Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buejwsjmlcDAMgNuq1YIeMi96WQ.roa
File: buejwsjmlcDAMgNuq1YIeMi96WQ.roa (raw, json)
Hash identifier: eWJXTUYWdNaspzwJGkTHRjUygReXdmQc8bKy3bStCRk=
Subject key identifier: 6E:E7:A3:C2:C8:E6:95:C0:C0:32:03:6E:AB:56:08:78:C8:BD:E9:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EF85DC7B4996D14D5D609E2D039AA77BB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buejwsjmlcDAMgNuq1YIeMi96WQ.roa
Signing time: Wed 24 Jun 2026 06:42:36 +0000
ROA not before: Wed 24 Jun 2026 06:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200636
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:5d:c7:b4:99:6d:14:d5:d6:09:e2:d0:39:aa:77:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 24 06:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ee7a3c2c8e695c0c032036eab560878c8bde964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:ed:ad:64:bb:c1:1b:f8:34:83:cf:3b:86:
86:d0:0f:cf:91:29:76:ec:d2:c7:25:f4:30:eb:87:
09:b0:4e:29:4f:b2:f0:93:8f:47:93:f4:b2:e1:71:
30:1c:95:d6:fc:63:04:e6:6b:82:46:1b:62:a7:be:
cf:4a:a1:14:52:cd:fb:da:b8:9f:80:40:b8:3d:03:
9f:62:bd:0f:bb:10:c2:f0:b9:94:c0:ae:31:27:63:
61:5c:8f:bb:56:e5:7f:0b:67:5b:94:77:82:0f:e2:
67:bc:c8:5d:16:1d:97:3e:4c:66:11:97:3d:b0:5a:
ba:8f:a5:fc:60:96:b9:8a:12:a9:54:94:05:5c:05:
04:8c:89:7e:dc:f8:ed:97:30:b4:a0:5d:80:a7:22:
5c:97:77:06:27:ab:6c:16:5c:d7:3a:3f:75:f4:21:
86:e8:10:8a:85:e6:3c:43:cf:2e:72:04:94:9e:f0:
66:cc:d8:63:75:2d:cf:c0:65:2f:1d:e2:da:69:60:
bd:df:78:bc:0b:ba:6b:ce:3f:d9:8a:0b:ff:d6:1c:
69:ce:4a:44:7a:f6:b8:db:08:c1:5f:b1:fc:19:a7:
21:38:d6:8a:9b:e6:be:8a:50:55:e4:8e:31:44:b1:
ed:43:34:8f:75:1c:32:ec:7e:15:bd:13:c9:90:66:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E7:A3:C2:C8:E6:95:C0:C0:32:03:6E:AB:56:08:78:C8:BD:E9:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buejwsjmlcDAMgNuq1YIeMi96WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5f:47:24:a8:5e:8d:dd:1d:ef:c2:74:b3:3a:0b:6c:3f:b9:
0e:57:f4:2f:34:f8:28:69:51:db:bf:25:76:5e:9f:d4:09:40:
96:6e:e1:7b:17:7b:84:4d:9e:37:75:b5:55:1d:4f:07:3c:02:
aa:71:aa:77:d9:d3:e9:fd:fb:a7:bf:17:54:f4:81:f8:ad:e4:
f8:5d:72:98:e5:a7:f0:cc:fd:68:42:b2:1e:85:85:7f:f1:a8:
1c:73:3e:24:76:be:f4:b0:f3:bf:4f:c0:20:6b:3b:80:0f:49:
35:f6:d0:98:5c:f3:e7:6b:92:3c:fa:1c:52:ae:54:e9:d3:16:
9a:9a:13:b0:8c:ea:ae:2d:84:69:6c:de:59:ec:c8:0b:b6:49:
10:d9:e3:22:9f:bc:90:c0:f9:5a:d2:b2:f3:27:2f:db:86:9f:
75:a5:d2:87:cd:86:85:52:5d:59:67:ea:fb:73:2f:94:ad:58:
35:bf:03:9e:7e:a0:94:dd:3a:e1:a8:66:ea:95:a0:f1:8b:59:
5e:85:c6:a8:59:41:4d:e3:3d:15:92:13:29:a8:59:dc:e3:82:
e6:4a:d8:34:53:ba:dd:31:b5:ee:30:78:b5:ca:14:64:f0:62:
e6:d0:d4:22:7f:8e:f0:75:58:2d:a2:04:6a:19:20:33:86:c3:
b7:a7:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client