Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NC_eugZrFl-F5Px2A8Kx9Jccjas.roa
File: NC_eugZrFl-F5Px2A8Kx9Jccjas.roa (raw, json)
Hash identifier: tzZYlp/TJqxSeKZes2IfKhf8liCt3HCkogYHSoD0s7A=
Subject key identifier: 34:2F:DE:BA:06:6B:16:5F:85:E4:FC:76:03:C2:B1:F4:97:1C:8D:AB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CEABC3DBABFC66242F4FA859B196D57A8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NC_eugZrFl-F5Px2A8Kx9Jccjas.roa
Signing time: Sat 14 Mar 2026 05:05:31 +0000
ROA not before: Sat 14 Mar 2026 05:05:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213493
IP address blocks: 5.175.246.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:bc:3d:ba:bf:c6:62:42:f4:fa:85:9b:19:6d:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 14 05:05:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342fdeba066b165f85e4fc7603c2b1f4971c8dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:6e:91:6d:0d:62:bc:2e:7c:62:97:d0:6a:
69:07:e8:11:69:17:04:31:d1:14:51:c1:db:46:71:
bb:85:aa:b5:ad:e9:65:a9:14:81:d7:b1:50:42:56:
2a:ec:1b:4a:69:62:a9:4d:5e:19:a8:b9:1c:7c:a9:
44:35:5a:b1:37:d1:b8:64:99:2d:af:df:c7:5a:5a:
9a:92:c5:e6:cb:0f:ea:08:b9:e0:ba:c6:71:46:b1:
b1:51:95:1d:eb:6c:c5:ec:3c:f7:a5:5f:ec:df:19:
07:96:a2:ab:4b:21:16:b7:77:5d:c9:a4:b1:38:9c:
b8:0f:2f:ac:09:0b:d3:6d:34:54:1f:2a:c0:59:ba:
36:6a:c0:5c:e5:64:8b:6d:03:7a:67:03:f6:bb:ca:
e7:a7:f4:dd:29:ff:3c:01:0f:6e:40:bb:e9:81:3e:
ba:4b:f7:d7:82:d1:2d:be:5b:21:18:66:31:79:5c:
e7:34:0d:8a:f4:55:19:ab:86:26:9d:3e:a4:2b:0e:
5b:c8:42:99:e2:2c:b5:03:f7:67:09:0c:38:65:1b:
69:a5:60:b8:14:a9:ea:a8:d6:5c:f5:85:6d:54:52:
05:2d:3c:f0:86:ce:38:71:bc:b9:cb:42:d3:e3:59:
f1:f6:5e:92:15:97:aa:9b:a1:25:d3:8c:84:55:d2:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:DE:BA:06:6B:16:5F:85:E4:FC:76:03:C2:B1:F4:97:1C:8D:AB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NC_eugZrFl-F5Px2A8Kx9Jccjas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.246.0/24
5.231.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:13:89:e4:7b:4c:db:37:9d:0c:19:08:c4:59:b0:98:15:4f:
06:13:80:2d:85:6a:cd:a2:58:41:77:90:c3:2d:c3:f5:89:e0:
22:dd:40:83:44:0d:83:c3:20:d8:8b:1c:2d:18:4e:55:ae:6c:
9e:21:6c:f5:53:dd:ef:0f:f7:a5:52:44:65:63:60:f7:b8:68:
1d:22:f4:05:31:40:06:3f:91:5e:2d:6a:cd:0b:1d:74:a2:ef:
0f:8e:df:dd:bb:d4:eb:34:14:fe:cb:84:cc:dd:87:56:2b:72:
e0:c9:a5:05:a8:14:b1:ea:3b:89:4a:e0:20:9f:06:e0:ed:db:
53:ae:d4:eb:49:3d:8a:31:20:99:06:2b:e3:03:75:2a:cc:de:
f0:a4:1e:6d:28:39:78:04:c8:4a:dd:ae:10:6d:f3:d2:f5:36:
81:e9:be:0a:46:93:15:e7:4a:57:94:9f:bd:40:64:2d:be:3d:
57:1c:7d:ac:61:47:04:64:2d:8b:88:3d:a3:10:b5:13:35:c4:
82:8a:de:9d:83:35:3b:6c:d7:91:0d:21:d3:d8:06:b6:1e:35:
3a:8d:5d:50:8a:07:f3:82:eb:14:58:71:32:a6:c0:4c:05:59:
60:02:e8:22:51:e5:56:d0:f0:99:47:4c:ff:8e:56:66:8c:64:
ed:ec:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:21 2026 by rpki-client