Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uY5dxHbIvJRgzaxFbbWZTD7ozWg.roa
File: uY5dxHbIvJRgzaxFbbWZTD7ozWg.roa (raw, json)
Hash identifier: t4AahB08fDCA6aPWtEqk21V0GWLBs8io/3jGkTV/jj4=
Subject key identifier: B9:8E:5D:C4:76:C8:BC:94:60:CD:AC:45:6D:B5:99:4C:3E:E8:CD:68
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1AFA1465A13F94EB97C38CA7AF976D3D9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uY5dxHbIvJRgzaxFbbWZTD7ozWg.roa
Signing time: Fri 06 Nov 2026 06:52:24 +0000
ROA not before: Fri 06 Nov 2026 06:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 5.175.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:a1:46:5a:13:f9:4e:b9:7c:38:ca:7a:f9:76:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 6 06:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b98e5dc476c8bc9460cdac456db5994c3ee8cd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:b1:7a:ae:57:70:2d:d2:e6:9b:6f:fe:c2:
62:2f:b8:40:2f:72:76:8e:1c:b1:d7:3e:5e:d0:49:
cb:39:47:7d:40:f4:0e:aa:a5:d9:a5:01:e0:c9:98:
91:7a:45:a4:02:ee:5a:ff:e1:65:3c:0a:fd:f4:a6:
df:9a:37:da:d4:94:0d:f8:18:76:9f:be:2b:82:24:
65:77:ab:4e:f4:e6:df:64:b8:35:9a:27:c2:80:4f:
39:64:e0:d6:60:1e:95:ad:e2:75:d7:b8:79:8c:45:
b7:35:b7:5a:3a:aa:f8:fa:d8:3e:e1:ce:fa:2c:94:
a3:37:76:8d:60:e5:b7:66:1a:51:1a:42:12:bc:96:
63:55:4a:19:6b:9a:5e:d2:3d:9a:29:3a:96:71:87:
62:8f:13:a9:7b:c8:0a:b2:cf:62:40:5c:c0:de:2e:
05:3b:81:ca:65:b1:9c:0b:03:9f:a8:b8:14:08:ca:
2c:47:d8:21:81:e7:0e:b8:f3:8e:cc:c4:7b:56:19:
3b:0c:4e:45:c0:09:72:d5:fb:de:34:46:5f:e8:d1:
97:d6:2c:d9:ec:a3:a7:70:27:20:fe:7c:ae:a3:4c:
6e:4e:d9:5c:77:29:94:75:8f:ca:5e:2a:db:20:61:
fa:f2:83:4d:75:94:37:88:9a:cf:c9:21:a9:fe:87:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:5D:C4:76:C8:BC:94:60:CD:AC:45:6D:B5:99:4C:3E:E8:CD:68
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uY5dxHbIvJRgzaxFbbWZTD7ozWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.170.0/24
Signature Algorithm: sha256WithRSAEncryption
de:08:4f:95:d8:83:72:ac:00:9f:43:63:7e:80:40:0c:42:cc:
00:4a:23:c5:59:76:96:56:cf:12:83:ac:de:a8:d4:48:6b:18:
62:39:e7:71:66:96:e4:8a:d8:8f:fc:26:e1:b1:11:83:37:ba:
12:09:75:33:1f:fa:8d:07:72:18:f2:f1:d3:79:9f:cc:de:5c:
4d:f0:e7:e5:b2:89:3f:5a:b3:13:37:cd:81:63:83:5f:44:71:
c5:bd:b0:33:53:19:e3:21:c8:f1:1b:0c:bb:19:6e:a3:4c:65:
24:af:6e:9c:c0:96:cb:e7:98:fc:46:09:78:17:bb:50:68:4a:
0a:90:dc:05:46:78:21:50:0e:52:c2:04:ee:64:9f:a6:1f:fb:
88:5e:20:6d:b4:66:4a:5a:f9:43:88:71:bb:8e:12:c0:b4:e2:
01:6a:7a:db:0a:77:67:b4:ef:38:87:eb:6f:a2:37:59:96:38:
52:29:9b:7f:0c:71:3a:e1:b7:0c:36:e1:17:58:6f:d6:f2:6a:
07:8a:55:69:b9:85:90:d6:f2:de:d0:48:a1:7e:a0:a0:09:74:
73:26:c4:d5:65:28:8a:80:93:d5:5e:93:33:9e:36:9d:b2:6b:
24:00:4b:43:33:dd:bc:e2:a9:5c:e9:5a:a7:30:7f:20:a6:5d:
50:d4:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:49:35 2026 by rpki-client