Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tVWhbkUWdCKGuKUb0XMVMTDXRls.roa
File: tVWhbkUWdCKGuKUb0XMVMTDXRls.roa (raw, json)
Hash identifier: qKIuiSZXu7zbPiCofdCS+DWTHQaYmgjSOH4X3l45WCk=
Subject key identifier: B5:55:A1:6E:45:16:74:22:86:B8:A5:1B:D1:73:15:31:30:D7:46:5B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CFFBC343CAE4F1F78EB6151CF7F857E05
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tVWhbkUWdCKGuKUb0XMVMTDXRls.roa
Signing time: Wed 18 Mar 2026 06:57:30 +0000
ROA not before: Wed 18 Mar 2026 06:57:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 5.175.139.0/24 maxlen: 24
5.175.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ff:bc:34:3c:ae:4f:1f:78:eb:61:51:cf:7f:85:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 18 06:57:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b555a16e4516742286b8a51bd173153130d7465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:57:45:31:82:d3:bc:2a:8e:1e:c8:ad:ab:
19:62:c6:75:b2:c3:01:cb:c0:a0:ad:4b:36:03:e7:
36:87:eb:8e:6a:04:c4:af:3d:72:8c:46:07:11:a0:
d1:92:b8:62:8f:0c:fa:41:9c:d4:5a:46:13:3f:7f:
fa:65:9e:6f:b2:8c:86:f7:b7:d2:94:e0:d8:8c:fd:
a8:5a:d0:61:0b:7d:76:e4:9c:51:64:ac:24:d0:61:
ff:7e:29:35:cd:c8:e5:b2:d7:a3:5e:f4:31:ca:2b:
9e:5a:64:53:3d:9f:61:2c:0a:f1:c8:f3:39:7a:16:
d2:b6:dc:01:84:19:c7:4f:f8:cf:20:89:4d:fc:08:
28:08:1f:27:07:13:a3:e3:2c:82:62:74:c6:58:50:
a8:9c:5e:6f:fa:5a:73:5c:0f:e6:6c:f7:e9:91:19:
bd:f8:2d:b6:24:51:48:62:09:7e:b2:48:71:30:e7:
6b:fd:44:c4:dd:90:14:d4:0f:40:54:30:bc:b9:ef:
bd:bc:9e:d9:21:2f:0b:c6:1c:de:c7:9b:c1:36:31:
87:05:f0:0c:02:07:08:bf:01:84:70:57:16:8a:2e:
a5:e7:2c:5d:cb:47:95:3b:48:62:39:f3:50:63:ba:
fa:a2:a2:d0:8f:51:bd:69:89:51:d4:ed:45:e5:41:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:55:A1:6E:45:16:74:22:86:B8:A5:1B:D1:73:15:31:30:D7:46:5B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tVWhbkUWdCKGuKUb0XMVMTDXRls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.139.0/24
5.175.167.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6e:01:ad:4c:60:24:3e:8c:31:87:1b:e1:7d:25:19:fe:02:
06:42:ab:50:91:d7:31:5c:53:8d:4e:c9:ba:52:3f:51:4a:a6:
3f:3a:45:0f:3a:02:3a:60:b2:14:5d:62:31:84:4c:7e:5d:8a:
b4:eb:77:e7:fd:89:ce:07:e1:2e:10:87:4d:12:23:0a:95:d1:
d3:d1:18:ab:32:14:fb:22:20:7c:ac:dd:2f:26:be:03:c2:ea:
00:b5:3e:94:f7:92:da:ee:2e:f7:82:9d:b9:2f:3e:ce:e3:e5:
6d:64:01:46:23:0b:01:3d:c0:b7:68:5e:ca:3a:56:9b:ce:11:
9d:35:cc:d5:eb:f2:a2:c8:9b:2a:ff:36:ec:7b:2d:8c:e8:dd:
79:48:88:ec:fd:2e:f1:56:dc:82:ba:e0:e0:88:47:3b:38:49:
0e:37:be:7c:6c:9e:6c:a6:5f:ad:2a:4c:8c:63:9e:8e:62:86:
d3:d6:f4:12:e7:d6:c1:27:9c:95:93:03:d1:77:9e:2b:34:1f:
6a:4f:78:cc:cf:0f:33:5a:e4:53:83:b5:12:0d:4a:48:27:40:
37:f6:47:00:39:5b:50:64:4e:1e:53:82:1b:f8:83:36:a9:c7:
9c:a7:ba:a9:9e:36:fd:aa:35:99:e7:8f:e5:54:37:e3:88:9b:
1b:7d:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:19 2026 by rpki-client