Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p8cdzZxTUPgy0bISt7zHdooIZZ8.roa
File: p8cdzZxTUPgy0bISt7zHdooIZZ8.roa (raw, json)
Hash identifier: zlO6ULjkrCl+z7+WDe3l1SmS+oZlrtEPjHfGrWaiogA=
Subject key identifier: A7:C7:1D:CD:9C:53:50:F8:32:D1:B2:12:B7:BC:C7:76:8A:08:65:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C50ECFA1AA3BDA9FF5867A7247E242AE5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p8cdzZxTUPgy0bISt7zHdooIZZ8.roa
Signing time: Thu 12 Feb 2026 08:17:13 +0000
ROA not before: Thu 12 Feb 2026 08:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.175.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:ec:fa:1a:a3:bd:a9:ff:58:67:a7:24:7e:24:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 12 08:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7c71dcd9c5350f832d1b212b7bcc7768a08659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:93:e5:91:f0:7f:38:58:bd:c4:ff:c0:21:
6a:2a:2b:1f:f1:f1:50:1d:7e:32:5a:81:36:81:66:
2d:db:dd:c7:65:db:55:a2:f1:cb:d8:3b:6d:08:ac:
a8:b4:fc:0a:7a:fb:99:8e:76:c0:e2:ea:f0:3c:48:
63:5b:80:3c:a5:ec:6f:36:a4:34:64:aa:59:b1:5d:
28:82:35:c0:de:cf:cb:39:67:43:ed:d9:75:1d:a5:
e8:ac:0e:70:70:1e:9e:43:69:d7:3f:a7:4b:7f:62:
dd:31:3f:87:52:f2:c5:c7:71:c4:43:2a:19:14:b8:
cd:ea:54:b0:9f:6d:2a:7f:63:eb:0e:a7:b6:0b:e5:
e1:43:f7:f3:4b:48:7b:c1:18:c8:56:7d:3d:4a:5f:
08:4f:06:3e:c0:03:08:10:ab:cd:26:f0:77:1d:a5:
69:d4:49:3a:a1:26:68:ed:ee:93:e6:eb:66:45:ea:
f4:05:7d:4b:be:77:3f:8e:9c:63:83:2d:a2:0a:73:
84:82:58:d1:c1:04:69:be:c4:06:73:89:6c:07:3a:
4d:32:02:5e:ef:03:8a:bc:b6:83:41:8e:b3:6b:4f:
0b:c5:30:ea:04:6b:41:f3:29:05:4a:21:59:10:00:
0d:52:86:b1:bf:39:4f:9a:bf:5a:04:ce:88:0f:69:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:1D:CD:9C:53:50:F8:32:D1:B2:12:B7:BC:C7:76:8A:08:65:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p8cdzZxTUPgy0bISt7zHdooIZZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.175.0/24
185.13.156.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:34:52:50:e5:10:07:7a:3b:38:2a:1e:2a:2d:d7:cb:00:a5:
8b:5d:20:44:81:4d:15:8d:38:60:5b:2d:56:71:4d:b5:1c:50:
9a:37:e9:12:8b:1b:87:bf:88:3f:96:86:29:41:cd:89:2f:dd:
10:45:34:9a:90:96:9a:84:8a:07:80:69:29:8d:bf:ff:e5:c2:
95:12:94:bf:1e:c5:88:92:91:aa:ff:29:b3:06:00:f3:52:b4:
14:43:37:84:b7:30:0f:6f:6d:00:d1:87:e1:b8:00:eb:16:c0:
41:2d:54:10:db:c1:f8:38:75:43:22:51:f7:32:e9:fd:c0:8d:
b7:37:77:89:4e:4a:a0:6c:4f:ad:d7:31:80:f5:20:f6:81:91:
28:f5:a5:b5:c7:e3:77:18:6d:42:76:14:fb:71:f1:d0:f7:aa:
56:55:c4:9f:34:1b:d5:67:f5:30:a5:dd:cf:52:59:c7:10:46:
f6:f9:2c:ad:46:3a:12:53:e6:7f:b3:4a:b1:2b:23:bc:4c:41:
bf:44:10:9a:23:14:b7:19:f1:bb:fb:c5:89:88:86:a9:65:a1:
da:26:22:c0:56:fc:04:93:e4:45:b8:89:fc:1a:07:89:6a:7d:
c1:19:e7:bf:02:26:7d:cb:3f:c2:e7:37:c7:df:e0:85:f3:33:
f0:c2:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:52 2026 by rpki-client