:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:89:CA:A5:2F:B5:60:46:53:71:74:36:54:72:57:11:BA:25:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Qp6JyqUvtWBGU3F0NlRyVxG6JdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.164.0/24
5.175.179.0/24
5.175.245.0/24
5.231.31.0/24
Signature Algorithm: sha256WithRSAEncryption
27:49:14:2b:cf:b2:80:2b:3e:4d:c9:b5:b5:aa:14:2d:0b:a0:
73:99:1f:78:84:48:8c:5b:40:79:3d:3c:3f:ed:06:a0:5b:8f:
99:9b:96:27:59:13:f9:90:e5:cf:84:99:60:74:de:7a:f6:57:
50:1b:ff:4f:b8:69:2a:a6:79:cf:48:83:8b:a4:be:9d:3d:d4:
5b:b1:6a:e5:f6:b7:da:2e:42:2c:a1:22:63:ed:66:93:00:a1:
93:3b:08:cf:c6:5c:65:b8:9c:10:f0:25:c1:ff:57:bf:f5:bc:
3b:ac:78:60:2c:1a:5a:29:5b:fd:d4:a1:d0:e0:6e:9a:ed:64:
31:ae:7f:09:67:2b:98:b9:dc:5c:b2:bd:fa:44:69:61:59:1a:
f1:73:d4:31:40:e4:6c:c1:3d:7c:fb:47:c8:e6:d4:b6:cf:f4:
90:dd:d0:e6:4c:33:cd:a8:51:32:37:65:e1:01:5e:71:c5:db:
26:aa:01:a4:c9:e0:fd:0c:3c:ea:c8:c2:83:22:2e:56:57:e6:
46:0d:93:b7:19:18:d4:1c:1e:56:ab:e1:2e:ac:c8:d5:45:f2:
d5:cb:68:db:d4:10:de:1c:97:54:8a:ee:58:ea:10:2a:a9:ce:
35:7e:7b:42:94:04:cb:ca:5e:36:dc:c8:86:f5:bf:14:c3:11:
fc:d0:ef:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:24 2026 by rpki-client