Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hd1Ju1kiYRxuCo-Ay30nr8deeX0.roa
File: hd1Ju1kiYRxuCo-Ay30nr8deeX0.roa (raw, json)
Hash identifier: P8nhI/Jh0Q6Wi9FfzlbFFyFgcQx/YUKT3yaRj9lPQEI=
Subject key identifier: 85:DD:49:BB:59:22:61:1C:6E:0A:8F:80:CB:7D:27:AF:C7:5E:79:7D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0981ACE38B9BD2AE4333B2081C0FD7887
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hd1Ju1kiYRxuCo-Ay30nr8deeX0.roa
Signing time: Sun 13 Sep 2026 00:11:28 +0000
ROA not before: Sun 13 Sep 2026 00:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219451
IP address blocks: 5.175.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:98:1a:ce:38:b9:bd:2a:e4:33:3b:20:81:c0:fd:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 13 00:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85dd49bb5922611c6e0a8f80cb7d27afc75e797d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:0f:b3:38:4f:cb:c1:44:0e:85:aa:bb:f4:
d4:69:cf:de:be:2d:2b:7d:7a:7f:57:bd:0a:ec:ba:
f1:d7:e9:1f:1f:3f:db:ef:d1:f7:c1:72:e2:33:e2:
3a:ed:f9:ec:66:26:e1:63:b4:31:63:3c:dc:99:eb:
90:cc:ec:02:44:5c:22:46:03:d4:21:f3:c2:d4:e2:
e6:d4:41:c8:26:54:c8:61:02:7c:b1:4b:c9:19:4e:
89:81:87:3e:35:5a:16:35:56:9f:73:a4:45:3f:15:
2b:b2:c9:4b:f8:3d:be:3a:b8:74:be:00:fd:68:bd:
2c:f5:6a:17:db:d0:52:dc:f7:8f:71:c7:20:f4:b3:
fd:b4:bd:61:78:d1:96:bb:bc:9d:82:c4:46:2d:a4:
1d:59:c2:a4:45:88:d4:97:50:bd:9a:f2:e5:dd:9d:
76:f9:63:23:d5:04:6a:ef:3e:d9:28:f6:81:f7:7f:
1e:e8:5b:80:85:41:7d:98:8a:5c:7c:50:29:d5:b6:
8b:f0:0e:da:d1:b4:d7:86:d0:8f:dd:86:59:67:24:
e6:92:11:58:99:77:93:c8:df:35:0d:25:00:ce:25:
72:ce:b5:4f:c5:4d:f7:59:d5:42:eb:f0:40:67:a6:
79:e8:63:25:e5:7d:b5:20:b5:2b:87:30:44:c5:04:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:49:BB:59:22:61:1C:6E:0A:8F:80:CB:7D:27:AF:C7:5E:79:7D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hd1Ju1kiYRxuCo-Ay30nr8deeX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.176.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d2:ef:09:a8:39:ca:6b:4e:62:c3:67:f6:b1:0c:e6:19:25:
cf:d1:a9:3a:0f:1c:fd:65:5e:e8:e2:1a:b1:53:a1:39:5c:65:
5a:da:63:53:5a:13:4e:50:1e:a6:49:43:f9:2b:98:b3:11:75:
19:aa:1a:61:5f:d6:8f:06:7d:49:75:c7:e3:11:c0:cf:da:0b:
12:da:cc:e1:e9:ca:a2:7a:c2:3c:3b:40:34:1e:cd:24:af:26:
c1:12:0b:28:8d:6f:ad:50:09:a7:47:fe:90:de:76:da:9c:42:
47:6a:49:54:83:3e:51:f9:2d:2b:11:c0:ca:b4:6e:62:48:4e:
37:93:f0:35:27:31:79:83:68:72:f1:c3:c6:b8:c7:a5:72:4e:
27:22:22:42:4a:60:98:3b:f1:cd:94:ab:34:02:2a:d1:c1:d4:
1b:17:54:7f:a8:25:6b:9a:57:2b:69:ff:93:10:2e:cb:d7:69:
6a:78:d9:dd:2a:32:75:85:78:75:d3:4d:d5:eb:7a:b6:14:57:
ae:bc:eb:c2:25:4f:22:f8:a9:4e:b6:fd:c1:86:39:2b:f0:4e:
a9:c6:62:45:e9:11:40:36:08:b7:b4:c5:67:83:52:a4:82:95:
ad:a1:28:69:a2:2d:00:a8:8d:25:4e:5b:b7:60:aa:33:08:f8:
d3:32:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:21 2026 by rpki-client