Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/egkvqk5oO6hMAq9qikRBI_UDyQY.roa
File: egkvqk5oO6hMAq9qikRBI_UDyQY.roa (raw, json)
Hash identifier: 3g8Ouctu6Wghj1mms8ZHryn50KpeQjnODxrZfeE6yvQ=
Subject key identifier: 7A:09:2F:AA:4E:68:3B:A8:4C:02:AF:6A:8A:44:41:23:F5:03:C9:06
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FFFBCC3B6879EFB6EF5197280F3CD941B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/egkvqk5oO6hMAq9qikRBI_UDyQY.roa
Signing time: Fri 14 Aug 2026 10:06:28 +0000
ROA not before: Fri 14 Aug 2026 10:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218963
IP address blocks: 5.175.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:bc:c3:b6:87:9e:fb:6e:f5:19:72:80:f3:cd:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 14 10:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a092faa4e683ba84c02af6a8a444123f503c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:2b:c3:19:4d:62:c4:5e:c6:29:6f:48:eb:
4f:0d:04:ce:39:79:23:83:e2:64:10:d0:73:d8:2a:
b1:80:e2:63:05:12:7f:60:89:d3:e6:5a:eb:c8:a2:
9a:8f:13:46:3b:c5:73:53:b0:93:29:6c:68:b8:3e:
08:38:25:21:4e:8c:d7:c8:92:c3:41:28:aa:bf:97:
fd:67:45:bc:a0:6e:81:f7:7c:e5:a1:4b:6d:ab:3c:
9f:cb:b2:a0:4f:51:f6:07:5d:20:40:70:3a:79:e3:
c7:f3:78:b6:14:60:da:68:fa:57:c5:ff:29:85:d6:
4d:a3:d5:3d:19:70:2f:3f:1f:63:56:32:b3:e5:e4:
17:a1:dd:b3:79:34:77:f1:52:2a:aa:2e:a4:ab:e9:
db:de:d2:9c:31:e4:a8:0d:80:b3:a3:fb:c5:60:ef:
0a:ff:7b:48:f9:16:2a:10:85:91:43:14:e2:9c:2a:
1a:20:2f:bd:dd:1f:5a:bb:09:b6:68:7d:a9:32:5f:
66:93:28:ac:97:42:e9:60:39:ac:62:48:d4:e1:bd:
77:7a:22:96:b3:46:48:73:f9:c4:d8:97:0a:76:66:
d7:9a:1c:6e:16:72:e2:00:60:73:6c:36:86:cb:24:
2d:53:28:d6:12:bc:d9:35:24:b2:36:d4:7d:86:dc:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:2F:AA:4E:68:3B:A8:4C:02:AF:6A:8A:44:41:23:F5:03:C9:06
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/egkvqk5oO6hMAq9qikRBI_UDyQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.219.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d9:b1:f2:03:81:65:4d:4c:db:25:d6:42:b7:99:60:e1:d8:
58:9f:98:f7:43:71:6f:36:e4:99:b4:15:3f:df:9c:62:3b:2e:
3c:5b:88:17:3a:09:49:a1:b3:99:e2:fb:fc:ab:f9:ab:04:6a:
fa:84:2b:c6:f6:72:ab:2a:23:ef:a9:83:c8:25:bf:62:b7:ec:
ed:6e:d1:14:04:0b:0a:4e:2b:d4:77:c0:2c:82:da:59:2f:76:
9a:73:54:f1:44:91:bb:a1:89:56:e2:31:d7:ec:33:63:14:8f:
4f:2d:1b:05:51:c6:f5:ff:2d:bb:82:0e:14:23:2b:cc:fd:e2:
0b:ba:e7:eb:78:34:30:3b:53:90:9a:07:67:19:77:f4:e6:64:
ec:75:70:a2:2e:a5:4c:cb:0a:84:80:a6:fc:77:ce:f4:fb:a8:
dc:4a:90:fa:8c:7e:d7:e7:9d:7b:96:b1:4f:34:57:3a:a8:5e:
58:28:69:83:a2:ad:28:53:b8:cc:29:d2:50:e4:80:9f:43:e7:
b3:35:7c:1d:ca:70:74:81:20:e1:36:54:35:ff:81:d2:83:95:
7e:90:0a:d9:d0:62:95:85:fa:bb:f2:88:ec:71:ca:df:6f:d2:
62:0b:fc:b6:db:6b:46:a2:48:62:a1:d0:74:61:17:8d:79:dd:
e9:29:49:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ//vMO2h577bvUZcoDzzZQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODE0MTAwNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTA5MmZhYTRlNjgzYmE4NGMwMmFmNmE4YTQ0NDEyM2Y1MDNjOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKErwxlNYsRexilvSOtPDQTOOXkj
g+JkENBz2CqxgOJjBRJ/YInT5lrryKKajxNGO8VzU7CTKWxouD4IOCUhTozXyJLD
QSiqv5f9Z0W8oG6B93zloUttqzyfy7KgT1H2B10gQHA6eePH83i2FGDaaPpXxf8p
hdZNo9U9GXAvPx9jVjKz5eQXod2zeTR38VIqqi6kq+nb3tKcMeSoDYCzo/vFYO8K
/3tI+RYqEIWRQxTinCoaIC+93R9auwm2aH2pMl9mkyisl0LpYDmsYkjU4b13eiKW
s0ZIc/nE2JcKdmbXmhxuFnLiAGBzbDaGyyQtUyjWErzZNSSyNtR9htzQPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHoJL6pOaDuoTAKvaopEQSP1A8kGMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZWdrdnFrNW9PNmhNQXE5cWlrUkJJX1VEeVFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/bMA0G
CSqGSIb3DQEBCwUAA4IBAQBx2bHyA4FlTUzbJdZCt5lg4dhYn5j3Q3FvNuSZtBU/
35xiOy48W4gXOglJobOZ4vv8q/mrBGr6hCvG9nKrKiPvqYPIJb9it+ztbtEUBAsK
TivUd8AsgtpZL3aac1TxRJG7oYlW4jHX7DNjFI9PLRsFUcb1/y27gg4UIyvM/eIL
uufreDQwO1OQmgdnGXf05mTsdXCiLqVMywqEgKb8d870+6jcSpD6jH7X5517lrFP
NFc6qF5YKGmDoq0oU7jMKdJQ5ICfQ+ezNXwdynB0gSDhNlQ1/4HSg5V+kArZ0GKV
hfq78ojsccrfb9JiC/y222tGokhiodB0YReNed3pKUnz
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:04:25 2026 by rpki-client