Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eLQ9ZdVebcoHBsN9zwPOVWUQn0o.roa
File: eLQ9ZdVebcoHBsN9zwPOVWUQn0o.roa (raw, json)
Hash identifier: bKrlxBHkIoKJYcOBozgY/G5rPjzZCAnl88dXdKTu9sM=
Subject key identifier: 78:B4:3D:65:D5:5E:6D:CA:07:06:C3:7D:CF:03:CE:55:65:10:9F:4A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FEDC003DC524799F5E12C6540E1292AB9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eLQ9ZdVebcoHBsN9zwPOVWUQn0o.roa
Signing time: Mon 10 Aug 2026 22:16:51 +0000
ROA not before: Mon 10 Aug 2026 22:16:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24961
IP address blocks: 5.175.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:c0:03:dc:52:47:99:f5:e1:2c:65:40:e1:29:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 10 22:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78b43d65d55e6dca0706c37dcf03ce5565109f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:45:05:a3:63:bf:8b:60:ea:02:a0:c7:e1:
58:e2:f1:48:2d:4f:e1:b3:a1:13:ab:9d:4a:a9:cb:
53:88:fc:32:95:c6:cd:20:b8:b2:22:92:d6:39:b8:
ce:e2:00:c2:fe:b7:6f:b2:86:1c:18:00:0b:f2:5b:
d2:60:da:86:f3:16:c7:51:84:ba:69:4a:ff:5a:06:
fb:18:bf:ab:f2:20:9e:fe:03:cf:b3:3c:ba:50:58:
03:9b:6d:b7:7e:b9:8a:3d:f4:b8:d6:8c:8e:42:8e:
e1:e0:3e:9f:11:a0:c4:8a:84:44:1f:aa:a8:0f:44:
b5:0c:cc:d3:df:23:f0:8c:51:40:41:9f:e8:58:37:
ed:03:ea:f1:3a:d6:06:46:ea:2d:d4:dc:d8:90:86:
ea:10:ff:db:b4:ab:77:1b:2a:c5:69:d6:13:eb:df:
e7:82:f2:f6:b4:8f:1e:a0:d0:c1:1d:10:2c:42:34:
f5:b1:8e:d6:23:03:31:41:51:ce:ef:b7:3c:77:3a:
d0:8a:54:9a:a0:89:09:90:c3:6b:23:9d:6d:ca:5d:
6f:51:d5:70:7f:0b:70:aa:6e:6f:e8:b3:28:17:f6:
27:95:42:b9:9a:60:e6:b2:ff:88:3e:1c:3d:1c:90:
54:74:9b:eb:01:1d:ec:b3:a6:18:5a:fc:bc:b6:9b:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:3D:65:D5:5E:6D:CA:07:06:C3:7D:CF:03:CE:55:65:10:9F:4A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eLQ9ZdVebcoHBsN9zwPOVWUQn0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9b:0e:b8:b7:72:11:22:64:2c:42:b1:ee:aa:2c:ec:3a:8b:
68:9f:26:76:42:30:e1:5a:80:92:94:73:dd:26:53:7a:7e:3d:
e8:68:69:40:98:71:78:15:f6:0c:57:e0:55:19:19:dd:2c:96:
78:94:27:27:e0:df:fe:20:0c:2c:0a:6f:90:09:cf:06:37:12:
30:9a:a9:c7:ce:a1:01:4a:16:ab:ff:46:45:40:87:49:ab:e6:
eb:ba:2c:24:2e:05:8d:f4:93:2c:e0:20:0b:b7:f4:dc:b8:39:
a6:90:cb:64:a0:27:c6:d3:4c:fd:ce:94:27:15:d5:47:e3:24:
9b:75:df:77:d4:97:e3:71:b9:2e:23:d7:b2:7b:a2:49:ba:b6:
22:4f:fc:ac:ce:bb:50:b0:29:da:1b:9a:7c:f7:b6:12:16:97:
f8:9a:60:ba:47:4e:6c:05:3b:76:f6:c5:4d:f4:86:e0:15:92:
16:58:63:56:20:1c:54:1f:1e:b8:15:a9:02:ba:58:aa:4f:7c:
c5:69:dc:4a:f9:cd:08:25:a8:be:ff:c8:de:d5:f7:2c:3e:5a:
7f:2f:fb:58:26:c7:39:a8:96:38:e0:e5:f1:65:b8:0e:ab:0b:
fa:38:05:91:de:8f:1e:cc:79:9a:61:cf:4a:67:34:b9:30:40:
1c:e6:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:39 2026 by rpki-client