Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qdN7PBi0g1OESFgRJ6Zhl0ydwYo.roa
File: qdN7PBi0g1OESFgRJ6Zhl0ydwYo.roa (raw, json)
Hash identifier: saxmHd1IXF+XLElgRtz3mLu8VdY1MYSGbq2pL2lP+W0=
Subject key identifier: A9:D3:7B:3C:18:B4:83:53:84:48:58:11:27:A6:61:97:4C:9D:C1:8A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A09A0844556FDCCB91C24FE2885B37FB8D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qdN7PBi0g1OESFgRJ6Zhl0ydwYo.roa
Signing time: Sun 13 Sep 2026 09:10:28 +0000
ROA not before: Sun 13 Sep 2026 09:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219067
IP address blocks: 5.175.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:08:44:55:6f:dc:cb:91:c2:4f:e2:88:5b:37:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 13 09:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9d37b3c18b483538448581127a661974c9dc18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:e7:d3:ff:35:c9:ab:aa:5e:35:30:13:18:
a3:3f:ab:7d:13:92:68:9c:8a:09:26:58:2c:2c:1a:
1c:a5:5d:8b:2a:ca:d0:d2:79:4f:fb:f6:be:cf:77:
7d:20:d4:8b:49:90:9a:9c:6c:98:f7:6d:31:f2:3c:
8b:ea:a0:08:d2:17:2d:bf:ff:55:87:9e:81:0d:66:
12:8f:74:2f:83:84:26:34:5b:2f:1b:e9:90:d4:fc:
a9:b9:83:98:72:79:75:81:28:c9:45:bb:5d:df:2f:
f1:9a:e1:e1:93:70:21:47:1e:6f:d5:ab:22:00:20:
ed:98:e4:32:13:09:e5:5d:c7:e1:a9:a9:ac:5d:d3:
c4:13:e2:f5:79:f8:a0:6d:dd:ee:8d:51:c3:7b:12:
e3:d5:00:1b:d3:72:4f:6b:2a:b5:31:bd:23:d4:78:
80:43:3c:66:65:ee:76:53:92:de:5a:ec:bf:d2:80:
65:f9:49:7c:9a:55:21:c2:72:b3:14:52:bc:8c:0f:
6e:9b:01:b9:af:5d:72:f7:98:93:09:09:16:5a:55:
1a:18:f9:52:1b:74:16:57:3e:fc:85:66:67:ac:63:
0a:7d:09:0f:ff:1f:aa:7a:e2:32:ec:cb:9d:19:fd:
b1:86:38:6a:3e:43:65:99:ba:c5:ef:05:da:6e:13:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D3:7B:3C:18:B4:83:53:84:48:58:11:27:A6:61:97:4C:9D:C1:8A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qdN7PBi0g1OESFgRJ6Zhl0ydwYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.169.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9f:41:11:53:de:d2:42:49:44:86:b7:49:52:08:8a:28:8b:
34:53:b8:39:fe:c3:ba:cf:ec:20:0a:e5:6d:a7:56:17:30:ac:
92:f6:4a:2f:bc:0c:7f:ac:df:49:76:79:c6:f1:e0:31:1e:71:
58:da:f9:f3:f9:66:ee:63:61:4f:b4:3d:be:fb:dc:23:47:be:
57:53:cf:9b:b9:59:00:41:bd:ee:62:87:13:a4:00:2b:98:a7:
ab:ff:68:da:7d:90:2a:08:e0:57:2f:a4:21:e1:60:58:28:93:
72:be:26:eb:54:2a:08:eb:09:b4:4c:71:8e:b0:17:72:bb:a5:
64:23:50:b0:d3:61:6f:ab:f9:54:eb:aa:8b:c1:54:2b:6d:3a:
df:de:42:ab:74:65:25:b3:35:ec:0b:7c:c3:52:bc:55:fc:16:
1e:c7:40:b0:44:0d:f9:fc:a1:f8:ae:57:09:99:1d:12:ee:1c:
93:4d:8f:70:ad:8a:60:b6:1b:31:0d:35:46:23:a2:26:65:ab:
94:bb:06:4e:75:4c:4a:cb:12:d3:98:7a:da:79:94:de:dc:31:
8a:73:ec:a6:ad:77:b5:bf:a8:70:92:34:dd:77:2c:e5:a0:af:
02:7d:b1:1e:0d:72:93:31:bd:35:9f:c2:a2:cb:6f:04:60:89:
c8:91:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:49 2026 by rpki-client