Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TXWyzC5Kx6Lvq83lnOUkjR_knmQ.roa
File: TXWyzC5Kx6Lvq83lnOUkjR_knmQ.roa (raw, json)
Hash identifier: Dk/cIYV0kXd2s3FuW8cTEVhnQU/uTTVlD1dNBCwaCOo=
Subject key identifier: 4D:75:B2:CC:2E:4A:C7:A2:EF:AB:CD:E5:9C:E5:24:8D:1F:E4:9E:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F929FD0D99416BD923F346023254C1B48
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TXWyzC5Kx6Lvq83lnOUkjR_knmQ.roa
Signing time: Fri 24 Jul 2026 05:36:14 +0000
ROA not before: Fri 24 Jul 2026 05:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200636
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:9f:d0:d9:94:16:bd:92:3f:34:60:23:25:4c:1b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 24 05:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d75b2cc2e4ac7a2efabcde59ce5248d1fe49e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:2f:36:06:a4:95:e0:97:67:3c:b6:c5:ec:
69:ce:8f:73:66:f8:13:af:78:86:f1:a1:28:69:f5:
f9:cd:fc:c2:fe:61:7f:07:c5:98:e0:04:0f:66:e3:
0f:f2:e0:b5:bd:f8:8f:ec:26:be:11:de:74:c9:09:
d9:f7:b9:f6:e2:e9:a0:5e:ef:4f:7f:3a:23:4b:93:
06:d9:55:8b:fb:43:6c:bc:8f:fc:a7:19:e3:02:ca:
90:96:7b:3d:bc:f6:f5:1c:19:d0:26:a0:4b:94:d9:
15:d3:4b:a5:1d:58:78:34:f8:c0:7d:b6:d7:d6:71:
d6:8f:e5:13:ff:2c:55:0a:b7:c9:b0:d1:b3:6a:d6:
26:56:0e:44:d0:68:2c:c7:fc:38:f5:6a:b2:98:94:
79:21:6b:86:21:7c:af:6a:e5:ba:18:6c:27:af:5d:
f3:8f:29:5e:5a:5e:3c:22:1e:37:82:cf:5f:62:85:
27:7a:62:73:b2:f3:bb:5d:11:f6:69:4e:e3:78:10:
40:a3:91:8a:8d:84:5b:87:05:c7:fe:d5:e9:36:c5:
c3:fe:ae:47:e7:33:54:a3:08:ea:c4:76:5b:8f:27:
a1:8f:b4:22:6c:55:df:0f:07:c9:54:69:b3:98:54:
20:af:03:ec:e4:3a:17:d7:27:05:ef:3a:82:7c:c7:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:75:B2:CC:2E:4A:C7:A2:EF:AB:CD:E5:9C:E5:24:8D:1F:E4:9E:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TXWyzC5Kx6Lvq83lnOUkjR_knmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2c:29:47:34:2d:04:18:4e:cc:55:b9:be:03:34:c0:9c:55:
5d:0c:09:d1:08:95:70:d8:9d:cb:0d:9f:94:b9:50:eb:c9:7f:
5d:85:fb:72:16:27:9d:11:59:e5:49:eb:1a:17:05:ca:88:59:
97:79:dc:74:f9:05:be:54:88:2a:ae:ee:01:1f:fd:6f:da:39:
3c:64:4f:2b:80:99:1c:38:ce:fc:01:0a:71:e7:38:90:6f:71:
4c:63:70:c7:73:ae:10:4e:b3:37:3d:76:e7:96:2e:60:15:d7:
d1:27:26:e5:e8:8d:3a:69:8a:cc:db:8c:5f:59:26:3a:8d:6f:
23:a0:f0:3c:88:54:ef:41:9c:e5:72:e7:ce:03:23:2c:b2:e7:
89:e9:d8:4e:61:d8:76:3a:b5:02:c9:e7:b3:15:50:70:5d:c6:
34:cf:0f:97:79:b8:81:ce:13:b0:39:27:86:f7:2a:fd:8f:6b:
cd:8c:28:75:96:98:7f:dd:0a:78:0c:09:09:fc:6c:b0:60:ec:
b5:4e:d6:a6:a9:50:d7:ca:fa:c4:06:31:b3:48:18:43:2f:62:
e7:6b:c0:8a:f2:f9:33:76:e8:c3:f0:65:89:09:e6:ad:73:d1:
1c:fb:bc:58:87:4d:eb:30:46:e2:c7:63:0e:30:a8:87:6e:49:
8b:86:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:46 2026 by rpki-client