Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yVZS2bloVbozuvFL2zVo8UOs8Uk.roa
File: yVZS2bloVbozuvFL2zVo8UOs8Uk.roa (raw, json)
Hash identifier: 34wSHissAfLe9Bjz+33OHwuhevtIjp9B0qceJyHZOUM=
Subject key identifier: C9:56:52:D9:B9:68:55:BA:33:BA:F1:4B:DB:35:68:F1:43:AC:F1:49
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D1E7F1C944F4351FE6297567A105B77D9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yVZS2bloVbozuvFL2zVo8UOs8Uk.roa
Signing time: Tue 24 Mar 2026 06:18:59 +0000
ROA not before: Tue 24 Mar 2026 06:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:7f:1c:94:4f:43:51:fe:62:97:56:7a:10:5b:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 06:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c95652d9b96855ba33baf14bdb3568f143acf149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:20:47:fc:d9:fb:29:e6:0e:10:c5:93:a3:
bf:c7:ee:90:7b:92:c1:09:ab:26:51:04:71:c5:9b:
0b:69:98:1e:93:2f:b5:af:b7:57:6c:cc:bc:e9:8f:
2c:b4:37:91:7e:ad:9b:af:37:a5:ba:62:3e:a4:17:
f1:2b:56:3d:bf:ba:46:81:55:a3:d2:85:41:fe:f0:
70:49:3b:8b:37:42:64:03:5b:21:9c:3a:44:b4:72:
0e:5a:95:d3:d4:64:a1:27:68:d5:33:ce:0f:d5:ae:
f1:ee:5b:cb:ea:13:65:6d:41:61:88:71:28:60:ec:
cf:28:6e:b5:7d:68:24:54:65:be:5b:b5:6d:e3:e8:
c3:9a:20:fc:90:90:62:e5:65:13:52:c4:52:14:40:
2f:9c:91:25:91:8c:4a:22:51:f0:11:37:c9:eb:9c:
6d:11:33:0b:b8:d9:38:45:cb:d9:46:c7:76:a2:3e:
16:75:27:d9:49:1e:a5:33:3f:15:3b:d7:54:d6:c0:
73:bc:c6:d4:56:89:ae:4c:0f:55:ec:56:46:03:2e:
72:02:ed:48:31:b8:e2:dc:e9:42:e7:ff:a8:41:b0:
2a:56:93:2e:dd:65:f4:2c:6c:05:af:27:93:26:d2:
2c:e1:5d:89:02:d5:90:ec:4d:7e:aa:1b:7e:bf:6b:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:56:52:D9:B9:68:55:BA:33:BA:F1:4B:DB:35:68:F1:43:AC:F1:49
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yVZS2bloVbozuvFL2zVo8UOs8Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:97:71:43:63:eb:73:0d:c8:8f:f9:02:fc:e6:23:a2:2e:10:
7e:d6:31:57:7d:e7:e9:9a:aa:aa:be:4c:31:59:06:28:73:6f:
69:e6:0a:f4:d7:09:b4:d3:81:9a:76:99:d8:6c:8b:bb:9c:57:
d4:81:d7:e1:9c:a7:5d:ce:91:d5:d8:38:bb:f8:35:bb:db:e0:
db:8e:7c:7f:b7:b6:1b:c2:96:a1:4e:86:d0:39:b3:d6:51:02:
ab:15:71:64:c2:0c:38:a0:bd:45:fa:67:3e:9a:d2:c6:3a:2f:
b3:12:6c:79:40:76:57:84:df:0c:59:f7:d3:63:b0:d2:13:c0:
29:91:fb:59:1e:b4:a0:9f:fb:ff:48:ff:5a:7c:26:f1:b7:a4:
b7:51:4e:ef:61:e4:0d:4a:c2:dc:96:eb:df:0b:67:e2:b3:01:
02:ad:a2:31:19:12:77:b8:f4:c7:11:d3:4c:7e:7f:ad:eb:d7:
bd:86:f2:6b:4e:b5:d7:0b:fd:5b:97:98:06:81:aa:35:3d:6c:
6e:33:b7:af:c0:b3:71:2c:b6:59:8a:54:3d:18:9f:70:64:71:
c5:a3:2e:24:1e:e5:88:f7:af:ed:a2:62:4c:6c:c7:07:4a:40:
3f:46:95:e5:24:9e:65:da:33:36:f6:4c:6c:33:61:9b:94:05:
72:d9:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:23 2026 by rpki-client