Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/etAIP6gdRYZFtWzxoef5TmbC-b4.roa
File: etAIP6gdRYZFtWzxoef5TmbC-b4.roa (raw, json)
Hash identifier: 41g64bDra7+ZqwS9IBEsm28sImgJ+BK3N9U6xdgobeA=
Subject key identifier: 7A:D0:08:3F:A8:1D:45:86:45:B5:6C:F1:A1:E7:F9:4E:66:C2:F9:BE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F0C6B165766D75D9DD7A82A20E6966546
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/etAIP6gdRYZFtWzxoef5TmbC-b4.roa
Signing time: Sun 28 Jun 2026 04:09:32 +0000
ROA not before: Sun 28 Jun 2026 04:09:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0c:6b:16:57:66:d7:5d:9d:d7:a8:2a:20:e6:96:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 28 04:09:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ad0083fa81d458645b56cf1a1e7f94e66c2f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:db:fc:0a:a6:72:d0:f5:9c:78:13:a7:b1:
c8:3b:80:27:6e:a7:62:c5:53:43:f7:d2:fe:7d:44:
05:c5:04:c5:41:b6:bb:00:b6:dd:30:0e:10:ec:6d:
e0:46:b0:f5:48:c4:05:10:55:d5:ba:14:63:58:77:
a1:5d:d7:77:78:1d:cd:a4:b2:ec:9e:6f:34:c1:3d:
08:27:40:f8:59:05:31:27:eb:38:41:c4:ab:67:b8:
f3:3a:49:5e:74:87:f4:8d:fc:9d:68:42:c3:99:24:
49:8e:a4:d1:6c:28:db:d4:71:db:53:04:19:de:5a:
c4:13:ac:04:40:42:1e:a9:88:ba:a6:2e:95:7e:0b:
16:3c:e4:1f:71:99:71:f5:5e:eb:fd:ef:35:01:37:
2b:6e:30:92:2d:fb:58:6f:c3:fd:e0:bc:38:fd:97:
51:44:f3:03:4f:bd:32:17:52:6e:8d:f9:33:a2:15:
01:56:39:8d:17:89:3c:66:10:fd:fb:ad:42:a9:e4:
48:bf:34:b6:0b:0f:2d:92:f9:6c:71:e2:ef:47:49:
30:42:27:8a:de:1a:f9:10:84:ba:f8:e3:58:44:a0:
1f:ff:1a:b2:9e:61:bd:5d:29:4c:d5:0c:eb:d8:e6:
dc:67:b3:d4:91:9e:66:aa:b9:21:e1:9c:d6:b9:7c:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:08:3F:A8:1D:45:86:45:B5:6C:F1:A1:E7:F9:4E:66:C2:F9:BE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/etAIP6gdRYZFtWzxoef5TmbC-b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3b:3f:9d:4f:8f:85:b3:30:55:e0:e4:93:6b:8f:2a:d1:d9:
60:e1:e1:33:c0:7a:59:80:8f:28:9b:91:cf:0f:da:1d:3d:9e:
8d:76:3e:f3:e6:c7:fb:67:c8:9f:15:d7:3a:5b:28:fe:49:bb:
2e:ff:6c:86:d2:7a:e4:2b:bb:41:d2:07:14:ec:f5:aa:cd:81:
57:1e:c6:a0:e2:0e:be:e5:58:30:e9:0b:e0:0c:d9:36:1f:24:
b2:78:d6:e2:7f:3e:b9:4b:e5:bc:74:4b:96:1f:3b:68:a3:c3:
c1:20:74:60:61:b5:85:6b:e4:26:8c:28:53:ce:06:3c:05:09:
50:64:77:22:8c:ff:6c:9d:f0:43:57:80:2f:ca:b9:3c:21:54:
22:10:dd:36:53:29:e2:b5:48:86:70:e4:c6:0a:a5:4b:2a:bf:
07:99:5b:b8:97:63:47:8b:3c:cd:ff:e0:c7:49:66:34:81:bb:
af:cf:da:e0:1e:2a:dc:d6:4b:57:85:a4:c0:63:9c:88:15:00:
d0:c5:e0:12:dd:51:0f:bd:22:ed:8f:d6:77:08:ab:75:c1:3b:
26:54:b9:6b:7f:b3:93:4a:29:0a:06:14:d6:d9:2d:2b:07:af:
9c:0f:5d:b8:81:be:1e:c2:be:66:68:d5:41:4a:a5:48:88:95:
e6:16:ac:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8MaxZXZtddndeoKiDmlmVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNjI4MDQwOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQwMDgzZmE4MWQ0NTg2NDViNTZjZjFhMWU3Zjk0ZTY2YzJmOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuebb/AqmctD1nHgTp7HIO4Anbqdi
xVND99L+fUQFxQTFQba7ALbdMA4Q7G3gRrD1SMQFEFXVuhRjWHehXdd3eB3NpLLs
nm80wT0IJ0D4WQUxJ+s4QcSrZ7jzOkledIf0jfydaELDmSRJjqTRbCjb1HHbUwQZ
3lrEE6wEQEIeqYi6pi6VfgsWPOQfcZlx9V7r/e81ATcrbjCSLftYb8P94Lw4/ZdR
RPMDT70yF1JujfkzohUBVjmNF4k8ZhD9+61CqeRIvzS2Cw8tkvlsceLvR0kwQieK
3hr5EIS6+ONYRKAf/xqynmG9XSlM1Qzr2ObcZ7PUkZ5mqrkh4ZzWuXxr6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrQCD+oHUWGRbVs8aHn+U5mwvm+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZXRBSVA2Z2RSWVpGdFd6eG9lZjVUbWJDLWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/XMA0G
CSqGSIb3DQEBCwUAA4IBAQCgOz+dT4+FszBV4OSTa48q0dlg4eEzwHpZgI8om5HP
D9odPZ6Ndj7z5sf7Z8ifFdc6Wyj+Sbsu/2yG0nrkK7tB0gcU7PWqzYFXHsag4g6+
5Vgw6QvgDNk2HySyeNbifz65S+W8dEuWHztoo8PBIHRgYbWFa+QmjChTzgY8BQlQ
ZHcijP9snfBDV4Avyrk8IVQiEN02UynitUiGcOTGCqVLKr8HmVu4l2NHizzN/+DH
SWY0gbuvz9rgHirc1ktXhaTAY5yIFQDQxeAS3VEPvSLtj9Z3CKt1wTsmVLlrf7OT
SikKBhTW2S0rB6+cD124gb4ewr5maNVBSqVIiJXmFqwR
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:02 2026 by rpki-client