Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hEEYJq1SxHgj_TiAkYhPD6YIyqU.roa
File: hEEYJq1SxHgj_TiAkYhPD6YIyqU.roa (raw, json)
Hash identifier: wnHuwg5i0AuL8IIfL4SJBbdAisx2IOXiudGJWTVMsh0=
Subject key identifier: 84:41:18:26:AD:52:C4:78:23:FD:38:80:91:88:4F:0F:A6:08:CA:A5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E070DAE288F33F1AFDDA2685994F5B8BE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hEEYJq1SxHgj_TiAkYhPD6YIyqU.roa
Signing time: Fri 08 May 2026 10:06:37 +0000
ROA not before: Fri 08 May 2026 10:06:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201749
IP address blocks: 5.175.145.0/24 maxlen: 24
5.175.158.0/24 maxlen: 24
5.175.159.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:0d:ae:28:8f:33:f1:af:dd:a2:68:59:94:f5:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 8 10:06:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84411826ad52c47823fd388091884f0fa608caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:52:d3:5b:c6:f5:44:4c:c2:ae:35:8c:20:
3f:45:52:91:44:c2:9d:1d:9c:66:bc:c7:ab:82:f1:
53:16:1d:d3:72:13:55:2d:c5:2a:40:c3:3a:84:80:
78:20:ee:f8:c0:05:2b:68:f3:8b:0d:5b:5e:78:cc:
8f:fe:3c:75:13:48:e8:a6:c0:73:0c:19:5a:af:38:
0b:54:84:ce:12:89:ed:8c:10:c6:76:13:64:3e:5c:
80:2a:48:a1:8e:da:93:cb:70:2f:47:14:1b:84:96:
b2:c2:fa:48:8b:45:f1:85:84:54:9d:c3:85:a4:73:
11:2b:a1:40:84:3c:23:41:44:b8:07:e3:10:8b:6b:
36:fb:92:81:a4:85:7e:46:da:d8:28:6f:c6:55:82:
1f:72:45:b6:bd:82:34:da:6b:41:f0:31:e4:08:26:
4b:b5:01:89:45:61:d2:9b:97:b3:62:f9:9f:ae:1f:
54:a6:b0:86:13:b9:6d:c0:ea:91:0a:30:2c:8e:2a:
df:c0:47:e5:63:6c:39:d2:de:a3:19:c3:d2:7d:c0:
5b:73:ed:7d:6f:55:84:b7:04:43:7c:6b:72:e6:85:
93:7b:5c:77:51:4b:1a:e6:c3:dd:d3:e3:cc:c6:bd:
6a:03:0d:46:11:df:96:35:91:a7:e8:ed:c1:c8:de:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:18:26:AD:52:C4:78:23:FD:38:80:91:88:4F:0F:A6:08:CA:A5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hEEYJq1SxHgj_TiAkYhPD6YIyqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.145.0/24
5.175.158.0/23
94.249.248.0/22
Signature Algorithm: sha256WithRSAEncryption
83:19:e7:90:ab:af:b8:ea:a6:91:0e:f0:6b:88:31:e9:99:8f:
bc:5f:2f:ed:9e:65:e3:78:f6:a0:84:ed:e2:9a:e4:12:84:de:
fc:fe:7b:68:a8:95:b0:93:ef:f3:0f:22:fe:b2:d8:69:b5:cf:
2b:f7:9c:16:fe:2f:f0:00:43:cd:0e:bc:75:89:81:b5:a4:ff:
41:a1:e0:e6:e5:d5:d3:0f:03:eb:e3:02:75:08:8f:11:7d:54:
5a:fc:95:92:39:16:15:8b:95:29:4c:83:71:0c:99:8f:c9:f6:
9c:8d:fa:d4:7f:49:03:29:73:10:f2:2c:ce:40:6d:0e:d6:46:
49:6f:8b:2b:5f:b8:17:9a:60:ae:1d:43:98:aa:c5:32:d3:6d:
a9:8d:b9:ef:bb:bc:46:3b:e0:08:ef:03:a3:3c:c4:a1:77:fd:
8f:24:69:73:7f:10:33:88:15:ca:1b:49:4d:5e:af:ca:5e:6c:
1e:56:5d:1a:f8:e9:72:26:77:ff:54:b2:fc:d9:9c:15:90:32:
46:a3:e5:23:85:fe:b9:30:77:78:43:7d:73:7e:83:8b:26:49:
61:3e:9b:77:55:6e:16:c2:8d:43:b8:ea:3e:ae:1c:d9:d7:cc:
d7:20:fc:ad:d1:0f:db:0d:fd:15:29:0e:ea:84:c4:30:50:ee:
67:bc:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:59 2026 by rpki-client