Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2Vi2J6UmqWFW6-lcI4XILXaMm_g.roa
File: 2Vi2J6UmqWFW6-lcI4XILXaMm_g.roa (raw, json)
Hash identifier: GV8GtKGny3e1i7YYwmqaBUJmnvTQ5uHiGEB3JyHTvhk=
Subject key identifier: D9:58:B6:27:A5:26:A9:61:56:EB:E9:5C:23:85:C8:2D:76:8C:9B:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D334032C089D943C478B5D91BE799E302
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2Vi2J6UmqWFW6-lcI4XILXaMm_g.roa
Signing time: Sat 28 Mar 2026 07:02:18 +0000
ROA not before: Sat 28 Mar 2026 07:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 5.175.141.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:40:32:c0:89:d9:43:c4:78:b5:d9:1b:e7:99:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 28 07:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d958b627a526a96156ebe95c2385c82d768c9bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:60:26:02:11:2d:a8:aa:30:6e:60:24:94:
07:a6:36:c4:09:c9:ba:6d:b9:cb:7a:56:87:1d:01:
be:b8:ab:ac:5b:98:7c:1d:4b:6f:48:b2:79:06:8b:
09:d1:7c:cb:18:74:f4:3e:60:26:44:97:c8:8a:bc:
14:af:99:00:b9:08:60:a5:be:68:b3:80:f7:ec:06:
98:7b:09:36:60:40:6c:89:dd:2f:e6:6b:50:be:5b:
a2:8b:da:c3:7f:50:ea:72:de:a6:d8:87:08:97:ef:
ac:3e:45:11:bd:e1:27:a0:fc:e4:67:7c:87:d6:a3:
4c:01:96:23:49:55:fb:86:11:3b:2d:67:d9:1c:e2:
f4:3d:58:08:47:48:81:b6:43:4e:79:6b:41:66:bb:
5f:3f:22:ca:e4:11:23:fe:5c:66:86:d9:44:08:26:
96:19:d9:4d:93:4b:55:89:2a:6a:3c:19:cb:25:5c:
60:fd:02:18:b8:3a:a0:ed:cb:41:a9:0e:b0:f0:5b:
6e:84:a6:c0:d5:91:6e:0f:a8:b8:13:a8:79:25:32:
3b:fb:22:b9:35:73:ff:12:78:2f:27:8d:75:c5:4e:
7f:0a:f5:3b:d8:03:f0:66:6a:6d:98:16:f4:0a:67:
74:78:6e:12:1a:74:8c:32:f8:5e:2c:dd:26:c0:84:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:58:B6:27:A5:26:A9:61:56:EB:E9:5C:23:85:C8:2D:76:8C:9B:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2Vi2J6UmqWFW6-lcI4XILXaMm_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.141.0/24
5.175.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0c:05:a3:72:70:90:d0:6b:ea:d2:71:8b:a0:b2:50:45:40:
fe:ad:65:46:78:d0:6f:d3:1c:6a:4f:6d:1b:79:2b:43:ae:91:
dd:ab:db:ee:25:5c:ae:32:a9:f2:65:0f:a9:32:f0:8f:82:49:
de:79:d7:dd:18:3f:d6:be:18:71:f8:d7:87:64:08:cd:fc:fc:
15:af:70:42:c6:9e:22:c9:82:b4:2c:97:04:ca:21:4c:02:4b:
b8:a0:03:dc:5d:00:5e:01:dd:86:d7:83:c2:9f:7b:a4:d2:10:
ea:c5:2b:d2:55:5d:b0:2e:2f:31:00:2e:a1:e9:60:4f:2b:a0:
94:0a:b8:a8:54:a8:7c:6a:04:cd:16:92:cf:57:d7:5e:86:42:
36:91:ca:96:3c:0a:92:2d:db:2d:6f:13:ea:4e:f5:a5:d6:a9:
15:18:b3:66:f9:78:6f:fd:65:42:9a:3a:db:e0:46:9f:6a:b5:
f4:39:d6:55:97:29:93:71:92:32:5a:5a:61:8f:52:a7:a2:b7:
a9:d6:a6:56:18:6a:bf:bb:31:97:f2:41:93:88:5d:53:73:65:
b8:c1:8e:2a:59:e1:83:b3:57:10:5b:9e:bc:41:c6:3c:98:e5:
c3:55:2a:e8:0b:59:08:4f:f4:40:7c:42:74:16:41:fe:2c:d3:
ca:61:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:28 2026 by rpki-client