Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s18fsTahJSa6ju_xeDhTmCHqg2I.roa
File: s18fsTahJSa6ju_xeDhTmCHqg2I.roa (raw, json)
Hash identifier: j9+aV89wuVOg/Zkj8CknBxM6o/VRMSHEL2ZVgLiOz3A=
Subject key identifier: B3:5F:1F:B1:36:A1:25:26:BA:8E:EF:F1:78:38:53:98:21:EA:83:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0BCA9033D13E6CD773DB1B6024C21E83A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s18fsTahJSa6ju_xeDhTmCHqg2I.roa
Signing time: Sun 20 Sep 2026 02:33:08 +0000
ROA not before: Sun 20 Sep 2026 02:33:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215685
IP address blocks: 5.175.239.0/24 maxlen: 24
2a02:2fc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:a9:03:3d:13:e6:cd:77:3d:b1:b6:02:4c:21:e8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 20 02:33:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b35f1fb136a12526ba8eeff17838539821ea8362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:40:02:90:7a:91:b5:d4:72:98:ab:29:25:
71:53:e5:9c:91:b8:56:64:37:ce:c5:74:b8:49:ba:
a6:60:3b:a9:44:d4:0e:3a:0e:a6:99:ed:b9:6b:d3:
7c:a7:c7:8c:d8:f5:93:fd:16:fd:d8:1b:78:06:88:
59:a7:f6:84:54:94:25:28:bc:27:09:09:a9:92:95:
f2:79:61:7f:3f:a5:4f:89:12:f4:4d:27:30:37:78:
01:16:d6:b6:6d:89:04:1d:61:d3:d3:85:ef:df:63:
b0:c3:a4:aa:16:d0:c0:70:05:f7:0b:62:0e:9c:e2:
2f:16:1e:76:07:27:1d:bb:b5:64:0f:79:f7:20:ef:
80:c4:34:91:2f:0d:b6:8b:e0:19:e1:99:72:03:48:
8b:ac:de:98:1d:90:61:3e:15:f1:9d:a1:03:3e:37:
b3:94:74:cf:85:30:f7:b7:80:80:94:76:9d:92:fa:
ba:a0:b3:60:86:e2:29:92:90:28:1e:63:f3:90:32:
11:45:cb:53:3a:04:23:51:5d:a1:82:cd:a7:a5:9f:
d1:6f:84:44:6e:ad:34:d4:1f:83:06:f3:2a:3a:f8:
d9:96:5b:bb:f4:c9:4e:31:f0:c5:8b:b9:02:57:b9:
6b:84:86:87:57:60:d4:23:33:85:2e:57:68:7b:d3:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:1F:B1:36:A1:25:26:BA:8E:EF:F1:78:38:53:98:21:EA:83:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s18fsTahJSa6ju_xeDhTmCHqg2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.239.0/24
IPv6:
2a02:2fc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
af:a1:36:fd:ca:8e:d9:74:2a:2c:9b:9d:ba:26:e1:f3:98:22:
08:ea:78:32:07:fa:98:03:4e:d9:86:aa:e2:17:36:e8:d7:29:
92:41:06:37:a4:1b:55:70:44:e0:70:0c:cc:c3:9b:62:ed:2f:
ee:e8:30:f6:fc:3f:be:5e:1e:78:fb:15:16:ce:3f:c8:1b:d1:
30:a1:2b:44:9a:4b:b8:90:3d:40:c6:ce:27:2a:1e:7f:71:ea:
f2:a1:95:6f:4e:09:9b:1d:a7:09:8a:89:22:f6:6a:ad:5f:2c:
a2:57:2f:68:de:42:98:44:82:4f:8f:50:1f:bd:5e:ec:6a:80:
8b:3c:3f:7f:f7:26:cd:e0:32:a6:45:7a:87:1c:50:ff:72:8a:
65:13:ec:f6:9d:6c:f3:b4:0d:db:82:bf:ef:d6:74:a7:48:9b:
c9:d3:f8:bd:d5:44:70:39:9a:f1:27:88:2c:2d:4d:b4:4a:6d:
a4:09:f7:5b:9f:bd:dc:50:41:18:44:f4:c7:b0:6b:ec:99:d1:
37:a9:99:b9:bf:6f:38:bf:93:b7:40:62:05:b3:b1:de:cf:00:
70:91:3d:43:57:18:ae:89:61:b3:92:1c:09:8a:76:26:75:99:
11:82:f8:7e:21:de:1f:28:92:26:47:97:c6:70:00:10:aa:b2:
ae:31:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:39 2026 by rpki-client