Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XpsfUYrb9xNvwQT22Nm18K-l0fg.roa
File: XpsfUYrb9xNvwQT22Nm18K-l0fg.roa (raw, json)
Hash identifier: Y+GY3AQ2QJu7W8+QXu9YNKpwUYxVZ9raTNU8NR9NpFk=
Subject key identifier: 5E:9B:1F:51:8A:DB:F7:13:6F:C1:04:F6:D8:D9:B5:F0:AF:A5:D1:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1A3B676F9CA371C517DA1FB1B5198E465
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XpsfUYrb9xNvwQT22Nm18K-l0fg.roa
Signing time: Tue 03 Nov 2026 23:20:06 +0000
ROA not before: Tue 03 Nov 2026 23:20:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213512
IP address blocks: 5.175.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:b6:76:f9:ca:37:1c:51:7d:a1:fb:1b:51:98:e4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 23:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e9b1f518adbf7136fc104f6d8d9b5f0afa5d1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:99:2e:0b:fd:d6:cf:72:f8:0a:55:43:fb:
5d:44:9a:64:84:db:c7:71:70:b2:aa:5b:df:a9:fc:
67:e0:18:1b:1a:c5:32:6c:26:cd:14:1d:b4:72:2e:
7f:cc:5e:c3:48:c9:14:57:fc:2d:8b:32:30:3f:a6:
9a:ff:7b:07:aa:73:f3:ba:90:e8:4e:dd:fd:c4:c9:
cc:24:9e:77:84:7a:2e:de:5d:61:f3:5b:c1:9d:59:
49:b4:67:be:9e:a8:5f:3f:77:a2:0f:77:fa:4f:ac:
9f:e2:50:03:c5:24:33:48:a4:23:e2:b7:b2:bc:bc:
ce:15:e4:26:20:d1:ee:5b:4f:85:53:5b:86:69:c2:
1d:ee:7b:05:e1:4d:9f:0c:c4:76:13:b8:5d:f8:43:
8c:e6:49:b1:7e:23:ca:8a:cd:3e:e4:c3:a5:90:15:
92:fd:d1:b3:a7:3c:97:3c:cb:fa:42:93:d8:b1:8d:
09:b8:5c:8d:f5:e0:62:bd:17:0a:d6:e7:53:d2:9d:
26:03:6a:67:0d:c7:5a:69:b3:48:69:72:b9:f8:32:
48:5a:43:a3:9c:97:e3:b5:19:3b:9a:c0:c8:66:3e:
68:89:f2:ae:65:5f:6b:2a:21:c6:8d:ab:e6:34:fe:
bb:8b:7b:d3:12:eb:a8:b4:f5:ab:ae:9c:8c:bf:1b:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9B:1F:51:8A:DB:F7:13:6F:C1:04:F6:D8:D9:B5:F0:AF:A5:D1:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XpsfUYrb9xNvwQT22Nm18K-l0fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:35:57:2d:55:b6:39:3a:25:d5:32:2a:f2:b7:6a:42:1a:8c:
05:b6:32:82:c6:9f:eb:ff:4b:21:f3:81:9a:96:f0:7f:ac:e5:
58:69:df:a3:c3:5e:f0:a1:ec:f5:9b:ff:12:a1:b0:80:cb:7c:
38:1c:5a:64:89:be:d8:4d:f0:fe:f8:54:24:48:1b:eb:01:ae:
b5:d5:99:f3:73:ce:4b:84:37:65:2d:cc:82:9b:3e:e9:43:98:
c8:e7:e4:c3:fa:fa:87:6e:5a:ec:fa:80:05:e0:37:4a:c0:df:
08:ee:27:82:76:5d:9e:07:fd:15:85:2b:75:b7:8a:98:39:12:
76:a0:15:90:db:ab:12:21:3d:36:4e:c0:d9:ea:8c:ca:6d:46:
56:3f:61:6f:f4:90:8d:09:80:2e:ec:41:6a:3e:b8:18:ed:23:
52:4f:23:a1:3a:90:92:82:9d:b2:85:fe:d9:0e:d0:75:db:8e:
0b:ae:26:18:ab:56:71:95:20:fa:45:d2:83:3f:e3:45:de:56:
e9:f6:c0:61:19:9f:b1:84:4e:52:6b:70:91:6b:af:c5:d3:e7:
fd:ab:2a:90:dd:ca:56:2a:98:f2:c8:02:0a:6b:dd:f7:d2:20:
51:ad:85:3f:fa:23:7c:62:41:25:82:e7:d1:a0:52:26:8b:9f:
62:1a:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:30 2026 by rpki-client