Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZQdymbi2CJQaqSNIUKEBHyI-uzI.roa
File: ZQdymbi2CJQaqSNIUKEBHyI-uzI.roa (raw, json)
Hash identifier: YxY0f6N5cOWxVt+j2VrTwIEv+D4vJNskcUZV1JYfatQ=
Subject key identifier: 65:07:72:99:B8:B6:08:94:1A:A9:23:48:50:A1:01:1F:22:3E:BB:32
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A079263060B4418B792E4B4DBA9C49E323
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZQdymbi2CJQaqSNIUKEBHyI-uzI.roa
Signing time: Sun 06 Sep 2026 23:55:40 +0000
ROA not before: Sun 06 Sep 2026 23:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151612
IP address blocks: 5.175.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:79:26:30:60:b4:41:8b:79:2e:4b:4d:ba:9c:49:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 6 23:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65077299b8b608941aa9234850a1011f223ebb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:5c:56:3c:ce:ca:d5:6a:e4:94:81:5c:72:
53:6f:d6:1e:f3:a1:89:c9:e2:d9:32:0b:a1:47:1e:
1e:13:3f:64:30:ac:51:fe:35:c6:62:09:46:eb:a1:
54:08:5b:72:b9:12:30:61:98:87:02:42:da:d2:b6:
9c:f4:0f:73:59:b5:02:3d:e0:97:c5:bd:6c:d7:9b:
a2:79:cc:f8:e6:a7:22:7a:5a:df:98:d5:60:bc:70:
0c:79:76:e5:29:7d:79:31:25:76:98:e4:d7:bd:a7:
0d:20:8c:2d:40:11:58:bd:42:15:11:cc:b2:38:e6:
64:0e:a3:20:28:dd:2a:d0:c5:fc:8d:78:ba:a3:65:
29:60:09:e6:4b:98:ce:a3:0e:bc:29:f7:49:ed:eb:
39:3e:b9:2f:1f:70:00:08:b2:9b:3d:b2:6e:a5:98:
06:10:c9:56:eb:2d:be:80:e6:d2:8c:0a:40:05:5d:
89:a3:0e:0e:24:50:e4:24:c6:6a:58:56:a6:fd:c0:
14:67:73:2f:57:95:85:bb:43:14:68:ac:63:56:98:
b5:47:75:4b:cd:fb:9c:b1:4f:4c:09:85:65:70:ea:
41:a3:eb:e2:ca:fa:67:ae:25:11:c2:a5:05:93:d5:
9c:3a:3c:68:17:c6:dc:d6:5d:dc:99:a5:b5:15:f3:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:72:99:B8:B6:08:94:1A:A9:23:48:50:A1:01:1F:22:3E:BB:32
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZQdymbi2CJQaqSNIUKEBHyI-uzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f2:c0:fe:12:ad:b7:83:83:0f:26:cc:33:db:df:39:2f:df:
40:02:b4:12:36:01:9d:b6:c6:62:43:65:19:b3:fc:e5:0e:d0:
23:fd:8b:40:8d:1e:33:b2:2b:8a:4c:31:09:42:04:23:b8:1f:
70:c8:3a:01:54:2a:e3:a7:44:7a:0d:77:9d:77:7d:9b:97:a6:
b9:0c:c6:e5:8b:04:03:14:59:94:bb:0b:40:d0:91:f0:fd:21:
c7:6f:24:77:78:6b:e9:34:f0:0a:72:4a:ac:5e:da:3e:70:9c:
8a:0f:98:08:64:00:45:78:9b:01:d4:7f:3e:07:6f:9d:dc:5d:
b4:66:f5:8c:73:df:55:b5:7c:e3:ad:ff:99:01:b6:3d:67:a4:
e8:5a:26:ba:98:03:e4:7b:b7:ff:ae:97:5c:fb:0e:fb:dd:fa:
7e:f3:77:a9:aa:2d:a5:f7:57:dc:ca:5f:4e:d9:78:3d:47:fd:
94:2c:f6:db:81:7d:9e:c0:2e:c3:26:0c:8c:a4:2d:91:6b:f6:
70:ff:4b:96:56:5b:2a:63:b5:d0:84:42:0a:0f:ec:ec:ba:14:
62:e8:20:14:4d:56:45:2e:da:e6:75:ca:de:f9:4f:57:66:7c:
48:24:eb:ac:3f:c8:16:ba:2a:21:05:54:5e:8e:ef:b2:4d:4f:
eb:59:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:27 2026 by rpki-client