Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kxFmBQQWRmEfb7ORrbIoKvO5jIo.roa
File: kxFmBQQWRmEfb7ORrbIoKvO5jIo.roa (raw, json)
Hash identifier: E01FsiQIvhra7xKq2oya1xbo1pT3+1RmPqL2AHp0pJY=
Subject key identifier: 93:11:66:05:04:16:46:61:1F:6F:B3:91:AD:B2:28:2A:F3:B9:8C:8A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FDBF45A3925D3FAB0CCF0C4DB4C0D9025
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kxFmBQQWRmEfb7ORrbIoKvO5jIo.roa
Signing time: Fri 07 Aug 2026 11:20:51 +0000
ROA not before: Fri 07 Aug 2026 11:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199133
IP address blocks: 5.175.134.0/24 maxlen: 24
5.175.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:f4:5a:39:25:d3:fa:b0:cc:f0:c4:db:4c:0d:90:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 7 11:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93116605041646611f6fb391adb2282af3b98c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:01:15:c3:d5:76:da:8d:fd:0a:6f:5a:80:
6e:23:b9:45:73:fa:eb:5f:68:14:1a:b3:8c:ac:9b:
09:73:4a:48:6f:2a:dd:97:93:10:43:4e:34:9d:27:
d0:54:c6:48:c1:87:c4:cd:a5:38:61:e9:d2:2d:15:
59:70:18:0e:5e:be:f5:25:b4:39:27:21:fa:c9:5c:
b1:9c:1d:3a:19:cd:67:e1:3e:ab:82:c1:6a:c1:b2:
2d:b6:b9:ff:18:2f:f0:5b:2a:b3:51:6e:32:e8:b0:
27:96:a7:bf:37:30:09:5b:20:e9:c0:14:2c:f2:fb:
3f:f1:5e:0e:6a:0f:de:a1:c5:04:dc:32:f8:43:86:
2a:ee:db:45:03:30:3a:59:ca:ac:89:8f:df:a8:51:
f7:fd:0f:30:29:35:61:1b:f8:d3:9a:b2:ab:ef:28:
57:6e:7a:cb:fc:4e:9a:d1:ca:8c:83:f6:4e:19:49:
d3:37:8b:d9:7e:1d:18:e1:c4:a0:c8:80:b7:68:51:
07:14:37:7a:5f:2d:7f:29:ea:4f:ba:13:d9:5d:f3:
54:1a:bb:9a:de:75:4c:5f:ba:3d:b4:5a:16:10:ec:
ad:6f:35:91:ad:75:80:50:a5:53:34:85:ef:19:0a:
53:c5:6f:5b:a3:3f:0d:bc:3f:ef:88:91:27:05:46:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:66:05:04:16:46:61:1F:6F:B3:91:AD:B2:28:2A:F3:B9:8C:8A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kxFmBQQWRmEfb7ORrbIoKvO5jIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:64:5f:0c:a3:68:be:90:ad:bc:c6:b6:71:29:8b:aa:d6:94:
57:cf:be:f5:e4:64:0d:2b:e5:a7:16:bc:74:21:be:0c:b0:ae:
07:5b:58:15:a5:4d:4c:dc:bd:3e:46:8f:0d:23:fa:d4:c6:01:
1a:48:7f:fb:68:93:f0:04:d2:8f:dc:6c:7d:f5:d4:a4:4d:0f:
bc:29:91:ee:2a:15:da:ba:8c:21:33:84:5c:52:ab:b7:a3:dc:
d2:3b:25:a6:6d:98:f0:2b:85:73:38:80:53:3b:87:cf:0d:0c:
ea:ca:3b:2e:d4:c7:54:48:bf:0a:fe:00:27:20:a9:79:85:18:
27:f6:52:e2:44:47:0b:72:19:50:7c:21:01:13:41:0c:e3:f0:
e4:76:7d:16:ad:0a:ba:07:39:12:e5:1d:03:e1:76:fc:f3:c1:
36:0d:16:8e:50:8e:de:6c:d3:2c:03:c5:f4:c8:b7:22:08:40:
8e:a8:df:bf:42:54:61:9e:b1:6d:67:e9:e0:06:b2:21:a1:b8:
b3:8d:4f:36:1d:b5:77:2c:cc:95:59:3e:a0:10:01:51:81:f9:
ed:1f:0a:61:17:0f:69:61:2c:fe:ff:81:8a:c5:00:88:a8:7b:
93:f0:2c:bc:59:74:39:af:1b:4a:3d:f3:8e:9b:f7:bc:4d:fd:
5d:d3:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:39 2026 by rpki-client