Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rgjegq-WbYTB-FqWvwt76hJDzpM.roa
File: Rgjegq-WbYTB-FqWvwt76hJDzpM.roa (raw, json)
Hash identifier: wYt96VIuLcwsoPa1SHoIsJZBLLblpdIeiDDGj85n1YY=
Subject key identifier: 46:08:DE:82:AF:96:6D:84:C1:F8:5A:96:BF:0B:7B:EA:12:43:CE:93
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F05F4CC8BCB4493CD713333C2489C3071
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rgjegq-WbYTB-FqWvwt76hJDzpM.roa
Signing time: Fri 26 Jun 2026 22:02:36 +0000
ROA not before: Fri 26 Jun 2026 22:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202742
IP address blocks: 5.175.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:f4:cc:8b:cb:44:93:cd:71:33:33:c2:48:9c:30:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 26 22:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4608de82af966d84c1f85a96bf0b7bea1243ce93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:14:49:8d:7e:f7:e2:fc:82:36:b7:a4:28:
68:15:d4:77:43:dc:21:69:d3:40:49:81:5e:26:94:
3f:6d:81:16:8e:b9:00:81:0c:2c:d5:90:de:5c:b7:
61:1f:39:72:13:bd:b1:fe:fe:64:f4:f7:b0:b6:7d:
83:77:f0:bc:57:a6:6b:2b:da:65:f0:50:5c:65:45:
50:a6:9e:0b:53:a1:08:39:fd:cf:e9:38:67:d3:9c:
e0:05:bb:e1:73:fb:35:06:9c:7b:20:f3:26:6b:18:
17:ec:0e:6a:53:17:88:43:3b:4f:3a:bf:63:d4:4b:
21:39:dc:20:25:f9:4d:5d:89:6f:24:0a:b0:05:9a:
2e:01:5d:25:51:3d:bb:88:a3:4d:51:87:56:30:b2:
64:e8:b2:08:49:ad:f3:75:b4:ad:5a:da:37:bc:f2:
de:40:b9:77:ab:41:a3:48:be:1d:6d:98:1d:24:ef:
24:0e:54:12:33:32:82:a4:0d:65:a0:22:91:db:fd:
1c:4d:d0:08:1e:cc:20:ea:2b:e8:72:ad:5a:66:2e:
6b:59:fa:ea:8a:9c:75:d6:94:af:af:ef:65:36:9b:
4d:eb:00:9b:7e:d2:da:01:10:80:8a:5c:af:33:ba:
fb:2f:d8:b9:57:f1:d5:93:cb:1b:40:36:59:59:0f:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:DE:82:AF:96:6D:84:C1:F8:5A:96:BF:0B:7B:EA:12:43:CE:93
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rgjegq-WbYTB-FqWvwt76hJDzpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:87:8c:2b:40:e2:90:66:5e:d9:83:ec:db:2b:6d:de:e6:db:
c6:65:da:2a:95:26:58:86:de:c4:fe:9b:d1:a2:c3:33:66:52:
14:ea:e5:d4:56:10:f9:3f:aa:35:71:1a:4c:6b:e2:be:9c:88:
b5:28:da:81:2d:c7:55:83:01:5e:03:eb:2e:94:c6:23:e3:ca:
4f:93:f2:0f:c0:e6:10:0b:9d:62:1c:b7:87:47:cc:05:bc:40:
44:19:9f:6b:8b:30:16:9b:9e:3f:64:b2:d0:e6:54:97:85:28:
14:9b:3e:d3:fc:79:bd:9c:a9:86:50:06:d7:e1:31:7d:9d:71:
1a:ff:7a:cb:b7:20:9d:f9:58:22:c3:1d:e3:4f:27:55:0f:c7:
32:54:fe:5b:b3:e3:b7:bd:de:85:a2:32:40:3a:42:45:50:cc:
b1:26:0b:bd:ec:4b:2d:e3:e5:b1:a4:40:dd:1f:af:8b:77:0e:
7f:ac:d9:6f:22:a6:a3:d8:4f:76:34:6e:1b:b6:c5:f8:f8:62:
28:d6:a9:da:60:e6:3e:9b:c0:b8:66:de:96:e2:e0:7a:73:26:
25:e3:70:14:0d:46:a0:43:35:bf:9a:15:5c:5b:67:07:c7:2e:
30:f7:12:9d:31:9b:8c:73:72:04:9e:69:1b:6f:55:3f:e4:a1:
25:5b:6e:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8F9MyLy0STzXEzM8JInDBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNjI2MjIwMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjA4ZGU4MmFmOTY2ZDg0YzFmODVhOTZiZjBiN2JlYTEyNDNjZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG8USY1+9+L8gja3pChoFdR3Q9wh
adNASYFeJpQ/bYEWjrkAgQws1ZDeXLdhHzlyE72x/v5k9Pewtn2Dd/C8V6ZrK9pl
8FBcZUVQpp4LU6EIOf3P6Thn05zgBbvhc/s1Bpx7IPMmaxgX7A5qUxeIQztPOr9j
1EshOdwgJflNXYlvJAqwBZouAV0lUT27iKNNUYdWMLJk6LIISa3zdbStWto3vPLe
QLl3q0GjSL4dbZgdJO8kDlQSMzKCpA1loCKR2/0cTdAIHswg6ivocq1aZi5rWfrq
ipx11pSvr+9lNptN6wCbftLaARCAilyvM7r7L9i5V/HVk8sbQDZZWQ8zGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYI3oKvlm2Ewfhalr8Le+oSQ86TMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUmdqZWdxLVdiWVRCLUZxV3Z3dDc2aEpEenBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+vMA0G
CSqGSIb3DQEBCwUAA4IBAQBrh4wrQOKQZl7Zg+zbK23e5tvGZdoqlSZYht7E/pvR
osMzZlIU6uXUVhD5P6o1cRpMa+K+nIi1KNqBLcdVgwFeA+sulMYj48pPk/IPwOYQ
C51iHLeHR8wFvEBEGZ9rizAWm54/ZLLQ5lSXhSgUmz7T/Hm9nKmGUAbX4TF9nXEa
/3rLtyCd+Vgiwx3jTydVD8cyVP5bs+O3vd6FojJAOkJFUMyxJgu97Est4+WxpEDd
H6+Ldw5/rNlvIqaj2E92NG4btsX4+GIo1qnaYOY+m8C4Zt6W4uB6cyYl43AUDUag
QzW/mhVcW2cHxy4w9xKdMZuMc3IEnmkbb1U/5KElW25C
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client