Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mbCKvcCFl86KUyaAomK0AZlDDrA.roa
File: mbCKvcCFl86KUyaAomK0AZlDDrA.roa (raw, json)
Hash identifier: Y9xKYECTQxOoiuQQFgdvehtarF4xCNlTF18LLy60V/Y=
Subject key identifier: 99:B0:8A:BD:C0:85:97:CE:8A:53:26:80:A2:62:B4:01:99:43:0E:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FB2E1ED56CC83708D359FA703AF6927F7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mbCKvcCFl86KUyaAomK0AZlDDrA.roa
Signing time: Thu 30 Jul 2026 11:56:18 +0000
ROA not before: Thu 30 Jul 2026 11:56:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 5.175.141.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:e1:ed:56:cc:83:70:8d:35:9f:a7:03:af:69:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 30 11:56:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99b08abdc08597ce8a532680a262b40199430eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:f7:50:70:85:f1:7d:36:97:96:d0:87:9b:
e3:c1:da:83:89:4d:cb:3c:1e:ee:3f:8a:f0:7e:b1:
80:20:43:7d:b0:ad:2b:e2:91:c0:fe:51:55:f1:38:
6e:3e:08:7d:81:b3:71:ce:36:af:f0:bc:c6:d0:5c:
10:c9:b2:6c:07:70:62:df:1e:d6:61:57:bc:23:5f:
11:53:2b:90:0b:04:8e:e3:32:7f:4e:69:26:3e:17:
2c:82:9a:c6:39:34:4d:76:89:ca:85:a8:ed:66:b2:
8f:3f:fb:44:c0:95:b7:c0:3b:9a:8f:64:09:d3:39:
3f:17:58:4e:3a:22:a6:33:5e:37:92:93:bf:a5:dc:
70:65:ae:a4:4c:3c:68:ba:ae:50:39:b1:61:68:ed:
98:2d:d1:a3:cb:61:18:f7:aa:0d:1f:5e:26:35:ad:
49:ee:b2:55:7b:99:fc:b0:ea:a7:9f:cc:b1:22:26:
d0:d1:aa:2c:fb:08:5c:ab:bf:e8:17:09:84:3a:c7:
47:57:c4:01:3a:58:b6:f6:4b:38:16:9c:8f:8b:f9:
3a:b4:8b:b2:a2:d7:d7:7f:cb:83:34:27:de:76:8b:
b2:88:46:e0:40:2c:a1:c4:bd:eb:a3:2f:b6:f1:d5:
a5:c1:b0:a8:30:55:1d:a1:fd:82:60:03:43:32:10:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B0:8A:BD:C0:85:97:CE:8A:53:26:80:A2:62:B4:01:99:43:0E:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mbCKvcCFl86KUyaAomK0AZlDDrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.141.0/24
5.175.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9e:4e:65:fc:0e:9c:4a:aa:b2:2d:01:8e:8d:f3:94:08:21:
a6:d5:eb:84:ac:51:db:a5:4a:47:1c:19:52:0b:2d:a0:7c:c6:
e8:6b:63:e1:b5:ca:92:2b:9b:7c:77:77:ae:93:64:d9:c5:12:
b9:9d:6f:a0:17:d7:a4:a4:5e:dd:39:64:b4:2a:de:6c:36:5f:
e4:01:23:96:e5:f3:a1:d4:9c:4b:c2:89:6d:01:fb:90:f2:bd:
13:87:ac:b1:f3:dc:90:07:a0:4c:57:0d:c2:47:ce:52:67:23:
12:3f:47:0e:32:9f:c1:d9:eb:34:27:45:9e:c6:2d:43:3c:e0:
d4:2d:80:e7:69:c9:83:e1:e7:a2:4a:4d:7d:1e:d1:8c:ff:94:
3d:da:0e:08:cd:de:bc:97:9b:90:cf:84:0e:d2:ac:23:40:da:
67:54:78:bb:b8:51:48:89:9f:04:68:b9:e6:ec:af:fa:e7:d2:
fc:4e:86:c5:00:0d:42:51:cb:15:c3:c4:6f:1a:c7:6d:ed:91:
c0:eb:9f:99:11:96:09:02:07:ec:cb:67:13:51:ab:5a:df:5b:
69:ad:31:24:b9:46:31:b0:93:27:f7:85:d7:cb:a9:fe:4c:7a:
21:6b:a9:1d:32:95:40:db:c2:f0:96:06:c9:cb:a2:69:e4:b0:
29:11:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 00:45:58 2026 by rpki-client