Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qcaiULY5jOKHe035mP8C_-Birek.roa
File: qcaiULY5jOKHe035mP8C_-Birek.roa (raw, json)
Hash identifier: tpcR/IJnjn80fZefkXZ4A+mcU9SZGNmaneEzgt9k+Yk=
Subject key identifier: A9:C6:A2:50:B6:39:8C:E2:87:7B:4D:F9:98:FF:02:FF:E0:62:AD:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DEA0688CE38EC6B9AA41E46CC75FDE712
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qcaiULY5jOKHe035mP8C_-Birek.roa
Signing time: Sat 02 May 2026 18:49:49 +0000
ROA not before: Sat 02 May 2026 18:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 5.175.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:06:88:ce:38:ec:6b:9a:a4:1e:46:cc:75:fd:e7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 18:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9c6a250b6398ce2877b4df998ff02ffe062ade9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:6d:86:73:b9:50:fd:22:40:1f:58:af:da:
1e:3f:66:ed:8c:b7:3b:19:df:a7:d5:f6:e8:27:be:
68:2d:ad:54:c1:3b:3f:29:2a:41:20:03:ef:66:cb:
46:51:e2:42:fe:0b:39:20:1d:dd:de:dd:86:07:4b:
16:29:af:22:79:d4:b5:72:03:09:8d:13:70:79:bc:
96:53:d4:5f:72:f1:32:ce:a7:61:a2:c9:5b:e1:e4:
cb:31:62:1d:94:62:5a:07:5e:c2:ce:9d:89:31:58:
36:55:8a:6e:f4:24:c5:28:2a:f3:29:06:4e:de:05:
71:f2:b2:1d:97:46:62:bc:ad:8b:b2:ec:c7:22:41:
17:94:7d:c7:c9:01:05:ad:53:9e:f4:62:6e:53:76:
e2:25:23:70:50:51:89:0d:9d:95:fb:2a:3a:be:fd:
62:8a:64:9c:d4:d5:cd:22:20:46:28:15:51:ed:e5:
34:db:05:2c:2f:3f:14:c4:c3:6b:3c:05:a6:6d:5e:
56:c7:fd:5d:b9:d3:a9:5d:9b:c5:f2:b0:84:0b:64:
9b:57:1e:6e:94:c9:ac:ce:78:34:32:7e:aa:87:f7:
23:ae:59:d6:4e:05:4d:0a:2b:ef:7c:b1:dd:36:16:
60:51:74:87:6b:cc:7b:6c:33:a4:79:84:72:8b:b3:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:A2:50:B6:39:8C:E2:87:7B:4D:F9:98:FF:02:FF:E0:62:AD:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qcaiULY5jOKHe035mP8C_-Birek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4d:74:d5:f0:c3:8e:23:66:78:b8:3a:28:83:06:16:c3:1e:
30:8c:b2:4c:58:e5:7d:9c:a5:6e:fb:f0:28:8d:16:ed:ca:9d:
bf:75:5f:a1:ce:23:e2:6d:f1:9b:2b:c6:80:e0:d9:93:74:88:
64:d4:f6:74:67:7c:8a:e9:cd:2b:9f:89:1e:60:45:81:10:d8:
68:eb:47:77:70:7d:5b:31:10:94:b7:8a:bf:52:51:38:ad:e6:
96:90:ba:4d:40:d4:a8:db:96:ba:1b:a3:fa:2c:ac:11:2e:df:
24:af:4b:f9:0a:0a:92:68:ec:78:f1:40:ff:5c:a3:22:31:2d:
04:4e:2c:11:51:63:f5:cc:a7:11:f7:df:49:55:f3:8f:a2:a6:
fe:9e:6e:16:a6:ee:4c:ca:6c:fc:8f:8a:97:03:a8:60:f7:7b:
47:2d:d9:4e:91:fd:30:12:77:d1:73:be:a8:d9:8a:16:b1:ac:
db:88:3b:6e:55:a6:14:2e:05:66:a9:64:fe:3c:1b:cb:29:86:
f3:dd:a2:14:aa:f0:30:a1:9e:ef:ab:59:bd:8b:40:a7:34:cd:
73:ec:ed:20:60:2d:b0:4d:4b:df:25:55:e9:15:06:d6:b3:8f:
f8:22:f7:c1:3b:81:4f:49:a5:72:81:4a:d2:84:9f:9d:e7:5f:
98:a7:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:15 2026 by rpki-client