Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vg9DcuZS54WpmbJfQ3qr2RtI4Xk.roa
File: Vg9DcuZS54WpmbJfQ3qr2RtI4Xk.roa (raw, json)
Hash identifier: Uams1In7IG0yoPiGQQOwQSvDRhLGu6cve6VTLgkRTXA=
Subject key identifier: 56:0F:43:72:E6:52:E7:85:A9:99:B2:5F:43:7A:AB:D9:1B:48:E1:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1A62D244E305AC687FE441ADF417DC6C3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vg9DcuZS54WpmbJfQ3qr2RtI4Xk.roa
Signing time: Wed 04 Nov 2026 10:48:58 +0000
ROA not before: Wed 04 Nov 2026 10:48:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215685
IP address blocks: 5.175.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:2d:24:4e:30:5a:c6:87:fe:44:1a:df:41:7d:c6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 4 10:48:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=560f4372e652e785a999b25f437aabd91b48e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:f1:f6:d3:d4:47:6e:18:50:c7:5b:c4:f7:
d4:2c:61:2a:97:39:e5:88:a5:54:20:bb:56:ae:33:
88:54:43:20:3f:a6:f0:0e:86:2c:5f:16:09:af:bd:
78:fb:b7:b3:41:00:82:c1:0a:81:7d:8e:b0:af:1d:
ef:ee:a6:cb:44:72:4b:fe:89:25:f0:2a:8a:c1:fd:
91:64:52:2b:73:e8:9c:87:a8:ae:74:3a:83:e4:73:
51:48:b9:8d:4f:30:3d:bb:27:68:6d:c9:b4:20:1a:
e0:6c:6a:59:04:42:06:93:f8:58:74:86:df:9a:ad:
60:44:93:a8:b1:54:97:0a:ac:5d:0b:c6:6f:f6:9f:
ca:85:21:5d:a9:66:fc:3f:27:13:b4:27:ab:2f:cc:
18:aa:d3:48:98:25:3f:2c:6a:80:d0:65:9d:13:ce:
56:24:e4:8b:3c:e3:ad:fa:e8:17:27:97:b8:6a:74:
49:47:e4:dc:65:7b:1a:c4:1d:b9:e5:7b:09:0e:d2:
40:e4:d7:ae:e9:57:9f:09:f4:db:42:2d:f7:76:88:
d4:52:c5:39:ec:23:2f:49:0c:b7:a0:a2:88:f4:27:
82:60:66:88:4e:49:b9:d9:2d:24:41:b2:27:34:87:
57:1c:96:2c:db:47:a7:ab:ca:d5:5a:ef:87:83:75:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:43:72:E6:52:E7:85:A9:99:B2:5F:43:7A:AB:D9:1B:48:E1:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vg9DcuZS54WpmbJfQ3qr2RtI4Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.239.0/24
Signature Algorithm: sha256WithRSAEncryption
63:44:2f:d7:b5:5f:2f:f0:63:4a:50:01:63:e4:ea:f6:3f:e8:
00:b4:4f:45:c3:21:53:42:79:f0:62:4e:a4:ab:d1:52:61:51:
a1:49:be:ec:be:9e:ff:bc:37:20:aa:06:20:ab:4d:0e:7e:56:
86:17:6c:83:b8:83:80:c2:83:aa:06:72:e4:55:3d:08:08:86:
1e:a4:98:cc:df:9b:da:04:a8:e3:b8:c4:41:3c:c6:07:14:9f:
6b:31:e4:b0:46:80:c1:c9:dc:d3:91:be:72:4b:0c:05:18:62:
ed:95:b4:e3:12:ba:a9:61:66:b5:6a:a6:71:8e:3b:c9:f0:23:
fa:03:56:50:99:94:17:e6:52:b4:d2:6b:23:ec:dc:bb:13:5e:
84:0f:4a:4d:c2:b8:62:47:6a:e3:9e:72:a3:32:23:de:72:f6:
e8:3b:48:55:6e:31:e2:c1:a4:12:0a:d6:21:30:f6:1a:2a:40:
a5:5f:fd:c7:0f:c9:1b:46:c2:9f:11:70:84:95:19:66:ad:e8:
3f:ae:63:4f:0f:10:c8:3f:80:76:09:66:a6:83:0b:8a:56:dc:
26:fa:69:38:61:8c:48:f7:78:5c:22:50:b5:60:cc:11:76:4d:
8e:d6:28:18:1d:8e:e2:a5:5d:4a:91:1e:ee:e4:0f:71:b0:38:
7d:19:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:34 2026 by rpki-client