Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jdFd7GnEZmkzsLNxJ_WIYhUloyE.roa
File: jdFd7GnEZmkzsLNxJ_WIYhUloyE.roa (raw, json)
Hash identifier: VR81VLYq6cMIh7ZGljwnqKuEQNrsogehm+QL8iO8ofo=
Subject key identifier: 8D:D1:5D:EC:69:C4:66:69:33:B0:B3:71:27:F5:88:62:15:25:A3:21
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C75E035FA470E69F809F73BE60532CBD1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jdFd7GnEZmkzsLNxJ_WIYhUloyE.roa
Signing time: Thu 19 Feb 2026 12:29:13 +0000
ROA not before: Thu 19 Feb 2026 12:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200842
IP address blocks: 5.175.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:e0:35:fa:47:0e:69:f8:09:f7:3b:e6:05:32:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 19 12:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dd15dec69c4666933b0b37127f588621525a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:f7:9a:5e:f4:df:6d:3b:3a:66:a9:02:66:
6e:90:3e:9d:24:35:0a:a7:4f:97:65:4a:3e:0f:91:
7f:87:9d:37:42:b9:40:0a:cb:82:d4:20:e7:03:8d:
cf:26:dd:16:18:f5:2f:09:a0:35:59:94:a5:db:70:
b5:aa:f2:77:f9:64:22:83:7e:87:15:b5:f6:f4:d9:
e7:5c:5e:29:f1:c4:d3:2e:d2:94:49:f4:59:9a:4b:
32:b4:00:ce:fb:d0:c6:14:7f:2e:cd:d8:ac:dd:a6:
a2:bd:88:4d:c2:b5:14:28:5c:d1:82:af:b6:6f:90:
63:81:d3:02:fe:37:64:05:dd:be:01:7d:f3:37:7f:
72:69:5c:a4:f2:44:b7:c0:62:2c:ac:bd:37:f2:e3:
df:09:07:db:a1:12:03:0c:14:3d:18:13:dc:32:27:
52:bd:59:2a:85:e9:96:0b:4f:aa:a1:a0:5c:13:21:
fb:b4:ae:d0:1b:a8:8b:b4:ce:78:a7:9e:57:a1:cf:
41:30:24:57:4d:f1:68:b4:4c:0f:16:60:19:a3:0d:
b6:09:e4:d8:1d:13:1a:40:84:ae:f6:04:47:ac:e7:
c3:6a:6b:e2:6d:69:b0:8e:7a:51:aa:61:87:75:03:
14:4d:f2:aa:28:00:6e:ff:9c:d6:9a:f6:f4:dd:82:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D1:5D:EC:69:C4:66:69:33:B0:B3:71:27:F5:88:62:15:25:A3:21
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jdFd7GnEZmkzsLNxJ_WIYhUloyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:5d:90:00:73:23:2a:e3:56:45:f0:f1:73:14:c2:7c:50:67:
77:19:f0:32:a3:1a:59:d4:38:71:d7:f4:7a:14:d9:b7:44:16:
f6:bb:9b:fc:f9:cb:b2:26:a0:67:96:03:d0:c2:2a:07:69:90:
46:9e:c5:eb:03:d8:6a:06:13:5f:6e:5a:4e:06:54:09:40:15:
8b:1b:fe:8f:1a:73:2f:6c:21:c8:11:14:bb:ec:52:ac:f3:21:
1f:68:88:23:78:24:af:35:35:b8:50:6e:17:99:d5:55:3f:24:
e4:31:cc:19:14:62:08:6d:9d:36:e1:a3:8b:50:db:e3:28:2d:
d9:86:c3:4c:f5:33:d6:b0:64:ad:fc:aa:8a:a0:92:1c:ac:22:
67:6e:45:be:13:d1:1c:9f:68:65:36:c1:10:af:d8:69:b6:16:
2b:30:ec:ad:28:f4:e3:22:c7:e4:fa:8b:af:93:52:7d:4f:e1:
d9:35:28:bf:e2:43:a1:b2:cd:1d:17:b8:69:82:5c:f2:7f:01:
a1:b7:17:5b:7e:ce:b6:70:91:f9:be:82:be:6d:dd:7c:83:38:
36:b6:fe:94:5c:43:dc:f6:64:62:04:b9:a9:ed:54:c8:b0:56:
58:0a:0d:da:08:31:19:28:74:25:99:67:9b:fa:fa:b2:2f:62:
4d:d7:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:22 2026 by rpki-client