Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fQJUEtYceop0hY4xnSPgfZg1SIs.roa
File: fQJUEtYceop0hY4xnSPgfZg1SIs.roa (raw, json)
Hash identifier: ol7gCzPgQ3YlWI/qi3ih0J/MLex1P2Oq5CRFzcLSsL0=
Subject key identifier: 7D:02:54:12:D6:1C:7A:8A:74:85:8E:31:9D:23:E0:7D:98:35:48:8B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A17C7E7A788ADBB26120CBF5D80291C813
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fQJUEtYceop0hY4xnSPgfZg1SIs.roa
Signing time: Tue 27 Oct 2026 08:33:46 +0000
ROA not before: Tue 27 Oct 2026 08:33:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213850
IP address blocks: 5.175.164.0/24 maxlen: 24
5.175.179.0/24 maxlen: 24
5.175.245.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:7e:7a:78:8a:db:b2:61:20:cb:f5:d8:02:91:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 27 08:33:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d025412d61c7a8a74858e319d23e07d9835488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:17:62:26:11:6f:43:1d:1b:49:ba:4a:f9:
18:ef:b7:52:27:36:4b:25:40:e6:a7:4e:9b:9a:86:
26:c3:a5:aa:68:25:3c:c4:ea:4a:e9:3a:01:be:8b:
8e:ec:0e:18:9f:07:00:a4:44:c1:80:48:d0:c7:29:
5c:3b:3d:75:10:bb:c7:63:e6:cf:ca:67:02:94:69:
20:f8:f1:75:03:83:40:19:0d:db:ce:4d:62:5b:1c:
03:ea:1c:6b:7a:1f:5c:fe:b9:5f:a3:cf:43:85:8c:
34:62:72:48:20:29:23:f5:30:05:30:72:bf:6f:2d:
39:aa:04:5c:f4:18:59:31:4d:74:05:b8:83:84:12:
6a:d1:02:09:b6:9e:e0:b3:da:f4:aa:bc:e3:02:75:
5b:ad:be:dc:ff:99:ce:1c:eb:f5:68:60:1e:64:9a:
9d:c8:05:38:80:32:ac:e5:a2:9e:26:9c:c4:ad:29:
09:0a:7d:31:e2:54:05:33:46:90:04:b1:05:72:8c:
42:6a:3f:d4:0d:64:f7:4d:0d:8f:a1:c2:f7:42:98:
84:25:e9:14:a9:06:f8:b3:ff:5b:e8:7e:a7:99:70:
2d:c0:77:59:3b:fe:5d:6f:10:15:86:bf:94:ce:5b:
65:c1:9d:16:40:5e:ec:f2:d8:f5:6f:d4:84:35:c1:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:54:12:D6:1C:7A:8A:74:85:8E:31:9D:23:E0:7D:98:35:48:8B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fQJUEtYceop0hY4xnSPgfZg1SIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.164.0/24
5.175.179.0/24
5.175.245.0/24
5.231.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d6:d8:1f:09:b5:58:28:eb:98:11:e1:d4:d1:72:30:9d:ca:
65:31:a7:18:2b:2a:26:c8:b5:73:b3:df:e3:00:40:74:0f:1e:
54:54:ff:5d:cb:f7:04:bf:d7:15:31:ea:fa:bc:d9:07:34:ad:
87:b0:f8:08:b0:99:b7:b3:c9:35:93:8a:65:d4:f4:9a:9a:f1:
60:f6:1c:34:97:ba:eb:16:8e:5a:05:eb:fb:c2:92:da:79:63:
fc:fb:92:3e:83:f3:cf:1e:a4:46:30:27:d3:05:a1:98:61:d0:
48:e8:bb:2e:f3:a1:04:67:5f:9e:2e:ab:5b:24:0e:41:24:79:
2b:59:32:09:d1:4e:3d:c4:b7:48:b4:b1:d8:53:80:6d:67:6e:
5c:91:ca:7a:5a:da:d4:aa:30:f6:66:40:a2:70:5c:b9:5d:d6:
0d:1c:0c:25:35:ac:1f:35:9b:f2:88:36:fc:fe:e2:f0:1a:f6:
9d:69:26:09:d2:f2:01:bd:c1:cd:36:3b:7e:02:f5:59:e3:e9:
db:71:c1:eb:10:f5:e9:98:d6:e3:14:04:17:78:39:c1:26:32:
71:8c:91:2b:f7:11:c0:3b:26:34:3e:50:69:72:53:fa:11:79:
a0:8d:e2:eb:fa:96:5e:03:a0:99:f2:79:0f:06:6b:a9:fd:0d:
ec:2d:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:23:59 2026 by rpki-client