Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d8xJPKFPOZ3OnsVgQcncRdBXQHw.roa
File: d8xJPKFPOZ3OnsVgQcncRdBXQHw.roa (raw, json)
Hash identifier: XA+z/vrWoWxgrwLBIUtBKm6KrmVCEtOfjAlhfKq23VU=
Subject key identifier: 77:CC:49:3C:A1:4F:39:9D:CE:9E:C5:60:41:C9:DC:45:D0:57:40:7C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CEABC3C50AC1BF6BEBD207917FDFBC3B4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d8xJPKFPOZ3OnsVgQcncRdBXQHw.roa
Signing time: Sat 14 Mar 2026 05:05:30 +0000
ROA not before: Sat 14 Mar 2026 05:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210537
IP address blocks: 5.175.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:bc:3c:50:ac:1b:f6:be:bd:20:79:17:fd:fb:c3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 14 05:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77cc493ca14f399dce9ec56041c9dc45d057407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:ee:a9:c7:14:f2:9b:2e:7c:94:04:6a:88:
97:14:a6:31:c4:0f:83:b2:d9:e1:5e:96:88:4a:09:
63:0a:d4:75:a1:f8:0f:8e:43:fa:54:c2:2a:3f:8c:
93:f3:57:15:31:4b:03:90:7f:bb:03:12:34:58:32:
63:c0:a3:09:5f:54:ad:74:0b:8f:70:21:c3:fc:08:
26:00:a7:ac:19:9d:c9:6d:30:c7:28:ab:92:4b:57:
2d:fb:19:b2:aa:c9:59:54:c4:59:5b:25:90:88:ba:
4b:1d:d1:76:bc:65:1e:f0:e4:cb:7d:66:ab:44:3a:
28:b4:82:f1:90:6b:da:26:70:7e:a9:48:5d:04:b1:
ba:9d:10:3d:8f:49:3a:26:5b:01:ad:b9:9f:75:21:
93:2c:84:5e:07:44:a0:33:27:4c:06:4d:0e:1b:7a:
43:25:7a:34:de:02:ce:c4:21:63:7a:f3:e0:83:c2:
e0:34:d6:ec:9f:e5:99:4d:dc:5a:89:b8:c2:9f:e4:
45:ae:5c:d8:57:2c:33:a1:e1:2b:5c:ef:00:1e:de:
c4:7a:3e:5f:e7:f4:68:c6:12:fc:57:be:51:c4:48:
05:29:ba:3e:2b:50:29:3d:14:d1:01:fe:6d:29:3f:
11:1b:30:33:d6:7f:28:f1:95:4c:90:74:12:99:f4:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:49:3C:A1:4F:39:9D:CE:9E:C5:60:41:C9:DC:45:D0:57:40:7C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d8xJPKFPOZ3OnsVgQcncRdBXQHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:dd:44:96:f7:05:75:3d:3d:30:7f:66:85:8d:45:fd:4a:ff:
82:71:07:e1:c6:15:1e:eb:23:e5:de:e9:5b:f6:06:47:7c:9c:
e7:13:75:d9:14:d1:a2:99:40:0f:b7:57:d0:b2:b5:ff:1a:8b:
b4:8a:d6:c6:b1:8f:1b:1f:35:a9:b5:06:da:f4:77:80:9c:3f:
10:dc:1e:f1:83:f8:a2:35:b9:79:97:37:d2:27:b4:68:1c:4d:
c6:9e:5a:29:88:45:51:3e:fb:75:ee:d7:34:15:de:08:55:b0:
cf:f8:02:e5:79:1c:49:8a:84:8c:e3:43:2b:2d:5a:54:74:38:
53:c5:e6:9b:bf:e3:0d:d3:43:b4:f8:f5:35:91:56:8b:fe:7b:
a8:5a:2a:dc:fe:3e:8e:a3:5f:62:fc:dd:71:58:a4:ca:63:31:
50:89:6a:2e:78:f0:1f:6c:93:2e:77:e3:9a:74:34:d8:39:16:
ad:62:32:b0:f2:ff:72:60:6a:e5:ea:2c:3a:a6:da:c2:b0:48:
93:72:98:00:fd:1a:b8:e3:25:e0:b8:87:26:84:7c:0d:3e:96:
29:c0:22:f3:52:6d:36:22:18:aa:48:d6:fd:7b:10:88:6c:bf:
c5:be:b4:eb:92:ae:c5:c3:4d:8e:ad:42:40:fd:58:ff:1e:8a:
35:9d:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 20:28:08 2026 by rpki-client