Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vcHNcJpJoRTH6Q0TOXDCyUX1xx4.roa
File: vcHNcJpJoRTH6Q0TOXDCyUX1xx4.roa (raw, json)
Hash identifier: +4T/jBNQ9dDRMrzTDgEd91J0GJ8V2bk9yifsWZvy99M=
Subject key identifier: BD:C1:CD:70:9A:49:A1:14:C7:E9:0D:13:39:70:C2:C9:45:F5:C7:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FF1E17298CE7DB7145A8BF22B97B6C61F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vcHNcJpJoRTH6Q0TOXDCyUX1xx4.roa
Signing time: Tue 11 Aug 2026 17:31:51 +0000
ROA not before: Tue 11 Aug 2026 17:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 5.175.170.0/24 maxlen: 24
89.144.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:e1:72:98:ce:7d:b7:14:5a:8b:f2:2b:97:b6:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 11 17:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc1cd709a49a114c7e90d133970c2c945f5c71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:b9:c7:ec:62:f4:a5:23:93:58:63:85:ed:
90:be:25:b6:da:d3:00:17:86:e0:4f:20:e0:bc:19:
31:c7:2c:fc:89:1f:1d:25:3a:ec:95:34:9a:4a:4b:
c7:5c:53:0d:c4:32:39:b5:4f:14:98:48:cc:25:56:
34:01:8c:53:7b:1f:ee:b1:32:06:0e:96:a8:f6:2f:
e8:4f:31:cc:9d:7a:35:8b:93:07:55:1f:9f:52:0f:
48:52:50:b9:cb:18:a2:f3:59:60:b0:f8:47:98:38:
6a:91:da:de:1e:1d:5f:2c:0a:e7:56:fb:45:5f:ff:
82:d3:1e:cd:1d:11:6c:d5:c2:27:d8:75:5d:0a:dc:
ae:2e:53:6f:71:8a:41:73:51:2e:40:55:a5:87:cd:
c0:40:1f:8a:e6:62:7a:af:23:27:a5:19:7e:95:b8:
07:0b:40:57:e4:04:13:04:b8:1b:c6:f5:77:29:8d:
64:51:56:e8:5f:2c:d0:6e:1b:e3:57:4e:04:fb:86:
49:e6:23:3c:c6:0b:23:b8:c4:14:16:04:53:58:c7:
79:35:7a:be:7d:b3:fd:1a:d8:b1:e7:b7:1f:6b:49:
fe:a0:1a:8f:a1:40:05:6d:9a:e3:bb:f1:9b:c4:f0:
92:c5:ed:88:91:20:f7:c7:e4:1b:bd:88:2d:b9:2c:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:CD:70:9A:49:A1:14:C7:E9:0D:13:39:70:C2:C9:45:F5:C7:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vcHNcJpJoRTH6Q0TOXDCyUX1xx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.170.0/24
89.144.63.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3f:75:12:90:73:eb:0c:f5:b6:0c:4d:20:bc:be:7b:54:73:
1a:1f:e6:d4:b8:92:bb:b0:48:7c:77:0a:80:2d:46:21:0e:c4:
c0:40:d3:72:fe:e0:30:ee:bb:0c:0d:d8:e7:99:3a:bd:14:f2:
01:0a:a6:a6:68:e9:0d:cd:73:5f:90:ab:a1:f1:1b:06:10:46:
19:b7:01:5f:3f:be:2e:da:3e:a0:1e:37:6a:14:65:c5:31:3e:
60:d5:b1:25:4f:19:62:6c:f6:f9:7e:e0:12:3b:74:8c:04:2e:
cd:86:d7:b6:f8:15:5f:69:2d:a9:4d:db:0b:b0:99:1a:c7:78:
29:42:a2:68:b8:04:bb:45:7b:db:ad:8e:8a:a3:91:b9:ee:92:
9b:65:76:38:e7:3f:74:52:5f:db:bd:ae:a1:3e:b9:c4:da:f6:
f1:cb:d3:db:26:4c:77:1e:0e:b4:66:74:79:ff:cc:75:d9:2d:
ec:a0:fd:9f:f3:7a:70:ca:03:ec:bb:7f:4d:8f:c1:9d:ed:b0:
70:92:3e:27:4b:7e:52:e3:4b:7a:46:f9:ab:37:14:f1:69:5f:
f3:25:c0:3a:f0:a7:c0:04:55:dd:41:02:d1:a3:9d:f0:8f:19:
eb:2b:80:15:d5:84:5a:06:4d:3d:f5:37:b4:bf:9b:2e:53:a8:
00:d7:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:05:06 2026 by rpki-client