Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U_hQ3HDdspB8-NdnUFuz78OMgaw.roa
File: U_hQ3HDdspB8-NdnUFuz78OMgaw.roa (raw, json)
Hash identifier: GN+6kvBip0mrmJVGpZF9Kr34zBgShqflfOw5a0QEZuk=
Subject key identifier: 53:F8:50:DC:70:DD:B2:90:7C:F8:D7:67:50:5B:B3:EF:C3:8C:81:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A085753D54461B01F3B582D80C79FFA476
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U_hQ3HDdspB8-NdnUFuz78OMgaw.roa
Signing time: Wed 09 Sep 2026 09:17:28 +0000
ROA not before: Wed 09 Sep 2026 09:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202485
IP address blocks: 5.83.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:75:3d:54:46:1b:01:f3:b5:82:d8:0c:79:ff:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 9 09:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f850dc70ddb2907cf8d767505bb3efc38c81ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:b2:e5:78:c7:6e:80:8c:e2:ae:4d:23:f8:
bf:37:77:25:2e:7e:52:88:49:36:b0:c7:e6:cc:a1:
ea:41:f6:55:de:30:1d:4c:08:9c:ed:42:85:b5:db:
f4:75:57:66:e6:c1:0d:32:92:56:ef:c5:a5:f0:ec:
82:82:27:d3:95:44:ba:71:68:c4:e2:ac:d9:0e:7e:
9d:29:9b:93:78:46:87:84:54:a6:d8:72:2d:96:9d:
37:18:6e:58:8a:91:56:66:2d:ed:9c:1e:4a:c3:03:
2f:de:13:eb:80:c0:f9:aa:39:28:42:5d:76:d7:56:
17:8c:00:7b:b4:bf:fe:6a:97:f8:2b:2d:c2:aa:a5:
0d:79:ba:31:ed:ab:01:a0:2c:87:ca:20:6e:cc:8d:
aa:1a:96:3f:31:fe:99:dd:1a:60:dc:9b:32:77:51:
a9:13:af:5a:9d:6b:06:e0:61:a4:be:20:59:08:95:
b5:ca:4f:ef:bb:d8:8c:8a:b4:c9:3e:31:5a:7c:53:
2b:dd:9c:3b:45:84:46:2b:88:56:74:1b:09:35:b5:
a1:35:13:44:d3:7f:b6:32:6c:ea:be:ad:f1:86:45:
66:d2:17:d2:c5:63:bc:18:5d:58:35:d3:e6:63:61:
79:8c:86:38:dc:b8:0b:70:6d:4d:4e:07:ac:47:5e:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:50:DC:70:DD:B2:90:7C:F8:D7:67:50:5B:B3:EF:C3:8C:81:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U_hQ3HDdspB8-NdnUFuz78OMgaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bd:08:83:a1:2f:52:7c:86:1e:15:6e:c6:8c:ab:b1:f6:d7:
b5:41:1b:aa:52:a6:54:ae:ec:21:e9:42:9a:d8:c8:e7:a8:f8:
d0:83:07:a8:27:2b:1a:d8:73:c1:e1:f7:a7:26:3f:64:af:29:
83:f7:94:1c:a8:42:a8:18:94:b6:90:69:9a:10:04:2b:b5:d3:
50:db:62:d7:55:0a:9c:c7:10:26:bb:b5:fe:99:e7:20:ce:7c:
5d:eb:a7:2d:5b:9f:e3:7a:bf:8a:68:61:37:43:12:8e:76:24:
3e:71:01:8e:4e:98:ea:c6:75:3e:b9:fc:ef:71:23:36:da:ff:
81:f4:c3:a5:cf:14:ff:22:64:6b:7b:88:b9:55:55:f3:2d:8e:
ac:b5:97:12:c4:84:a1:c0:aa:99:3d:61:42:a5:0a:b0:fd:dd:
f3:97:dd:b7:59:2f:f6:46:79:86:36:c5:00:89:08:3a:70:2e:
bf:72:e6:75:72:c4:09:ca:51:d3:de:6f:24:f0:b9:fb:4c:6b:
fb:1e:60:42:a0:23:dd:9d:b4:6c:36:05:41:ef:e0:ab:53:16:
82:7a:9a:50:d4:e9:8e:50:0c:48:68:d9:5c:34:db:3c:bc:4e:
a5:a1:07:45:81:d0:95:8d:c6:8b:ed:d1:5b:9e:af:08:74:50:
eb:36:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:16 2026 by rpki-client