Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gYxYXy_ewqvTl1zSCpXEPVzuaUQ.roa
File: gYxYXy_ewqvTl1zSCpXEPVzuaUQ.roa (raw, json)
Hash identifier: UIAu56IfI8vOIzfQigBKjgsbK0TjFrSbm2eQ5DddKok=
Subject key identifier: 81:8C:58:5F:2F:DE:C2:AB:D3:97:5C:D2:0A:95:C4:3D:5C:EE:69:44
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CE5D7805C9AB7B87F78F65B7EA49E2AC0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gYxYXy_ewqvTl1zSCpXEPVzuaUQ.roa
Signing time: Fri 13 Mar 2026 06:17:11 +0000
ROA not before: Fri 13 Mar 2026 06:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30823
IP address blocks: 5.175.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:d7:80:5c:9a:b7:b8:7f:78:f6:5b:7e:a4:9e:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 13 06:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=818c585f2fdec2abd3975cd20a95c43d5cee6944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:bb:d2:9a:b7:35:e8:28:7a:5f:32:c1:b3:
32:fd:71:d1:1f:5c:b1:2f:67:44:f9:47:2e:fb:44:
f9:c7:33:c2:f6:5b:7f:f0:00:49:92:91:15:f2:93:
32:16:e5:7a:5e:ce:9b:0a:ec:d3:00:57:ac:ed:de:
8f:d3:af:a1:52:c7:50:c3:e9:c7:1b:c5:85:d9:a0:
b0:fa:97:23:2f:82:6b:79:8a:71:e6:93:e6:72:a9:
8b:0c:93:07:1a:7e:b8:4b:e5:93:ae:12:4d:56:25:
b7:1b:08:cb:a5:f7:5c:ba:b0:42:8a:bc:5c:51:85:
fa:ae:b2:c5:a4:89:73:ca:87:5b:46:5e:a8:9c:64:
04:99:ab:9f:96:c1:04:f5:1f:86:32:36:3a:ec:72:
ec:c7:88:18:c3:d1:d1:03:fc:bc:4d:7a:48:ee:41:
78:e6:e8:1c:3c:7b:5b:09:3e:23:36:3a:c4:23:ac:
44:23:6a:d5:59:a0:8a:1e:0b:c6:87:ac:63:31:19:
6c:d8:4a:de:39:a0:38:91:04:02:7b:b9:ff:ea:64:
32:b3:32:59:0b:5a:ff:40:70:d5:8f:36:94:2e:af:
5b:0d:8f:21:6d:b8:8e:e1:72:05:0b:4f:d3:f5:37:
52:91:3c:25:51:29:85:e1:b3:bb:21:a0:28:61:8a:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:58:5F:2F:DE:C2:AB:D3:97:5C:D2:0A:95:C4:3D:5C:EE:69:44
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gYxYXy_ewqvTl1zSCpXEPVzuaUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.160.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bd:c8:e8:98:c3:3b:2f:42:9b:2b:e3:30:04:06:3f:cd:26:
2f:f1:d0:67:15:1c:ef:20:7c:dd:76:80:3b:a4:4f:69:1a:89:
19:81:31:56:e9:d0:78:44:37:ee:fe:c1:f1:6f:28:18:39:66:
60:21:bc:2e:67:94:04:bf:bd:6d:08:e1:0f:ec:09:dd:7e:a3:
b0:ab:5c:cb:7d:63:a0:cb:a7:64:5a:2b:ea:82:69:df:31:03:
3d:5c:3e:5f:d4:2f:d9:59:ab:18:e5:35:12:26:87:00:8c:3b:
1d:05:e5:ab:9a:d9:a6:6a:ad:fb:3d:d7:84:7b:c7:c8:af:29:
9f:78:b8:05:cf:cc:3c:9e:8b:a2:ae:e9:e7:bd:01:13:a3:2e:
b9:4c:95:16:73:bc:a2:5d:4b:1d:05:2c:d7:08:f8:e7:a8:69:
1c:15:11:8f:7f:88:ca:60:7e:a5:5e:a1:47:24:a7:14:56:9b:
5c:16:c8:78:0d:00:b4:60:6b:6d:b8:ca:cd:41:62:9f:e6:4e:
c0:c7:b3:d1:b4:a4:9e:3e:d8:8f:9f:05:c6:9b:4f:f8:e4:bb:
ad:b3:81:66:d0:42:10:90:3c:3b:f2:51:8a:36:5d:5d:86:53:
bc:fb:29:b1:b5:f0:72:fa:a4:e4:24:18:71:66:52:28:2e:56:
ec:54:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:19 2026 by rpki-client