Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n3kKk7ywphr2BAISO4_3HaDXK3o.roa
File: n3kKk7ywphr2BAISO4_3HaDXK3o.roa (raw, json)
Hash identifier: mkwjIYBfx5AJqtbhmgtLoysKyUI2oMOQ8+XjBQuc4Po=
Subject key identifier: 9F:79:0A:93:BC:B0:A6:1A:F6:04:02:12:3B:8F:F7:1D:A0:D7:2B:7A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D20D2CE9C824F04A509FBB70E774BE8D6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n3kKk7ywphr2BAISO4_3HaDXK3o.roa
Signing time: Tue 24 Mar 2026 17:09:39 +0000
ROA not before: Tue 24 Mar 2026 17:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:d2:ce:9c:82:4f:04:a5:09:fb:b7:0e:77:4b:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 17:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f790a93bcb0a61af60402123b8ff71da0d72b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:dd:71:ab:30:f1:32:8b:c5:af:9e:90:c1:
66:32:0a:1a:67:7d:18:85:e4:d9:34:8a:7d:53:c0:
2f:1e:45:b5:67:6f:35:2f:a8:42:62:a0:a7:04:dc:
79:2d:a4:89:51:cc:aa:3f:d3:e1:0b:8d:e4:f2:50:
14:a4:1d:e3:7f:45:7b:a3:8f:0f:43:3e:32:75:0f:
bb:f8:ef:39:d4:4f:90:2a:d1:3b:4a:83:d2:2e:06:
bd:cd:1d:e8:12:c3:1d:5b:d6:a3:23:f2:d4:36:86:
a9:8d:3c:77:c7:ea:e3:81:a2:da:27:b8:2a:68:c8:
dc:af:26:ea:bf:bb:29:c1:0c:b6:a6:02:23:2d:c8:
e9:f1:5b:05:f0:39:ba:7d:86:9e:b5:cc:43:19:91:
3f:d2:d6:a6:d9:1d:02:09:d5:f0:c7:15:d7:30:cf:
c5:b0:9d:4a:3f:41:2b:4d:f6:c0:50:7c:f1:69:20:
49:d3:c2:76:95:a9:59:12:1b:ef:de:1d:3a:24:e7:
43:40:d8:33:37:28:64:ab:fc:a1:b0:a5:2f:ce:93:
ec:cd:43:5f:a2:fe:2e:6c:13:65:8c:46:fd:28:f2:
1c:19:1d:ac:1e:ad:83:58:33:35:2f:40:90:fc:ce:
8c:99:2a:3d:06:3b:66:c0:56:68:10:54:fe:5a:ea:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:0A:93:BC:B0:A6:1A:F6:04:02:12:3B:8F:F7:1D:A0:D7:2B:7A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n3kKk7ywphr2BAISO4_3HaDXK3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.175.0/24
Signature Algorithm: sha256WithRSAEncryption
72:10:e9:27:29:0e:55:2a:28:d7:ff:fa:ba:3f:51:6f:ad:1f:
3e:f4:01:87:68:bd:38:55:3d:a4:c7:ae:ef:b2:7f:13:68:f7:
48:9c:87:f6:85:e7:14:91:8c:9b:b5:bc:5b:b2:5a:94:68:81:
34:7b:3b:81:5e:e7:4c:7d:ca:c1:54:8b:c2:80:55:64:38:b5:
a9:8e:46:0b:37:9d:62:82:a4:4f:24:fa:83:de:6f:f8:43:cf:
13:00:e6:a2:cb:d4:06:1d:73:b5:72:0b:5b:05:5e:87:c7:1d:
75:83:d4:46:75:7a:c3:7b:5a:85:00:cf:0f:28:bc:24:1c:89:
ea:66:c5:d6:c1:0c:61:67:64:cd:4a:b2:5c:a8:c5:a2:6a:3d:
13:dc:6d:86:2a:2d:58:4f:ba:ec:ef:83:a5:d6:44:e4:57:76:
0b:17:09:dd:99:29:63:cd:7b:8f:24:8b:1b:7e:c1:c4:37:e3:
1f:04:96:3e:ff:07:38:c9:09:f1:c2:60:6d:0f:7a:1d:fa:36:
f8:8a:cf:24:6e:c8:9e:28:4d:88:d4:d9:92:95:41:6d:25:9b:
36:a9:99:9a:9f:f9:77:92:5f:ae:56:7e:fb:41:c7:e5:ad:62:
95:96:d5:2a:bc:70:90:fc:0f:7a:f6:c6:16:1f:54:8d:5f:d1:
7e:6b:5f:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0g0s6cgk8EpQn7tw53S+jWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzI0MTcwOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjc5MGE5M2JjYjBhNjFhZjYwNDAyMTIzYjhmZjcxZGEwZDcyYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Bfdcasw8TKLxa+ekMFmMgoaZ30Y
heTZNIp9U8AvHkW1Z281L6hCYqCnBNx5LaSJUcyqP9PhC43k8lAUpB3jf0V7o48P
Qz4ydQ+7+O851E+QKtE7SoPSLga9zR3oEsMdW9ajI/LUNoapjTx3x+rjgaLaJ7gq
aMjcrybqv7spwQy2pgIjLcjp8VsF8Dm6fYaetcxDGZE/0tam2R0CCdXwxxXXMM/F
sJ1KP0ErTfbAUHzxaSBJ08J2lalZEhvv3h06JOdDQNgzNyhkq/yhsKUvzpPszUNf
ov4ubBNljEb9KPIcGR2sHq2DWDM1L0CQ/M6MmSo9BjtmwFZoEFT+WurWvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ95CpO8sKYa9gQCEjuP9x2g1yt6MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbjNrS2s3eXdwaHIyQkFJU080XzNIYURYSzNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+vMA0G
CSqGSIb3DQEBCwUAA4IBAQByEOknKQ5VKijX//q6P1FvrR8+9AGHaL04VT2kx67v
sn8TaPdInIf2hecUkYybtbxbslqUaIE0ezuBXudMfcrBVIvCgFVkOLWpjkYLN51i
gqRPJPqD3m/4Q88TAOaiy9QGHXO1cgtbBV6Hxx11g9RGdXrDe1qFAM8PKLwkHInq
ZsXWwQxhZ2TNSrJcqMWiaj0T3G2GKi1YT7rs74Ol1kTkV3YLFwndmSljzXuPJIsb
fsHEN+MfBJY+/wc4yQnxwmBtD3od+jb4is8kbsieKE2I1NmSlUFtJZs2qZman/l3
kl+uVn77QcflrWKVltUqvHCQ/A969sYWH1SNX9F+a1+m
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:17 2026 by rpki-client