Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5kd10e7UHfAWAixRrRfGgZVStfA.roa
File: 5kd10e7UHfAWAixRrRfGgZVStfA.roa (raw, json)
Hash identifier: bnuh2yOJx7M0G3EHv02mdMkEwQExq1/rCvtY3tjj71U=
Subject key identifier: E6:47:75:D1:EE:D4:1D:F0:16:02:2C:51:AD:17:C6:81:95:52:B5:F0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C05A1B9FD4FE5B5A80F4B7977018C636C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5kd10e7UHfAWAixRrRfGgZVStfA.roa
Signing time: Wed 28 Jan 2026 17:23:30 +0000
ROA not before: Wed 28 Jan 2026 17:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 5.175.136.0/24 maxlen: 24
89.144.20.0/24 maxlen: 24
2a02:2fc0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:05:a1:b9:fd:4f:e5:b5:a8:0f:4b:79:77:01:8c:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 28 17:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e64775d1eed41df016022c51ad17c6819552b5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:4c:dc:f7:45:90:f7:20:97:53:fc:ae:48:
da:6e:1a:db:5d:22:16:9e:a5:7f:a6:60:f8:41:dc:
96:37:b1:4b:a7:f6:b5:25:be:20:6f:83:26:e8:d3:
6e:4e:79:81:c0:45:ec:38:41:71:48:81:1f:c5:5e:
e5:fc:5b:07:d0:19:a1:04:79:e1:2d:ea:7d:75:a7:
df:fa:e3:6e:c0:fe:32:64:98:a2:8c:6d:db:1b:b8:
c4:a7:f0:f6:ec:e1:5b:7d:8d:80:97:cb:13:3a:c5:
32:80:02:e3:a3:6a:ce:d6:66:dc:2a:10:f4:0f:8d:
c7:f1:64:8c:51:1f:79:b3:a2:1b:70:8f:16:18:38:
44:81:9f:6e:d4:f2:0b:ba:3b:d5:d0:8b:32:c8:1f:
37:c1:10:8d:2f:b8:2e:6f:df:d9:82:ca:c5:fb:83:
21:90:d3:2d:44:7d:b2:02:55:44:10:7e:16:b5:ac:
63:e4:5a:4e:88:98:7e:81:0d:10:d7:47:69:c5:e3:
f7:b6:e2:77:1c:f5:e1:be:16:5c:04:b6:a5:f3:a8:
d3:c9:b2:47:05:23:7d:4f:cb:5b:33:33:ca:af:c9:
75:4a:07:b8:93:0a:39:fe:c1:e5:b0:11:25:d9:95:
56:ab:52:4c:a9:72:68:25:b2:5e:db:23:1d:0a:7d:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:47:75:D1:EE:D4:1D:F0:16:02:2C:51:AD:17:C6:81:95:52:B5:F0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5kd10e7UHfAWAixRrRfGgZVStfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.136.0/24
89.144.20.0/24
IPv6:
2a02:2fc0:12::/48
Signature Algorithm: sha256WithRSAEncryption
78:5e:3c:bc:30:61:56:0c:3a:83:97:1b:fd:5c:93:80:b3:a1:
87:f2:cd:8b:b1:a1:42:74:61:65:cb:26:39:c4:b4:94:ea:00:
8f:79:56:d6:94:d3:7b:75:a0:e9:6c:3d:67:3b:2a:de:ea:35:
e7:d4:e1:1d:ee:70:3b:32:60:5c:ed:d2:7b:04:b1:9e:bf:69:
74:18:f7:71:04:01:ba:28:06:51:17:23:12:95:95:21:75:62:
58:bd:2a:a4:03:02:15:a3:1f:d4:7e:fe:d5:17:a1:75:d0:1b:
3b:87:0d:18:9f:1e:69:16:ae:72:ee:f3:e2:24:57:cd:1c:90:
9a:79:a7:fa:d7:27:40:1d:f9:d5:fd:c2:1f:8c:e4:00:37:05:
25:68:28:21:68:ff:fc:b9:f1:82:f1:8a:ec:47:a7:42:bf:96:
28:0d:ec:15:af:be:2e:be:1f:36:64:aa:4a:f9:9e:70:0d:ae:
ad:59:3f:2d:8e:ee:17:ec:1d:8d:a2:6a:e1:2b:2b:0b:9f:8e:
01:fd:5e:7c:19:12:d6:a3:ad:44:91:7f:91:18:df:a5:6c:44:
51:35:20:67:6e:99:e6:de:a8:5b:66:16:c1:cd:d6:6a:b0:ab:
22:94:29:c1:d9:17:80:56:a8:31:6e:f7:c4:12:56:32:c0:00:
5c:0a:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:24 2026 by rpki-client