Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t1df4BHdUG9wjdzMLe7X6ylR8rI.roa
File: t1df4BHdUG9wjdzMLe7X6ylR8rI.roa (raw, json)
Hash identifier: WKBbuNyzzVUVdldIrFLOUu261hAueXb8mGdNDK6Rp00=
Subject key identifier: B7:57:5F:E0:11:DD:50:6F:70:8D:DC:CC:2D:EE:D7:EB:29:51:F2:B2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F7EF63F34435E19DAF0159489907A7DE0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t1df4BHdUG9wjdzMLe7X6ylR8rI.roa
Signing time: Mon 20 Jul 2026 09:58:15 +0000
ROA not before: Mon 20 Jul 2026 09:58:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211619
IP address blocks: 5.175.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:f6:3f:34:43:5e:19:da:f0:15:94:89:90:7a:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 09:58:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7575fe011dd506f708ddccc2deed7eb2951f2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:49:05:5a:0f:44:85:05:a3:bd:b8:08:19:
84:57:d9:1a:2d:a5:19:df:31:22:d5:e0:e6:3f:91:
3b:b0:1d:b0:cb:64:3c:98:1a:c7:9f:b3:ce:86:70:
bb:b8:cd:ca:2f:67:39:59:36:3d:ff:01:33:f2:30:
66:23:ba:6c:48:74:59:24:ac:0c:c7:5f:00:a8:2e:
3b:d4:3a:7b:4c:88:01:94:dd:00:52:1c:fc:81:2c:
c6:0e:2d:17:a5:19:aa:a6:c0:06:ac:0a:01:51:20:
38:48:e1:23:ed:c7:74:a7:03:78:2b:ce:0a:b3:a4:
2c:15:b4:67:ae:6c:e6:45:30:f8:03:c1:b5:d3:a9:
12:41:26:14:87:a2:e0:a7:18:8b:e3:d1:40:76:af:
f8:98:ac:56:1c:49:62:1d:3b:26:15:66:0d:5e:6c:
b8:96:4a:89:0b:e5:09:0b:03:ee:f3:8b:9c:47:95:
4f:5f:82:b4:77:59:82:c4:57:4f:4a:2b:b2:2d:ac:
0d:5d:ad:90:c6:c1:7f:97:2e:fd:46:d2:bc:16:75:
39:9d:56:d4:8a:a5:ff:ee:df:6b:bd:2c:a9:a5:d5:
97:b2:88:85:37:94:f0:9d:e3:83:60:48:40:6c:d9:
3c:cb:1d:83:6f:f1:b1:8e:bd:b3:a4:b5:70:d4:32:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:57:5F:E0:11:DD:50:6F:70:8D:DC:CC:2D:EE:D7:EB:29:51:F2:B2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t1df4BHdUG9wjdzMLe7X6ylR8rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:cc:87:37:46:ea:7a:c5:9b:15:84:00:72:05:f6:82:2d:b5:
69:97:0b:09:42:f4:6d:70:36:91:ce:ee:be:6a:bb:2e:ed:1c:
8d:98:c5:5b:19:70:2e:54:2b:57:82:9a:cb:92:04:83:15:35:
b1:e6:81:f2:a7:72:55:07:5e:b1:f9:77:01:59:3d:ad:6f:b2:
3e:82:75:b6:a6:41:e2:59:b0:9a:61:93:a3:33:ac:fd:5a:23:
43:05:6e:6f:93:a9:86:54:91:eb:f0:a5:ae:20:de:db:a5:22:
88:1f:ca:18:f8:2b:5f:7e:bd:24:0d:58:34:c3:c4:b8:7e:89:
71:dc:76:05:55:a6:df:9f:f0:76:39:be:6f:2b:9e:e4:b7:86:
d4:3a:42:18:96:36:d6:38:eb:cf:6d:6e:8e:28:98:4c:5b:d6:
07:4b:52:a3:33:33:e5:00:7b:12:37:cb:66:ae:a9:47:f9:58:
23:fd:72:aa:3b:81:ef:b0:4d:a6:e2:4b:de:a9:fb:6d:34:90:
88:47:32:67:42:ee:b4:9a:fc:db:37:07:f6:48:84:4c:a4:1f:
f9:89:40:44:35:3a:3d:bf:51:b6:a7:42:74:90:a9:84:f3:ec:
0b:43:b3:45:d6:93:71:0f:4d:22:48:93:4b:5a:71:7d:76:38:
ab:57:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client