Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XfwII46YHzxSYVjjTY5edVCGdJo.roa
File: XfwII46YHzxSYVjjTY5edVCGdJo.roa (raw, json)
Hash identifier: TfWKkLff648RlT7YBkYmfsb8sSB2c8itEapmirnpHYE=
Subject key identifier: 5D:FC:08:23:8E:98:1F:3C:52:61:58:E3:4D:8E:5E:75:50:86:74:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EB6936050031E65ECF81679BEAC0872D7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XfwII46YHzxSYVjjTY5edVCGdJo.roa
Signing time: Thu 11 Jun 2026 12:06:12 +0000
ROA not before: Thu 11 Jun 2026 12:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.143.0/24 maxlen: 24
5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:93:60:50:03:1e:65:ec:f8:16:79:be:ac:08:72:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 11 12:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dfc08238e981f3c526158e34d8e5e755086749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:fa:76:2e:1c:f1:f2:85:2e:80:7b:05:71:
38:35:65:3c:9e:f4:6e:fc:46:d0:97:ce:31:53:a3:
1d:0f:ec:6b:a8:37:60:02:f3:1f:7d:08:23:9e:a7:
84:75:9d:8e:75:dc:42:a1:65:92:d9:77:78:40:79:
db:9d:36:00:a8:a7:ba:1f:ff:d4:a1:3f:31:a9:19:
a0:27:dc:9b:f3:f6:68:29:d5:a7:39:0b:e4:50:76:
53:72:a0:76:df:77:04:78:e3:dc:9e:17:d0:46:08:
34:ea:6b:9f:95:d5:d3:18:d8:16:a3:9c:7b:c5:d1:
76:fa:d5:6b:c6:37:38:f2:75:c7:f5:5d:bc:cf:d1:
4c:27:41:5d:74:3b:05:c9:10:01:19:6b:1f:93:66:
6d:d8:99:b4:56:0e:47:db:9a:e0:97:d3:d1:32:8d:
b6:06:0b:f5:39:76:c0:80:6c:c3:40:f4:b8:b3:6b:
53:f9:4d:f8:6f:0c:97:f1:0f:81:60:06:9e:76:87:
e8:a0:74:a6:9b:db:85:b4:5d:a8:37:3d:7d:70:0e:
78:88:7b:e2:cc:76:a1:ca:ad:1c:c7:af:bd:07:78:
53:60:48:ad:5e:32:d4:36:40:f7:c6:39:d7:a7:52:
c5:71:6b:63:3a:e4:9c:a3:65:c7:20:8b:5f:cb:fb:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:08:23:8E:98:1F:3C:52:61:58:E3:4D:8E:5E:75:50:86:74:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XfwII46YHzxSYVjjTY5edVCGdJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.143.0/24
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.231.207.0/24
89.144.46.0/24
Signature Algorithm: sha256WithRSAEncryption
32:19:84:77:e1:a0:89:5c:c6:2b:45:3e:97:7d:c9:ea:c3:a6:
81:db:eb:39:66:be:81:fb:9a:19:2c:eb:a5:be:e6:92:33:a6:
fe:14:5d:94:30:26:63:f4:fb:0f:52:6a:d2:71:70:57:7f:57:
db:fa:37:b3:59:ac:01:38:49:00:45:c3:64:5f:bf:e1:9c:86:
17:73:86:b7:54:d5:15:eb:56:d3:71:d3:b2:b5:c5:12:bb:8c:
d5:c4:f0:54:7a:12:8a:95:09:3e:44:38:22:77:5e:77:aa:41:
0f:7f:d7:59:5d:0d:50:d9:5d:0b:52:3c:00:f6:13:c1:ab:2a:
c9:2c:be:e8:12:0e:ee:28:9c:cb:75:bd:41:3e:c6:d0:46:45:
71:22:64:45:68:ae:a9:55:df:b5:84:b1:7c:66:cf:b5:e5:fa:
8f:ee:cc:c5:c7:27:ff:16:55:1d:2f:68:df:b4:b3:e9:ba:37:
bb:22:0f:1f:92:19:55:d6:81:eb:73:74:68:c0:1e:d8:cf:93:
1e:61:36:08:8c:93:04:d4:b5:7c:b2:23:b6:bc:25:85:03:cc:
3b:22:bb:46:29:5f:2e:76:46:ce:ac:92:14:f5:c1:c0:33:5d:
45:9a:bd:b3:b3:38:17:af:5c:79:62:34:66:0b:e3:5b:f7:6a:
32:ee:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:18 2026 by rpki-client