Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TRax2ZzctBXbQ-sRKt_k713bLnE.roa
File: TRax2ZzctBXbQ-sRKt_k713bLnE.roa (raw, json)
Hash identifier: mKiomC8E4cRgB0TXf4VTw9+mXQck6lkRPnj4JiQTh4Q=
Subject key identifier: 4D:16:B1:D9:9C:DC:B4:15:DB:43:EB:11:2A:DF:E4:EF:5D:DB:2E:71
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A025EA0332929B6F1EB4A483DC094ACD92
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TRax2ZzctBXbQ-sRKt_k713bLnE.roa
Signing time: Fri 21 Aug 2026 20:01:28 +0000
ROA not before: Fri 21 Aug 2026 20:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201749
IP address blocks: 5.175.145.0/24 maxlen: 24
5.175.156.0/24 maxlen: 24
5.175.158.0/24 maxlen: 24
5.175.159.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:ea:03:32:92:9b:6f:1e:b4:a4:83:dc:09:4a:cd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 21 20:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d16b1d99cdcb415db43eb112adfe4ef5ddb2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:17:d0:d4:f4:fb:20:76:24:fd:bb:1a:58:
e1:cf:fc:92:00:ed:5a:69:09:9e:b4:04:0e:85:0f:
d9:a2:34:81:0f:83:ef:c0:cc:9e:b8:6d:22:d1:af:
36:dd:44:d3:6c:38:a0:44:6d:e2:28:d4:57:ba:69:
41:67:92:5c:a4:68:9f:f8:58:91:28:9a:a9:19:58:
d5:42:d6:18:2c:04:d6:37:3b:ee:37:f1:f1:ee:ed:
67:02:a3:8f:56:15:59:38:e8:35:8e:7b:61:2b:6c:
30:da:d4:cf:63:0f:f4:2d:a6:76:0a:d7:0e:83:75:
48:e5:5e:ff:c0:7a:f9:38:80:3c:5d:68:9a:17:af:
cb:0c:b3:0a:e6:d6:95:2e:d0:2f:c1:6a:e9:95:f9:
50:b3:38:62:1d:d6:ef:23:1d:a9:d4:2d:6a:76:80:
84:eb:04:7a:97:fd:bc:42:38:1f:b4:94:64:f9:2f:
ab:ba:b8:be:a1:77:18:e0:ff:5c:07:1d:9a:bd:11:
d0:9f:8f:7a:5a:18:51:6f:5c:cc:fb:ea:60:90:22:
15:41:d9:d1:72:2d:57:38:09:a0:18:87:c6:b1:c3:
06:80:80:27:74:80:e1:03:5f:01:36:cc:f3:ed:b6:
f9:d8:e0:61:e0:ef:1c:d1:22:71:92:43:c9:97:8b:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:B1:D9:9C:DC:B4:15:DB:43:EB:11:2A:DF:E4:EF:5D:DB:2E:71
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TRax2ZzctBXbQ-sRKt_k713bLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.145.0/24
5.175.156.0/24
5.175.158.0/23
94.249.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:45:43:e7:8b:a2:57:fa:9b:c1:77:10:7a:b3:40:94:5d:1f:
b1:d8:d1:74:b2:db:7f:f0:ce:f0:29:4c:57:01:0a:45:fb:76:
15:91:5a:84:88:f6:08:e6:29:e5:b1:d0:d9:73:60:d3:de:63:
d1:3f:90:c8:de:02:89:dc:d1:57:81:d3:3a:f0:c1:55:ab:48:
56:e7:da:be:2b:0f:db:62:ab:16:ea:b3:4e:b0:d6:f6:40:b2:
c8:0c:cb:f0:90:01:f8:06:23:cf:c0:0e:fb:ca:02:63:37:0b:
74:05:72:d8:54:34:4a:29:70:b9:e3:b6:4e:52:10:89:44:ef:
20:3b:63:13:66:9d:27:89:a5:b5:09:38:ca:11:3a:1d:73:d2:
bc:06:3e:77:ca:03:58:65:64:3c:8d:67:9f:ae:34:a4:70:b8:
21:29:8d:48:09:35:16:01:11:f6:ca:dc:70:1f:d7:33:f9:40:
d9:3f:d6:3b:d3:4c:0a:6c:36:96:86:6d:33:6d:77:31:68:d8:
14:a8:7e:ad:2b:e0:5a:37:37:00:95:da:e1:5a:fc:09:f0:8a:
6c:14:14:d9:40:6a:7d:72:c4:62:d0:12:c7:35:cc:86:2a:30:
7d:70:e1:ed:52:ee:c0:3a:29:a3:cb:b1:6b:3b:09:6f:b9:ea:
7a:eb:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:50 2026 by rpki-client