Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0zIxejKK8PgZ3__nYsFjCGd1NBs.roa
File: 0zIxejKK8PgZ3__nYsFjCGd1NBs.roa (raw, json)
Hash identifier: MBP0zlhlcbeQWfqVCLLX7oKhhZKWa9lO2//SQUkf2oM=
Subject key identifier: D3:32:31:7A:32:8A:F0:F8:19:DF:FF:E7:62:C1:63:08:67:75:34:1B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DE920BC313169652D180F11D572B49F1E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0zIxejKK8PgZ3__nYsFjCGd1NBs.roa
Signing time: Sat 02 May 2026 14:38:49 +0000
ROA not before: Sat 02 May 2026 14:38:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.175.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e9:20:bc:31:31:69:65:2d:18:0f:11:d5:72:b4:9f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 14:38:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d332317a328af0f819dfffe762c163086775341b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:38:0b:ce:78:1e:c6:74:cc:d2:76:a4:87:
92:8e:b6:cf:4a:b8:35:78:67:81:d8:5e:91:80:11:
38:da:d0:60:fa:ce:bd:e7:64:25:a3:23:ac:6d:e1:
ef:60:85:92:e0:7b:6b:9f:65:a5:42:72:4d:99:a6:
0d:6d:ee:3d:af:63:83:99:31:f4:65:68:a0:bb:69:
bd:3c:d6:b5:df:dc:93:d9:34:18:a4:57:9c:79:12:
24:b6:71:b0:f4:9e:44:cb:da:dc:7c:5a:8d:a6:5d:
3a:b7:74:16:3b:39:5a:d0:44:d5:1a:f3:1d:67:3c:
98:2d:58:54:04:cf:13:be:7a:44:9f:af:29:75:33:
21:49:ae:26:61:1f:6d:c5:77:9c:2d:87:45:e5:5f:
20:f0:62:13:ec:a5:59:85:05:06:33:a5:aa:86:1a:
36:a7:ac:f0:2b:09:69:b0:28:3c:97:59:17:b9:87:
63:fc:06:ab:71:18:ce:59:49:fd:fd:1a:43:9a:66:
b2:fb:ae:53:d9:36:b9:bd:ff:bc:24:34:e5:59:30:
7d:b1:d9:8d:b1:9d:66:60:1b:d2:01:43:e6:7b:80:
04:23:4f:11:97:d2:9b:ab:69:37:16:c4:0f:14:27:
8b:38:90:09:10:d6:6c:25:15:ca:1c:b5:e7:42:5a:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:31:7A:32:8A:F0:F8:19:DF:FF:E7:62:C1:63:08:67:75:34:1B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0zIxejKK8PgZ3__nYsFjCGd1NBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.175.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
78:72:f7:c0:56:ff:fc:5c:2f:1d:5e:a9:a2:15:93:0c:b2:f8:
35:62:d8:57:a7:78:26:b4:ad:33:17:90:c4:3d:17:b6:fc:99:
6b:01:5a:d6:da:83:cb:15:4d:ad:e2:88:2b:ff:44:a7:a0:56:
93:02:f8:ef:d7:71:35:5f:66:31:05:4b:9f:3f:cd:ae:30:40:
a5:cc:89:b9:dd:fa:e8:6b:bc:98:d6:69:d4:56:65:7a:ff:e8:
60:09:3b:79:5d:48:94:c2:59:6c:a2:8e:4c:3e:40:b0:c0:11:
59:03:08:03:3d:42:e1:e9:94:bd:85:5e:c7:69:91:0c:11:40:
26:4a:14:14:51:5a:19:bb:74:f9:fb:e0:8b:a2:2a:b1:bf:f4:
4a:4e:17:64:de:26:cd:ba:22:16:07:a7:c5:4f:69:ef:75:96:
02:3f:c3:18:7d:1c:3c:c1:35:66:78:c5:6a:e3:1b:a9:38:f2:
d2:ed:58:be:5b:fd:58:eb:8c:c3:16:23:f9:7c:42:30:fd:ec:
3e:ad:91:e1:b2:0f:63:2f:e3:63:aa:15:b8:f2:91:2c:5f:96:
5a:ca:f9:7e:a4:e9:79:df:a3:0c:38:3c:06:34:56:9e:53:3a:
98:4b:8f:ad:88:53:05:b6:ce:54:a3:85:53:53:23:af:0f:c7:
74:38:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:35 2026 by rpki-client