Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/InqaaygXYQCHVZbffSf4PXtGMhI.roa
File: InqaaygXYQCHVZbffSf4PXtGMhI.roa (raw, json)
Hash identifier: ywqTy7Fr8yUIWFwCgoDH10XrYKL2P0FZgvSzUVWWqZE=
Subject key identifier: 22:7A:9A:6B:28:17:61:00:87:55:96:DF:7D:27:F8:3D:7B:46:32:12
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F929FD12A62A60C8580706D9496EBDE8E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/InqaaygXYQCHVZbffSf4PXtGMhI.roa
Signing time: Fri 24 Jul 2026 05:36:15 +0000
ROA not before: Fri 24 Jul 2026 05:36:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:9f:d1:2a:62:a6:0c:85:80:70:6d:94:96:eb:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 24 05:36:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=227a9a6b28176100875596df7d27f83d7b463212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:21:8e:1b:4a:85:db:0b:ec:a7:a4:a9:b8:
9c:23:19:51:12:f5:a9:8c:af:5d:2d:4d:48:38:59:
f2:ed:9a:dc:89:00:59:2c:cc:6e:0c:dc:cb:cb:9e:
ec:29:a2:40:99:2a:43:a1:ff:6d:b9:de:8e:1d:c9:
1d:65:8d:e4:ac:5d:0a:3e:5b:86:9d:97:22:04:d3:
b3:1f:63:6c:a3:f7:d8:eb:fb:74:3a:8e:17:2e:21:
fa:ee:25:9f:76:65:27:09:0b:f6:fa:25:89:df:e9:
d1:5c:2a:3a:e5:e9:b2:a7:b7:a1:9e:f9:64:f2:50:
db:f5:91:be:72:f6:69:d2:22:28:e7:ae:22:39:8a:
d7:e9:b1:76:fe:b6:40:cf:28:71:a1:f9:aa:4e:8c:
f5:28:6a:28:ee:4b:50:5c:c5:d9:03:18:48:e5:37:
c2:45:09:a0:fe:7e:3a:b8:7e:35:88:33:cf:52:f2:
cf:0e:11:1a:e3:5e:f7:f4:7d:48:7d:a3:85:ff:e9:
ca:f1:dd:a3:ac:0e:f6:f9:8a:8e:e4:35:73:71:ff:
57:8d:6b:3d:5a:5a:4f:c6:82:0e:b8:0a:20:e2:b8:
32:ac:66:27:c3:98:17:ba:d7:d9:cf:90:63:4f:da:
e0:30:cb:21:bf:25:04:2d:72:9d:59:ab:c3:3e:d3:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:9A:6B:28:17:61:00:87:55:96:DF:7D:27:F8:3D:7B:46:32:12
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/InqaaygXYQCHVZbffSf4PXtGMhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:94:a8:d9:4d:ca:de:a0:e5:eb:88:84:32:8f:8c:4d:45:32:
5a:ec:b8:e4:28:98:c5:6a:e2:89:de:8e:bf:de:ce:eb:17:3a:
14:8f:11:4a:6a:c4:da:11:02:40:32:c9:1a:4a:98:91:10:33:
75:c6:4a:9b:f2:06:7f:db:1d:2b:90:0e:8e:71:41:77:40:fa:
39:c8:83:69:42:a6:ab:48:e1:73:6c:c6:58:92:f6:11:fd:95:
73:23:c3:00:f9:66:07:4e:4c:66:3a:f1:e6:24:74:d7:ab:c1:
85:de:f1:4f:84:0c:14:d6:3e:5c:5a:97:61:9e:9d:ca:33:10:
0e:3d:65:13:cb:7b:fb:ca:92:b1:42:07:6a:1e:04:38:e1:c3:
86:b2:44:26:a5:43:30:88:48:e1:b8:16:fe:94:e1:79:45:1d:
3c:10:c6:ff:be:1f:1e:58:f0:ff:e1:64:4d:5f:f4:a5:91:70:
a1:fb:b8:c3:7d:24:91:01:e0:4d:4e:c0:4b:a1:0a:fb:cb:6b:
aa:06:58:4d:0e:13:78:a6:7c:03:1d:8b:f7:63:8f:ae:0a:92:
ca:16:b4:0c:07:82:4a:3d:08:8f:d7:72:04:3d:71:a6:e1:4a:
1c:72:dc:1e:51:7b:ac:d0:22:91:24:fb:84:8e:f0:b6:4c:cd:
5d:2e:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:06 2026 by rpki-client