Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/R06PZlwiSPciGGuH8I8zYG7G2Vg.roa
File: R06PZlwiSPciGGuH8I8zYG7G2Vg.roa (raw, json)
Hash identifier: I6xDAD+72X11YyadrOlaNkMRFvmAm3S8jwDl0YCN4Hw=
Subject key identifier: 47:4E:8F:66:5C:22:48:F7:22:18:6B:87:F0:8F:33:60:6E:C6:D9:58
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 01A18B4D207092FB2AFB96F877F0054B6C33
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/R06PZlwiSPciGGuH8I8zYG7G2Vg.roa
Signing time: Fri 30 Oct 2026 05:34:09 +0000
ROA not before: Fri 30 Oct 2026 05:34:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216385
IP address blocks: 5.252.97.0/24 maxlen: 24
5.252.98.0/24 maxlen: 32
5.252.99.0/24 maxlen: 32
2a09:4640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:4d:20:70:92:fb:2a:fb:96:f8:77:f0:05:4b:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Oct 30 05:34:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474e8f665c2248f722186b87f08f33606ec6d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:00:d4:37:a1:b5:0c:ce:88:1c:51:0d:43:
72:17:a0:8f:4e:5b:1d:91:0c:de:f0:f7:bd:fa:8b:
39:91:81:7a:42:af:4f:3e:07:c3:1a:e9:d4:b4:1c:
8f:12:14:46:3d:c2:c7:70:58:41:a6:65:54:05:9f:
fd:e7:7a:d5:e4:4b:97:e7:fb:75:e7:3f:5e:47:87:
09:20:91:f6:48:88:c2:cf:a3:7e:f4:e1:2d:ee:dc:
1b:b4:ec:af:5b:e4:3a:ea:36:8b:d1:08:6b:38:95:
44:61:c6:5c:19:a7:a7:53:9f:2c:1c:c6:bf:f6:1c:
e3:30:27:8b:bc:b6:2e:dc:28:f7:fd:b9:39:e7:37:
07:ae:5a:39:c9:9f:d0:46:88:3d:3d:a8:4b:36:c4:
36:16:92:b1:a9:e4:d3:57:dc:a9:6b:ed:cf:0a:9c:
89:cf:36:8b:48:db:fc:33:ff:69:de:3b:5e:93:b3:
57:24:f7:9c:2f:7b:9d:fc:f4:7c:ea:d5:dd:3a:22:
9b:9d:11:01:ac:0c:68:57:8c:25:dd:0d:76:ac:8b:
e9:8d:b7:d5:0e:cb:75:0d:1a:e9:5f:b4:2a:a3:b4:
a4:83:9a:90:23:c9:df:3b:31:0a:3d:96:c5:7b:0a:
48:64:b6:d8:dc:95:96:e5:1f:69:9f:dd:98:e3:6e:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:8F:66:5C:22:48:F7:22:18:6B:87:F0:8F:33:60:6E:C6:D9:58
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/R06PZlwiSPciGGuH8I8zYG7G2Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.97.0-5.252.99.255
IPv6:
2a09:4640::/48
Signature Algorithm: sha256WithRSAEncryption
03:00:bb:1e:dd:50:da:93:d9:3e:fb:34:fb:e1:d0:fe:2c:d1:
f5:8a:3f:83:f2:37:20:99:b0:dc:46:1f:cc:4d:b4:c4:4d:b3:
49:8f:68:be:58:03:c2:cd:88:77:f5:da:55:d7:0a:35:b4:dc:
99:d5:13:5d:ce:43:29:cd:02:47:ce:96:28:49:c0:44:4f:14:
04:86:dc:be:8c:78:28:98:a7:50:54:e8:e0:a4:21:5c:b2:a9:
f8:c1:ed:cd:c8:3b:bf:9b:35:69:bc:ab:7b:ec:5c:48:73:39:
2a:9b:e2:7c:94:da:89:b8:73:64:b5:bc:22:8f:92:da:df:ac:
cf:d0:ba:3f:7c:0f:b9:f7:2e:e8:6f:0b:02:d5:5b:42:34:e5:
7b:8d:a5:14:a0:a7:c4:58:ad:05:e2:a4:65:f4:8c:81:6f:35:
17:fa:23:bd:25:8d:5d:0e:c0:3a:bf:f6:40:59:ac:ad:22:98:
e8:f2:a6:b7:b4:b7:c7:d3:56:d6:46:0d:69:b9:b9:71:d9:e6:
0c:60:8b:e2:f9:63:6e:28:0d:d7:5a:c7:f6:b5:ef:63:b7:68:
be:69:1f:1d:d5:7d:dc:f1:d6:7b:8e:23:72:a0:11:24:71:43:
89:3c:5d:ae:f0:61:5d:f3:2b:c4:3f:1a:5a:4a:c1:8a:31:f3:
45:73:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:47 2026 by rpki-client