Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kJaQxSDX9CVFr_kEs6uHIyR1P2s.roa
File: kJaQxSDX9CVFr_kEs6uHIyR1P2s.roa (raw, json)
Hash identifier: byMoz0ZKTC6jJQ3kwr5M3A5VXaKGLRvrYoxCn8Q4Q4Y=
Subject key identifier: 90:96:90:C5:20:D7:F4:25:45:AF:F9:04:B3:AB:87:23:24:75:3F:6B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C53FBC022EE99C4B7267FE59854C104D9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kJaQxSDX9CVFr_kEs6uHIyR1P2s.roa
Signing time: Thu 12 Feb 2026 22:32:13 +0000
ROA not before: Thu 12 Feb 2026 22:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64160
IP address blocks: 5.175.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:fb:c0:22:ee:99:c4:b7:26:7f:e5:98:54:c1:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 12 22:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=909690c520d7f42545aff904b3ab872324753f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:15:26:49:01:f7:fd:25:10:b2:a0:33:e5:
31:98:4c:0f:f8:85:67:24:a4:62:6b:04:86:8a:51:
ca:c3:ed:d1:94:d2:4f:2d:cd:f3:5d:51:59:55:32:
30:7f:07:31:79:1d:b0:6c:54:9e:34:58:b6:38:5b:
7b:07:ca:ea:43:04:a2:00:2f:fa:16:e4:cb:6e:72:
4c:69:dd:9e:45:f3:98:88:b0:64:01:95:37:62:9a:
4b:62:06:40:fa:cd:bb:cf:ce:33:ee:3b:ac:d6:11:
17:7d:77:39:36:cc:1c:c5:3d:33:37:a6:3e:d9:17:
fb:ba:06:bc:01:f6:f5:38:51:8f:86:77:d1:fc:4c:
15:d3:5e:15:39:06:8c:2c:d2:12:9f:61:f1:be:64:
65:d6:68:80:3b:c7:b5:f2:20:16:04:e0:f1:9d:9c:
34:e7:87:b4:1a:eb:14:4b:04:24:4a:be:31:01:a1:
cd:1f:6e:ce:31:ce:b3:60:45:53:92:14:86:05:97:
05:bc:9e:87:5f:d5:c7:0b:69:bc:0e:41:4a:a0:74:
39:f4:64:a8:bb:be:17:9f:22:04:61:9b:1a:7f:47:
71:21:3c:02:f2:79:e6:38:73:4d:bb:11:62:cf:3b:
4e:c5:4f:3a:9f:ef:3f:6e:31:6f:36:e9:0a:cd:a2:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:90:C5:20:D7:F4:25:45:AF:F9:04:B3:AB:87:23:24:75:3F:6B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kJaQxSDX9CVFr_kEs6uHIyR1P2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d3:41:13:66:1c:b0:5e:24:f2:a3:c2:d2:6c:7c:61:c6:ef:
3e:4f:c2:36:32:39:33:af:e1:bc:9e:dd:91:33:2d:d4:16:9f:
f9:23:1f:f8:a3:9e:2a:58:ec:5c:3e:72:a3:11:78:5e:2f:83:
24:7b:10:17:bc:0b:5a:69:72:88:4a:89:82:8b:4a:db:07:7d:
b2:51:5e:03:af:c0:b1:ed:27:01:b9:6a:ad:c5:53:e1:38:d5:
69:0e:6d:c8:a2:88:b1:58:08:c9:55:d3:d2:ee:f0:dd:99:98:
42:e0:3e:63:03:f3:05:06:70:db:fa:2b:9e:29:9f:03:65:30:
55:0a:a2:09:79:62:94:d5:85:39:ac:74:fd:34:b1:4f:98:1d:
e7:7f:e7:bf:49:39:66:3a:d8:12:2b:5d:98:09:05:b8:fc:8e:
c2:56:c2:b2:8e:0f:37:64:23:ef:3c:2b:b7:6e:17:97:b2:17:
b1:d0:f3:72:e1:02:82:5d:4e:c4:ca:37:2c:c5:0d:6e:8f:92:
e6:ff:a8:6a:ea:32:0c:66:91:55:d0:4a:51:23:d6:a8:18:b9:
10:f5:6e:16:0b:3f:ce:46:c1:ef:5d:d5:49:64:ca:69:1f:ce:
c4:6b:4d:93:fc:a1:b7:1c:17:a8:09:62:f7:a1:c0:31:96:1c:
fb:07:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:06 2026 by rpki-client