Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j9g3e4odqAPMklGryzBk3fYXuvs.roa
File: j9g3e4odqAPMklGryzBk3fYXuvs.roa (raw, json)
Hash identifier: yeGP/MvED2+pD2gGtpgxypDEDqiB4uJoVP6CP2p8WkI=
Subject key identifier: 8F:D8:37:7B:8A:1D:A8:03:CC:92:51:AB:CB:30:64:DD:F6:17:BA:FB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A05A53C1EC6A74353B2E2A575008B4CA31
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j9g3e4odqAPMklGryzBk3fYXuvs.roa
Signing time: Tue 01 Sep 2026 00:17:13 +0000
ROA not before: Tue 01 Sep 2026 00:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
85.118.164.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:53:c1:ec:6a:74:35:3b:2e:2a:57:50:08:b4:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 1 00:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd8377b8a1da803cc9251abcb3064ddf617bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:e5:79:30:c6:3b:00:2d:17:14:20:bb:e3:
49:ae:68:b6:60:b3:26:32:ab:63:8e:84:6f:76:e0:
69:48:52:6e:78:04:5d:d9:f6:fd:46:05:28:13:03:
a2:cb:ec:a8:e9:61:3d:5c:b1:85:b2:e3:e8:df:ca:
45:f3:8c:75:0f:a1:3e:f3:1b:d3:cd:b8:3c:0c:9c:
cd:cb:f3:8c:d1:76:a1:b9:37:cc:6f:f5:7f:2e:1f:
3e:3a:ca:23:6f:2e:8e:63:25:0b:87:b9:52:7a:64:
86:03:61:d2:b1:2e:04:96:9a:62:d3:4e:93:ef:14:
d4:d4:22:5c:e5:00:33:e7:83:26:29:88:dc:04:2f:
8b:a7:93:4b:dc:79:7e:f7:c0:54:e0:3e:58:7d:92:
43:64:f9:dd:d6:90:57:22:13:2d:75:a3:b6:f6:5e:
eb:1c:60:f3:69:27:b0:98:a6:0d:be:30:2a:2c:fb:
74:88:93:4a:58:67:2d:1f:80:67:c7:7c:ff:91:86:
04:fe:e0:27:1c:6c:b6:17:e0:9b:1a:fe:c8:c6:ba:
6c:e0:ba:de:c7:1d:df:cb:1c:61:cd:b7:e8:a0:a4:
62:4b:20:fb:df:80:d0:ea:c4:65:4b:a1:fc:eb:86:
9d:c2:95:f7:78:5b:c4:5d:51:db:0a:3c:a7:08:1e:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:37:7B:8A:1D:A8:03:CC:92:51:AB:CB:30:64:DD:F6:17:BA:FB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j9g3e4odqAPMklGryzBk3fYXuvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.231.207.0/24
85.118.164.0/24
89.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:46:f6:36:81:d2:29:f6:f5:2c:48:c8:3d:de:fd:0b:15:ca:
0f:ae:45:96:ad:4b:99:b6:70:89:a0:39:06:cd:ee:e2:47:d9:
79:a8:0b:40:ff:d9:12:85:f0:0e:bf:a4:65:78:ab:e1:5a:cf:
33:ed:3b:d8:96:83:da:a7:2c:35:3f:cc:5e:06:54:47:06:eb:
53:f6:6f:e9:60:ee:75:b3:a2:29:2e:8a:fe:80:fc:55:0e:d7:
ce:75:88:22:94:67:26:34:d0:d4:da:6b:2e:39:3f:53:30:43:
af:6b:7d:ed:61:9e:77:81:05:80:fa:42:db:35:78:0b:e9:2c:
74:4c:1b:20:58:79:28:8d:a0:3a:58:00:96:4d:e9:de:5b:46:
70:3f:fe:bf:47:9e:b0:4b:98:13:9d:6a:14:e2:9f:f0:81:2f:
7f:e1:e1:39:8b:98:a0:bc:a6:2b:9e:40:f0:bb:14:4b:5b:b3:
e3:21:d4:0a:fa:32:11:cd:99:53:ed:a0:ef:a2:3a:75:d7:88:
cd:15:2b:5e:4e:81:6b:e2:d7:b9:29:86:22:70:00:38:9d:3d:
79:c5:3a:8d:f4:ba:c1:18:3d:63:37:1e:08:39:03:5b:2d:92:
a2:97:0a:6b:c1:24:f7:a7:4a:b9:da:94:09:ee:57:b6:49:09:
fe:d7:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:33 2026 by rpki-client