Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zxMoi66H6QutWKiQsyhvoXPg-5c.roa
File: zxMoi66H6QutWKiQsyhvoXPg-5c.roa (raw, json)
Hash identifier: UZAQVKBq0hF99H/mItP0s58IzrWXpe/xljS1ltzIue0=
Subject key identifier: CF:13:28:8B:AE:87:E9:0B:AD:58:A8:90:B3:28:6F:A1:73:E0:FB:97
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EE4771246EEEE6D37FA8D881E5AFE546E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zxMoi66H6QutWKiQsyhvoXPg-5c.roa
Signing time: Sat 20 Jun 2026 09:57:49 +0000
ROA not before: Sat 20 Jun 2026 09:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 5.175.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:77:12:46:ee:ee:6d:37:fa:8d:88:1e:5a:fe:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 20 09:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf13288bae87e90bad58a890b3286fa173e0fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:4d:13:25:ab:c9:4f:c2:49:8c:fe:d3:4c:
b3:be:47:ef:aa:03:21:05:87:37:57:5e:f6:8f:7c:
76:86:1a:81:80:bc:a6:c8:fe:de:6d:4d:8a:b6:24:
41:83:16:30:6c:01:7a:0e:2b:d5:44:ab:2d:d7:1e:
9a:de:a7:aa:78:ff:82:cc:5e:81:a6:a2:81:e3:29:
78:81:37:d3:e9:ee:c6:d9:4d:fa:66:81:4e:1e:cf:
91:3a:2e:55:62:a8:ad:97:0c:41:87:1b:f5:a8:c6:
c0:51:0f:ad:1d:aa:68:af:ea:70:09:27:85:96:f3:
76:a4:80:0f:83:58:01:fd:58:84:4f:c4:af:d5:c9:
b4:72:9b:49:2b:ab:ea:b9:b7:d8:d8:13:44:54:37:
3a:03:ea:c2:7d:c3:ef:f3:d3:8f:c4:a0:fc:79:d6:
f0:f5:be:6e:49:e1:38:be:b7:06:5c:ba:97:ef:1c:
42:af:4f:d2:5f:9a:a0:86:3f:6a:01:d8:bc:90:a8:
ca:04:94:ad:56:5b:a7:64:1e:8d:5c:3b:71:28:33:
c0:50:21:49:0b:c5:4a:e8:fc:37:1f:b5:8f:55:dc:
5a:0c:43:4d:e4:a7:94:65:ad:e6:ba:b8:e8:78:79:
b1:61:a9:f8:f2:cc:e2:23:c4:ff:a1:03:59:41:dc:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:28:8B:AE:87:E9:0B:AD:58:A8:90:B3:28:6F:A1:73:E0:FB:97
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zxMoi66H6QutWKiQsyhvoXPg-5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:35:1d:0d:1b:bf:c6:e1:8b:41:08:76:ec:43:c3:3c:ea:47:
19:e6:01:c7:8a:bb:8f:e3:81:7b:3c:cc:42:79:de:ce:a2:a7:
3d:fd:61:7d:a6:54:f7:74:72:9c:25:f4:81:51:fb:b1:6b:4a:
38:b4:19:60:c6:82:d7:6b:5b:9a:89:3d:b1:0f:ae:ca:29:1f:
d9:ae:d9:72:df:10:7e:da:53:7d:1e:a3:f5:03:98:25:09:ea:
73:27:2d:18:ce:18:0e:13:4a:db:81:4a:9f:07:df:db:48:4f:
3b:8a:b8:ba:bd:c1:9f:dd:a1:48:87:6a:0c:c5:e6:4a:b4:08:
34:83:03:e8:64:7d:86:9c:d3:39:3c:b9:02:a6:56:5e:3e:1f:
33:e4:98:ef:19:4b:d2:00:41:43:3e:cb:0e:c9:42:eb:85:dc:
0b:56:39:7c:27:53:df:ff:8e:96:90:87:e6:4c:46:ac:df:ec:
6b:2c:ac:2c:29:5a:0b:65:1d:a7:e7:4b:ea:5c:c9:7b:31:c3:
c9:ed:1e:4a:53:7c:ba:9f:ea:20:d1:e5:1f:d3:02:91:76:c3:
50:f7:53:31:94:25:9e:96:88:86:90:ad:b5:26:9e:0b:3d:2f:
c8:9a:63:91:28:72:75:67:c8:38:97:89:36:03:38:f9:52:29:
0c:ec:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:41:26 2026 by rpki-client