Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vbkh3TG2G1fofpYRV_lnI0248DU.roa
File: Vbkh3TG2G1fofpYRV_lnI0248DU.roa (raw, json)
Hash identifier: +wAGuaKoGhggJUzc8jj2HkaZLjo0ICAuGBb3w1X/Md8=
Subject key identifier: 55:B9:21:DD:31:B6:1B:57:E8:7E:96:11:57:F9:67:23:4D:B8:F0:35
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1292420622D0AFD05946E65D8A71ABB4E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vbkh3TG2G1fofpYRV_lnI0248DU.roa
Signing time: Sun 11 Oct 2026 04:06:35 +0000
ROA not before: Sun 11 Oct 2026 04:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 5.175.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:24:20:62:2d:0a:fd:05:94:6e:65:d8:a7:1a:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 11 04:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55b921dd31b61b57e87e961157f967234db8f035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:36:3d:67:45:86:fd:3b:30:27:5c:79:4f:
08:d5:06:8b:ff:77:07:12:f0:e3:b2:c7:45:58:42:
07:44:1b:4f:70:92:8a:4d:31:36:d3:40:d1:23:40:
98:24:3f:ea:2f:db:53:34:0e:fe:51:89:39:f1:ac:
14:d3:d5:32:dd:f4:24:3e:fe:a6:17:97:70:47:09:
7a:6d:97:ca:64:72:67:d2:5d:ec:a1:48:13:61:76:
56:1d:ea:d1:e9:54:f9:85:4f:44:ca:e0:23:0e:62:
2f:86:c7:b2:6f:43:98:c6:3c:4f:05:c9:04:7f:3c:
a7:da:21:03:53:99:78:6c:6e:23:7b:1f:1d:bc:e5:
cd:47:49:d3:e0:78:8f:9c:e3:37:1c:9b:33:26:b8:
70:cc:08:b7:9f:b8:f2:9c:d3:d6:23:c9:cd:3d:2d:
e1:08:bd:e4:ca:e4:01:68:35:3a:02:02:d0:e0:51:
b5:f6:56:c5:53:6f:f9:5f:1b:c3:03:6c:c0:90:ad:
01:fa:d1:f0:d0:9c:fd:34:5f:d4:ed:68:f5:dd:9a:
36:b5:d9:63:f4:fc:74:b3:2e:e9:31:7b:79:56:22:
e6:be:cd:56:44:1a:00:6d:29:d8:ab:d7:7d:9b:25:
bc:70:cf:75:f9:b2:46:05:34:f8:27:36:79:54:c4:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:21:DD:31:B6:1B:57:E8:7E:96:11:57:F9:67:23:4D:B8:F0:35
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vbkh3TG2G1fofpYRV_lnI0248DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f1:30:77:e0:ad:0e:34:8f:e5:31:29:07:88:4e:5b:e5:ae:
c6:20:50:bf:09:84:a3:0d:c7:bf:10:41:cb:66:25:ca:07:52:
8f:a4:2c:e4:56:85:d5:50:f9:56:6c:a0:e8:91:5c:01:de:a2:
1d:b3:fb:c2:55:9c:61:3a:1d:f0:12:74:4e:28:58:85:71:cb:
98:7c:f7:f0:34:4b:fe:0d:0e:92:ee:cf:7b:fa:bf:82:39:cd:
f5:b9:da:7a:c3:19:4b:6b:c9:e1:fc:0f:2d:ac:11:d3:b2:2b:
ab:bf:aa:ae:98:18:7e:29:43:6e:f3:ec:69:77:f6:cc:b1:bd:
fb:53:53:f9:1a:bd:bd:68:cd:5f:44:d2:f5:b7:db:11:9e:74:
6d:61:a7:06:0e:a2:58:fb:a9:36:9a:fc:f1:c5:99:a3:17:5d:
32:7f:62:62:de:d9:f8:18:c9:55:2d:2a:64:05:df:50:73:cf:
62:ad:a6:26:74:4f:aa:80:b5:fb:cd:18:77:cf:c3:74:43:93:
18:fd:3a:55:f5:36:bc:87:7f:46:1a:0d:ba:58:c7:ad:56:ba:
96:3d:66:69:74:34:80:2b:66:18:d4:77:0c:ef:52:d4:56:51:
cd:f6:09:dd:fb:0f:28:12:58:cc:21:09:ce:d3:15:e4:d8:bb:
e0:63:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:46:03 2026 by rpki-client