Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9xrbGddqxdCyuA0s3MivoLerA1g.roa
File: 9xrbGddqxdCyuA0s3MivoLerA1g.roa (raw, json)
Hash identifier: 0M01iluSeK6XvpHWNIvv7kehTjDSclnUv+1pDVQ0Zuw=
Subject key identifier: F7:1A:DB:19:D7:6A:C5:D0:B2:B8:0D:2C:DC:C8:AF:A0:B7:AB:03:58
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CFAADA73290EE86D6F64A55D87F889B0C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9xrbGddqxdCyuA0s3MivoLerA1g.roa
Signing time: Tue 17 Mar 2026 07:23:30 +0000
ROA not before: Tue 17 Mar 2026 07:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206023
IP address blocks: 5.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:ad:a7:32:90:ee:86:d6:f6:4a:55:d8:7f:88:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 17 07:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f71adb19d76ac5d0b2b80d2cdcc8afa0b7ab0358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:cc:7b:4d:26:08:e3:74:7a:9f:8c:07:e0:
76:ce:53:60:8b:a5:df:ae:5c:c1:78:d7:ad:92:e0:
eb:74:74:94:4c:d2:c3:74:97:9b:44:89:d4:70:83:
07:39:0c:33:6e:95:c9:ee:e1:84:03:e1:1a:9d:b1:
f3:58:01:34:95:9b:d5:ce:e9:0f:c8:ff:46:66:6e:
93:f6:c4:d9:3b:15:eb:3e:9c:8f:26:96:a1:a8:72:
ca:dc:31:36:67:44:1e:c9:37:4c:e6:b7:48:64:a5:
91:21:e1:f1:9d:a7:d3:23:1b:21:00:a3:88:8e:73:
d8:63:b5:04:30:b1:b5:6b:44:51:ce:3a:bd:d0:23:
50:04:87:c0:e2:e1:90:aa:e3:f5:ce:83:f8:54:de:
90:91:ed:e4:ec:c5:9e:70:af:38:0f:8e:ef:eb:e3:
d4:f2:1e:6f:38:c8:fa:49:a5:ac:57:25:31:9a:62:
8c:6d:ed:a9:b7:f9:83:41:b8:72:cf:b5:82:87:9a:
cc:69:1a:83:9b:da:91:3b:6c:62:21:19:4e:a8:31:
ba:5b:39:1e:aa:b9:15:cb:28:9f:b2:2f:9f:c0:93:
28:f6:46:fd:a0:ca:ae:00:b3:09:10:d6:1c:ba:d4:
43:33:0e:96:58:38:17:28:7a:c3:d2:45:bf:a9:d1:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:DB:19:D7:6A:C5:D0:B2:B8:0D:2C:DC:C8:AF:A0:B7:AB:03:58
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9xrbGddqxdCyuA0s3MivoLerA1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3e:6a:88:2b:0f:a1:0b:df:6d:fa:77:95:b3:bf:48:33:5f:
53:80:6a:51:03:27:0e:86:6f:97:34:04:90:9f:47:66:29:f0:
3d:5c:e8:9a:5e:9d:b7:44:a0:17:1a:2f:77:6c:c1:5c:71:50:
eb:a8:f9:69:28:3f:8c:ca:e3:e6:7d:c7:4c:b5:39:cf:ed:01:
3f:45:68:83:3f:28:19:48:09:01:c0:62:85:f6:40:2d:43:a1:
18:3e:10:dd:9b:03:87:ef:a3:65:dc:1c:60:b5:ff:0c:40:c5:
cc:ae:28:2b:15:68:77:f2:ce:88:7c:d8:dc:4d:6f:f9:93:d0:
92:f2:78:03:ee:71:31:75:70:35:e8:ce:a4:5d:f9:ae:57:79:
60:74:37:fc:6e:8e:23:ff:9c:6e:e6:c8:39:8d:3e:46:02:96:
95:96:ea:b8:fb:7d:ab:09:c0:12:2e:74:05:e3:fa:f4:c2:bc:
92:a6:0d:54:1b:75:2a:24:bf:ec:86:57:0c:d9:64:00:66:51:
3a:c5:fa:0e:8d:e5:c7:c6:94:25:1c:8e:aa:1f:9b:75:4a:39:
a5:0c:a2:8f:c8:23:26:df:19:d9:3c:4a:5d:d9:5a:00:e5:f3:
5a:9d:5c:21:45:4a:fd:1a:2a:2b:05:24:38:fc:2a:16:6b:74:
f2:27:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:59 2026 by rpki-client