Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yHPKQl_qcumZxsMkZBIxGNjU_4g.roa
File: yHPKQl_qcumZxsMkZBIxGNjU_4g.roa (raw, json)
Hash identifier: dkbcoZb8EpWH9uNSxcY370ctPOwuLwFBnagDjtA2bQQ=
Subject key identifier: C8:73:CA:42:5F:EA:72:E9:99:C6:C3:24:64:12:31:18:D8:D4:FF:88
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0BD1C5E5C60E93A8A06D6751EC12C0C2C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yHPKQl_qcumZxsMkZBIxGNjU_4g.roa
Signing time: Sun 20 Sep 2026 04:39:08 +0000
ROA not before: Sun 20 Sep 2026 04:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213495
IP address blocks: 5.175.183.0/24 maxlen: 24
5.175.188.0/24 maxlen: 24
5.175.234.0/24 maxlen: 24
5.231.56.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:1c:5e:5c:60:e9:3a:8a:06:d6:75:1e:c1:2c:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 20 04:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c873ca425fea72e999c6c32464123118d8d4ff88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:d2:99:db:ce:ed:a2:1e:8c:d0:58:82:c4:
d4:af:4d:36:3e:77:5e:ec:18:c0:24:6d:06:1a:eb:
62:75:31:08:df:97:4f:26:03:2a:aa:63:0b:4b:19:
b5:3b:16:ad:fe:24:8d:30:15:bf:6b:7e:08:4a:66:
d4:32:2a:1a:68:9a:2f:1c:d6:da:13:2b:26:79:d1:
e0:2e:51:65:40:87:d5:71:b2:59:2f:85:45:6e:39:
4d:4a:58:b1:36:45:d1:b1:92:58:1a:d4:f6:a1:b9:
23:6e:29:8f:71:f8:3a:ad:c7:77:9a:f3:8f:d3:62:
25:01:bd:9a:56:f0:78:32:8a:10:df:cf:8f:89:e7:
28:d3:42:23:41:9a:85:20:d0:40:98:45:db:2b:8b:
84:45:39:6d:af:b3:35:e1:25:b5:d6:21:0c:0f:7a:
53:7c:6c:9e:f4:42:ef:67:8a:9b:7e:89:bf:75:be:
14:61:7a:f1:5b:97:bb:be:0b:2a:ce:c1:0d:e2:f0:
34:e1:47:73:c7:9c:f2:49:d1:7c:50:98:37:4f:4f:
49:5b:94:c7:6d:ef:a2:ce:9c:79:88:bb:4f:10:dc:
f4:2a:07:ef:5f:a7:5a:59:00:7c:83:3c:4b:ed:ce:
7c:c6:b7:d8:ec:5a:8c:4d:52:7c:9c:37:d0:b6:91:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:CA:42:5F:EA:72:E9:99:C6:C3:24:64:12:31:18:D8:D4:FF:88
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yHPKQl_qcumZxsMkZBIxGNjU_4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.183.0/24
5.175.188.0/24
5.175.234.0/24
5.231.56.0/24
5.231.106.0/24
77.90.40.0/24
89.144.47.0/24
94.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5d:62:d6:fd:64:7d:5e:22:63:1b:78:46:29:fa:d0:64:d6:
19:be:f3:b1:5d:12:0a:fa:64:e2:e4:10:f3:e4:7b:ed:2b:e3:
5c:b5:5d:94:da:79:00:a8:6d:5a:b8:57:8c:f3:d1:07:c0:7a:
0c:31:e5:34:c8:f5:ca:ee:82:7d:d5:c6:72:73:9a:59:e9:ec:
df:2d:b8:cb:73:28:a3:63:e4:3b:41:56:be:92:93:38:ca:2f:
70:8e:52:28:cc:31:2a:29:68:73:03:f6:7b:38:ed:3d:ff:85:
f2:c7:82:79:c0:38:c3:a8:57:a1:12:92:f5:36:9e:22:c6:fa:
42:f9:c6:fb:58:2b:39:89:84:82:9b:67:32:d3:07:e5:39:ac:
1b:10:78:40:93:e0:46:4d:c6:0d:b2:f3:43:8a:e2:79:20:f0:
99:96:f2:41:94:b6:6b:fc:4b:07:bf:b7:a3:a9:9d:54:3d:c0:
d7:42:99:b0:1b:e3:84:94:f5:08:49:7e:ee:3a:cc:a2:04:eb:
25:1f:81:4b:29:43:d1:41:65:64:52:e9:36:02:e8:bb:46:2b:
a2:ed:51:75:b0:df:1c:0e:08:2a:22:e2:07:2b:c8:d7:bd:f5:
3e:1c:81:5a:5a:ec:36:0d:e0:db:19:40:5e:c7:4d:d0:54:31:
2b:cb:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:12:16 2026 by rpki-client