Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z0srPtKkllpDvunURf296KdXXh0.roa
File: Z0srPtKkllpDvunURf296KdXXh0.roa (raw, json)
Hash identifier: fMkeYUHVJPOYSzNfN2N/mkka4eG20edNpYolLg7qQtM=
Subject key identifier: 67:4B:2B:3E:D2:A4:96:5A:43:BE:E9:D4:45:FD:BD:E8:A7:57:5E:1D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FA1BDBF99E1A6C384AB2708FCB81359C0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z0srPtKkllpDvunURf296KdXXh0.roa
Signing time: Mon 27 Jul 2026 04:03:14 +0000
ROA not before: Mon 27 Jul 2026 04:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 5.175.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bd:bf:99:e1:a6:c3:84:ab:27:08:fc:b8:13:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 27 04:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=674b2b3ed2a4965a43bee9d445fdbde8a7575e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:73:1f:32:19:71:f2:13:4f:88:8e:58:5c:
76:d0:9c:dd:64:10:63:71:5b:64:0c:9b:4f:ec:7b:
8f:05:f5:f9:b1:27:b7:07:d3:2b:23:82:45:88:4c:
0b:8a:d8:05:ab:ba:bb:db:b5:ac:c0:9d:ff:4e:aa:
4c:a0:6c:6d:c5:90:6d:d8:2e:37:d9:99:fb:47:cd:
ac:40:65:f3:08:92:f1:f7:f0:c0:bd:95:a6:e7:f7:
9c:89:7f:af:d7:e8:1d:ed:f9:a2:4e:1c:03:06:48:
58:1b:d8:89:73:d3:3d:7d:b9:c4:5a:8c:2f:16:dc:
2e:27:dc:15:3e:a8:7d:7f:5e:41:6f:87:6a:24:87:
33:71:3a:94:68:f6:6e:8f:d8:9a:58:28:5c:aa:57:
99:9c:5d:36:43:bc:09:06:00:22:03:73:e6:6c:6d:
8a:58:1e:35:3c:ce:fb:47:00:be:8e:ca:a3:a0:00:
ae:3a:7b:b3:e5:c6:01:df:e5:d3:06:e1:a5:56:39:
e3:fa:0d:f2:a8:82:4b:12:ba:06:79:ec:a7:4a:e6:
d1:0f:46:38:a0:1d:7c:f8:0d:be:7b:7a:5d:8c:67:
5b:b3:b4:62:f1:76:0d:c0:60:4c:5c:db:a0:64:3c:
84:84:a4:9b:67:47:ac:d0:c4:b4:8d:70:73:08:43:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:2B:3E:D2:A4:96:5A:43:BE:E9:D4:45:FD:BD:E8:A7:57:5E:1D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z0srPtKkllpDvunURf296KdXXh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
Signature Algorithm: sha256WithRSAEncryption
91:eb:4e:6a:cf:80:14:f0:67:8f:b1:e5:b7:e2:92:73:91:2a:
2f:dc:e5:f2:1b:1a:f5:18:c1:c0:04:4b:43:5a:a8:ea:f2:86:
20:91:d7:2f:40:e3:ca:a3:af:f8:a7:c8:df:31:0d:61:64:9d:
42:36:93:59:c9:f3:4d:04:d9:47:8e:04:dd:e5:8a:73:21:79:
f9:5d:50:77:0f:cf:db:19:ab:67:35:1c:bf:9b:58:51:62:b2:
ad:d1:29:f6:80:a3:34:21:2e:b7:9e:86:46:61:bf:4e:4e:ea:
07:74:7b:ae:d5:9e:74:31:c3:7a:1c:b6:07:f4:e8:f9:6f:43:
3c:60:96:18:4a:cd:ec:ae:e8:6b:ec:b8:6b:ed:23:28:6a:bb:
da:dc:0f:ab:6d:68:29:ed:b7:f8:fb:9c:ff:88:a9:40:12:ad:
89:2c:10:ec:a9:18:2d:61:9b:33:96:aa:82:9a:dd:6b:47:07:
3d:e1:41:5e:5d:60:c0:70:8c:d0:da:8c:01:85:46:f4:c3:c7:
5a:48:04:60:14:ef:28:23:44:3b:cd:ad:34:18:49:81:43:32:
70:06:e9:a0:40:55:6d:9f:5b:9e:49:0b:e0:f9:4b:12:50:96:
a2:09:5c:9d:43:6b:97:5d:43:e6:96:18:b8:49:69:11:72:6f:
ba:36:74:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+hvb+Z4abDhKsnCPy4E1nAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzI3MDQwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzRiMmIzZWQyYTQ5NjVhNDNiZWU5ZDQ0NWZkYmRlOGE3NTc1ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlABzHzIZcfITT4iOWFx20JzdZBBj
cVtkDJtP7HuPBfX5sSe3B9MrI4JFiEwLitgFq7q727WswJ3/TqpMoGxtxZBt2C43
2Zn7R82sQGXzCJLx9/DAvZWm5/eciX+v1+gd7fmiThwDBkhYG9iJc9M9fbnEWowv
FtwuJ9wVPqh9f15Bb4dqJIczcTqUaPZuj9iaWChcqleZnF02Q7wJBgAiA3PmbG2K
WB41PM77RwC+jsqjoACuOnuz5cYB3+XTBuGlVjnj+g3yqIJLEroGeeynSubRD0Y4
oB18+A2+e3pdjGdbs7Ri8XYNwGBMXNugZDyEhKSbZ0es0MS0jXBzCEPfvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGdLKz7SpJZaQ77p1EX9veinV14dMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWjBzclB0S2tsbHBEdnVuVVJmMjk2S2RYWGgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/tMA0G
CSqGSIb3DQEBCwUAA4IBAQCR605qz4AU8GePseW34pJzkSov3OXyGxr1GMHABEtD
Wqjq8oYgkdcvQOPKo6/4p8jfMQ1hZJ1CNpNZyfNNBNlHjgTd5YpzIXn5XVB3D8/b
GatnNRy/m1hRYrKt0Sn2gKM0IS63noZGYb9OTuoHdHuu1Z50McN6HLYH9Oj5b0M8
YJYYSs3sruhr7Lhr7SMoarva3A+rbWgp7bf4+5z/iKlAEq2JLBDsqRgtYZszlqqC
mt1rRwc94UFeXWDAcIzQ2owBhUb0w8daSARgFO8oI0Q7za00GEmBQzJwBumgQFVt
n1ueSQvg+UsSUJaiCVydQ2uXXUPmlhi4SWkRcm+6NnRr
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:01 2026 by rpki-client