Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fAKkHbhTXLlHzp6Ftmo5yMuK4C4.roa
File: fAKkHbhTXLlHzp6Ftmo5yMuK4C4.roa (raw, json)
Hash identifier: +wxqU6LKGa9b/t3bRBpO+PO/wxc0pErGH//xLywmflY=
Subject key identifier: 7C:02:A4:1D:B8:53:5C:B9:47:CE:9E:85:B6:6A:39:C8:CB:8A:E0:2E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A09072A7D037C499214914359C07C6BED7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fAKkHbhTXLlHzp6Ftmo5yMuK4C4.roa
Signing time: Fri 11 Sep 2026 12:30:28 +0000
ROA not before: Fri 11 Sep 2026 12:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208510
IP address blocks: 5.175.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:72:a7:d0:37:c4:99:21:49:14:35:9c:07:c6:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 11 12:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c02a41db8535cb947ce9e85b66a39c8cb8ae02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:4a:09:26:72:ec:5e:8e:47:f2:80:a0:33:
89:52:9e:46:64:53:c4:51:3e:1d:97:22:5a:77:23:
d0:5a:6f:3b:7a:2b:d1:9a:e1:e2:39:83:50:2d:23:
8e:9e:82:33:ec:d3:e9:6f:ca:a3:a2:0c:27:39:86:
e0:3c:21:dc:ab:99:fe:86:37:14:91:f2:1b:6c:4d:
15:2f:fc:0e:c4:90:00:91:4f:6a:53:7c:05:e7:cd:
b4:b5:16:02:30:c9:52:99:87:8c:30:18:80:66:28:
cd:a1:3f:f1:eb:5a:6e:75:6b:28:94:f2:23:0c:f3:
4c:0d:07:54:30:52:fe:51:cc:d8:00:a0:9e:90:1c:
40:df:85:c7:8a:eb:f8:8a:03:58:41:b3:7b:1f:3d:
04:47:3d:66:da:03:ee:97:07:57:f2:50:17:fb:15:
a7:e7:6b:0e:bc:3b:1b:41:4f:cc:ff:a1:e2:38:3d:
74:14:a9:20:ea:c1:58:4d:43:b1:2f:df:fb:7c:3b:
85:37:86:cb:d2:8b:70:f3:03:ee:93:a5:1f:db:01:
1d:1c:b6:e5:eb:c7:10:1d:c0:81:ad:7e:e8:6c:09:
9f:17:4e:55:5e:04:ef:e1:08:44:85:a7:ec:f3:ec:
c9:75:01:4f:c5:62:69:64:da:56:82:28:b5:b0:b4:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:A4:1D:B8:53:5C:B9:47:CE:9E:85:B6:6A:39:C8:CB:8A:E0:2E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fAKkHbhTXLlHzp6Ftmo5yMuK4C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f2:e6:79:56:09:49:ff:ca:aa:35:e5:b7:ca:97:04:c8:9c:
9c:f3:c8:2d:fc:36:04:31:c2:ce:90:0b:5b:cc:65:fe:2b:1b:
25:56:13:ff:6b:bf:a9:3c:fd:20:be:c0:17:a3:36:d5:8d:15:
d9:e1:9f:b1:ee:3e:b8:9b:d0:88:12:97:76:a2:6b:89:d4:83:
3f:d7:2d:87:0d:ca:ee:78:07:9a:72:71:3c:58:cb:90:f1:f5:
75:b3:92:2a:00:ce:82:3c:00:0a:43:70:e2:d1:72:2a:8b:f7:
cc:fe:ae:78:ea:13:53:b3:2b:75:a4:4a:f5:20:8b:80:f2:9c:
80:78:38:62:77:01:5d:f2:68:74:ce:ba:03:b1:76:85:b4:b1:
86:dc:cd:cb:e4:2b:69:e4:58:7e:8d:eb:87:68:b8:a1:25:62:
99:04:d7:57:d8:a0:ba:0d:66:91:81:e1:f5:40:8d:f5:40:6e:
a3:70:0d:f0:76:f1:eb:9e:33:8c:fa:61:0e:f1:93:d3:c6:05:
05:c4:3f:af:f1:76:2c:b7:0a:27:c3:08:64:46:e0:36:08:e7:
ad:84:3e:c4:dd:8b:58:ba:2f:16:a9:fe:e9:41:37:4b:3b:53:
cc:6d:e9:f7:b9:af:70:1e:4f:fb:15:1e:94:8a:0d:55:92:a3:
3a:7e:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:21 2026 by rpki-client