Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sBl5luSh3kmOLDD9bbRnzpf1v60.roa
File: sBl5luSh3kmOLDD9bbRnzpf1v60.roa (raw, json)
Hash identifier: ac8pHp6c0Ubeba1GFslRL94MCoUwVXmQVsObQAzMCks=
Subject key identifier: B0:19:79:96:E4:A1:DE:49:8E:2C:30:FD:6D:B4:67:CE:97:F5:BF:AD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0F9F180841DDADF3CA51DD8377007506C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sBl5luSh3kmOLDD9bbRnzpf1v60.roa
Signing time: Fri 02 Oct 2026 00:09:08 +0000
ROA not before: Fri 02 Oct 2026 00:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218698
IP address blocks: 5.175.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:f1:80:84:1d:da:df:3c:a5:1d:d8:37:70:07:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 00:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0197996e4a1de498e2c30fd6db467ce97f5bfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:41:79:a4:df:2f:cc:b7:00:9d:14:04:f1:
c3:4b:16:92:65:b5:b6:c8:b3:d9:ed:51:68:6e:99:
b5:43:0d:8e:fa:02:84:f3:ec:1c:ec:91:17:b6:ab:
b8:fe:70:fc:b7:bd:77:f9:d3:99:34:4d:19:3c:6f:
c5:b1:dc:0a:0a:05:be:86:55:32:19:fc:f4:4e:3b:
a5:03:44:ee:ec:57:4b:b2:52:3c:a3:98:e0:eb:a4:
42:bd:13:90:3b:34:d4:f3:52:0b:0a:1e:87:55:b5:
ce:9b:7f:05:4f:d3:93:94:bb:70:7b:3e:08:46:7d:
1c:98:3a:f9:82:20:b9:66:62:1a:bc:7f:01:65:f1:
4f:25:74:f8:fc:95:a2:c1:85:ef:18:2b:1d:79:4e:
e1:03:4e:76:56:c5:74:54:0d:af:66:2f:0c:62:95:
29:2e:e5:63:75:39:05:34:c7:da:94:f5:d1:55:ab:
0d:c8:0c:04:02:dd:a0:e1:21:fe:d5:97:fa:c1:ea:
3f:11:d0:15:77:f2:5f:82:ec:03:b5:76:f1:65:e6:
09:d4:9a:3f:35:44:5c:93:dd:81:6b:24:64:0f:41:
60:32:3c:b2:1a:9c:4f:e5:4d:58:67:02:9d:51:7f:
62:c3:e1:bf:16:e5:b1:f3:b3:87:24:c1:58:95:f8:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:79:96:E4:A1:DE:49:8E:2C:30:FD:6D:B4:67:CE:97:F5:BF:AD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sBl5luSh3kmOLDD9bbRnzpf1v60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:68:98:3b:e4:2c:e8:34:3f:2e:59:e7:04:5f:8f:d1:18:f0:
94:71:c1:01:de:ac:e1:0c:2e:03:bb:9b:4b:24:46:3b:10:1d:
97:81:ba:72:8f:a7:d6:b9:35:1d:98:d5:7b:81:69:cc:79:e3:
63:1c:56:ca:2f:e2:ad:12:8f:26:ef:5e:a6:e8:d6:c6:1c:c9:
56:b3:1c:b5:be:3d:6d:42:05:fc:96:b6:1c:e3:7e:18:34:85:
dc:fc:ce:87:97:a6:27:43:97:d2:dd:0e:46:42:88:c1:e8:c4:
1f:84:06:cc:e8:f8:0a:4e:50:30:ab:37:89:5a:aa:0f:c1:46:
40:cc:65:fb:ce:99:06:62:0e:ff:1e:82:8f:ac:38:20:9f:c7:
e5:c6:d1:b9:57:c2:f0:02:ee:23:3c:ee:81:de:b6:5d:a9:1e:
c2:88:24:49:0e:eb:19:9e:80:0c:67:04:aa:e4:09:5d:a7:fb:
46:0b:62:a5:dc:4a:67:50:89:6d:47:60:5e:78:d8:26:15:73:
c4:12:f4:56:31:8b:e6:f1:d3:eb:8b:42:07:c3:e3:ea:f3:fe:
96:0d:65:bb:a4:78:dd:37:e1:f5:44:81:61:07:ff:6a:91:ec:
64:5c:52:34:71:7a:40:06:d2:b0:a9:e5:b2:73:c3:f0:02:c5:
af:68:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:24 2026 by rpki-client