Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rPznrCONaODh6TUBvclB-NgJ8ss.roa
File: rPznrCONaODh6TUBvclB-NgJ8ss.roa (raw, json)
Hash identifier: 8vIrdksKnahJ3SRsmpqQ1bSchdvYwK2D4p9Aiqz2V5A=
Subject key identifier: AC:FC:E7:AC:23:8D:68:E0:E1:E9:35:01:BD:C9:41:F8:D8:09:F2:CB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FCEC4DDB5112348D08EE8D60CA48858E9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rPznrCONaODh6TUBvclB-NgJ8ss.roa
Signing time: Tue 04 Aug 2026 21:53:56 +0000
ROA not before: Tue 04 Aug 2026 21:53:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14434
IP address blocks: 5.175.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:c4:dd:b5:11:23:48:d0:8e:e8:d6:0c:a4:88:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 4 21:53:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acfce7ac238d68e0e1e93501bdc941f8d809f2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:a6:a6:a4:11:14:b9:c9:a2:eb:2c:26:1c:
9a:c6:43:8d:15:42:33:79:17:53:95:07:a2:0e:6a:
c0:d5:df:c3:eb:3c:f1:d2:bf:a4:ae:0c:3a:b6:7b:
f2:1e:2a:c0:53:0f:4f:01:03:a8:3d:c4:8b:a6:e8:
51:98:8f:42:96:ad:81:61:20:19:e3:78:16:76:68:
f6:d0:e1:d2:17:71:47:03:37:6c:fe:42:87:cb:1b:
5e:aa:52:93:8f:79:b1:81:b6:2d:14:e5:df:b0:fd:
c4:ab:a7:52:6b:5d:62:32:73:c4:14:3b:94:6a:69:
e9:de:55:45:d5:94:af:af:94:68:ea:0e:6c:75:b9:
f0:c9:be:0f:fe:c3:59:59:90:4d:c7:79:ec:75:9d:
3e:ad:22:2c:74:fe:5d:ba:2b:ca:1a:b5:3a:5a:49:
a9:4d:3d:8a:aa:7b:2c:b8:e5:bf:d0:df:98:7b:4f:
c1:90:45:d4:3d:0b:8d:09:1e:c0:27:cb:97:37:6a:
51:51:5d:48:64:3c:1e:7e:0a:85:aa:bb:84:ad:29:
f9:96:99:b1:df:64:15:4e:5e:f7:64:cf:cd:cf:15:
51:b8:38:d1:98:e2:0b:54:2c:de:79:bf:30:d7:30:
8a:16:b6:c3:57:56:34:6f:e0:bb:db:5d:5f:9b:ad:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:E7:AC:23:8D:68:E0:E1:E9:35:01:BD:C9:41:F8:D8:09:F2:CB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rPznrCONaODh6TUBvclB-NgJ8ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.190.0/24
Signature Algorithm: sha256WithRSAEncryption
de:93:74:75:55:83:da:90:32:49:84:12:66:fa:72:0a:75:4a:
56:9d:a3:b2:95:e1:01:df:b9:05:ad:a9:30:a0:1f:b0:8a:80:
55:cf:2a:33:52:56:37:48:ce:4a:9b:77:1b:fb:b6:30:6a:d3:
5c:6f:4d:41:01:04:44:c3:66:64:cc:34:e3:fe:74:ca:ca:a5:
2e:e0:c5:05:bd:9e:df:f2:a1:44:6b:3a:9f:90:de:bf:ac:44:
11:a1:4a:9e:b6:e5:ff:e4:9a:a6:ee:37:47:df:c9:40:cc:a3:
4e:60:94:66:59:e8:ac:be:ab:0c:f0:ab:72:d2:1a:37:17:da:
72:6d:de:4c:f8:00:52:fb:e2:5a:e4:cd:63:95:b1:32:81:4b:
c7:e7:1a:ca:87:0f:55:86:61:d4:97:2d:d8:2d:bc:d8:bb:ec:
41:d4:f6:35:c4:24:87:59:69:e5:49:e9:f5:1f:76:92:53:0e:
62:21:a6:df:72:65:16:00:f9:0f:e2:f5:e2:34:b6:92:c1:b5:
81:86:93:c7:c5:d6:68:94:23:94:9c:be:a1:22:a6:d0:19:53:
ec:c0:3b:96:a1:7f:61:a7:d5:07:43:aa:48:ef:f3:ff:69:96:
5a:9e:a0:89:41:84:e2:7c:87:7f:93:64:6a:c8:14:1a:a3:c5:
a8:24:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:26 2026 by rpki-client