Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mCX_UTrA8SghWc7iCBdSapdDNwI.roa
File: mCX_UTrA8SghWc7iCBdSapdDNwI.roa (raw, json)
Hash identifier: 74IW6ZYCDvflW5xOUnQCCpUwV9ERpHsMzRy+SwLD/6c=
Subject key identifier: 98:25:FF:51:3A:C0:F1:28:21:59:CE:E2:08:17:52:6A:97:43:37:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F90D08FD98B623BC5B04B6C391C02EE34
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mCX_UTrA8SghWc7iCBdSapdDNwI.roa
Signing time: Thu 23 Jul 2026 21:10:14 +0000
ROA not before: Thu 23 Jul 2026 21:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399515
IP address blocks: 5.83.155.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:d0:8f:d9:8b:62:3b:c5:b0:4b:6c:39:1c:02:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 21:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9825ff513ac0f1282159cee20817526a97433702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:17:60:9b:29:d9:74:0d:42:0b:4b:8f:82:
2c:cc:2b:cf:78:8c:84:6c:24:d1:86:5e:8e:ae:df:
1c:b6:c2:d2:24:59:a6:43:09:33:71:5d:c5:ad:0f:
97:c9:3e:ce:99:73:21:e5:bb:64:af:49:e6:34:ec:
7b:45:47:92:a3:6e:88:02:36:88:67:16:d7:df:42:
0f:1f:fc:ae:81:c2:72:3f:3c:f7:68:98:19:dc:d0:
c4:08:fc:b2:12:32:a2:49:6d:dc:96:2c:96:df:37:
92:10:a1:38:eb:dc:cb:81:68:c9:d7:ce:89:ca:73:
eb:d7:57:ca:10:ad:41:b1:6d:00:e6:1e:99:71:41:
89:e6:1d:98:57:45:6d:44:c7:d5:39:56:51:fa:2e:
f4:1c:02:c1:f5:40:66:63:a7:3e:4c:b6:f7:6c:0b:
15:02:03:81:a4:97:8d:f1:8b:5d:83:98:37:cb:06:
fa:f6:91:f0:aa:1c:7b:ac:4f:e0:f6:60:dc:b2:37:
5d:96:0d:0b:17:d9:80:4d:30:55:08:1c:df:00:1f:
42:5b:6b:34:0a:ef:c9:6d:2e:bf:8b:b6:f9:5c:c2:
7c:a8:52:ea:25:a1:44:4e:12:96:cc:aa:46:ea:eb:
97:96:95:bc:33:12:9b:87:dc:9a:c3:fa:62:21:b2:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:FF:51:3A:C0:F1:28:21:59:CE:E2:08:17:52:6A:97:43:37:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mCX_UTrA8SghWc7iCBdSapdDNwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.155.0/24
5.175.204.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:0a:d0:e5:0c:69:86:99:17:60:07:e4:f9:a7:85:42:69:23:
be:11:26:25:37:64:d7:6a:f0:2e:da:7c:8c:8a:a4:72:c9:1f:
79:b3:15:d2:f5:c0:f4:b0:bc:f2:a0:cc:82:9e:ff:50:4d:4e:
5a:80:d6:f6:79:11:df:ec:41:89:3f:7c:17:34:d0:f1:af:5e:
27:5a:86:dd:ce:18:6d:18:06:2a:49:8d:a1:e2:63:9d:e5:fe:
54:f2:9b:81:26:ab:ba:62:4e:9a:0e:c4:c7:d2:4a:d8:7c:d5:
78:29:af:92:3d:36:79:21:0c:4e:a4:70:f0:c7:57:91:3f:35:
a6:16:24:e0:7b:73:af:32:b1:b5:ed:d4:a6:4d:77:37:0b:2d:
fd:11:9e:d3:13:ad:da:09:b2:c7:aa:19:d3:18:11:7a:df:df:
71:57:e7:c2:43:12:03:d4:23:1a:71:98:e9:2d:93:29:d5:9b:
69:5d:32:43:01:ff:7d:99:45:83:16:95:0b:9a:cd:b4:e2:97:
d4:4a:75:9d:9a:81:c6:46:61:20:b9:5a:bc:e4:e1:08:aa:70:
bb:a6:b5:73:8c:ee:69:5e:ee:49:91:de:7a:d8:c0:83:40:4c:
f5:b6:77:41:07:58:72:7e:27:c8:45:68:1a:8b:94:96:6c:03:
20:ff:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:25 2026 by rpki-client