Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3lXSkmbSOM709Zioqma4KhXqh2E.roa
File: 3lXSkmbSOM709Zioqma4KhXqh2E.roa (raw, json)
Hash identifier: mia5UkJIqvFTBGUlwW1UXmFPnJDgQEBLRkgr+pjJC74=
Subject key identifier: DE:55:D2:92:66:D2:38:CE:F4:F5:98:A8:AA:66:B8:2A:15:EA:87:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D0ACA1A7771318D2B07B5479BECC138D0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3lXSkmbSOM709Zioqma4KhXqh2E.roa
Signing time: Fri 20 Mar 2026 10:28:30 +0000
ROA not before: Fri 20 Mar 2026 10:28:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213250
IP address blocks: 5.83.132.0/24 maxlen: 24
5.175.166.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
185.129.85.0/24 maxlen: 24
185.129.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:ca:1a:77:71:31:8d:2b:07:b5:47:9b:ec:c1:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 20 10:28:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de55d29266d238cef4f598a8aa66b82a15ea8761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:6d:d9:2f:57:ce:b4:17:b4:8c:a5:90:c4:
44:b5:39:e7:ce:04:bc:fd:38:1a:59:00:7f:d2:c7:
25:5c:42:08:f2:4d:76:19:3b:dc:23:53:fd:03:c4:
15:0c:53:71:4e:14:38:e3:ab:2a:3c:6d:25:a3:cc:
21:0a:9e:f9:ba:0d:bf:33:e3:ca:18:a9:99:1d:2e:
76:ed:f2:14:41:88:c0:9e:51:7d:23:1f:f8:27:03:
bb:7b:e8:77:1f:ec:3d:26:d7:17:56:51:b7:18:98:
4e:3d:f9:be:7c:e5:f7:48:63:db:20:7e:10:c3:e7:
c7:06:68:3b:b4:14:d5:14:71:3a:dd:e3:e7:4b:7d:
83:c8:19:e0:6d:55:ad:fd:8d:d0:31:bc:82:e8:b9:
07:9d:f9:77:dd:fa:66:d1:b8:e3:05:78:6d:3d:58:
02:33:f7:1d:61:4f:d2:9f:93:83:cd:d6:cc:da:1d:
44:ce:a8:22:8c:64:25:bc:60:c8:c4:d8:7f:6a:65:
de:a5:b7:04:02:0b:be:d8:44:54:8d:d2:27:2b:64:
a9:e8:e3:2f:03:76:cd:8d:d7:79:31:1e:e3:8c:cd:
dc:f9:0c:e6:8f:4d:ff:4e:54:76:d7:1b:07:2f:99:
6f:2c:27:0a:17:f8:39:29:fa:7e:44:5f:9d:76:c6:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:D2:92:66:D2:38:CE:F4:F5:98:A8:AA:66:B8:2A:15:EA:87:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3lXSkmbSOM709Zioqma4KhXqh2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.132.0/24
5.175.166.0/24
5.231.108.0/24
185.129.85.0-185.129.86.255
Signature Algorithm: sha256WithRSAEncryption
15:45:66:95:0c:a6:c2:ee:08:66:a2:c7:1c:9c:aa:94:d8:af:
66:57:2b:ab:7c:b9:81:56:42:11:bc:55:d5:ea:7c:c7:3b:8f:
4b:03:82:93:a2:53:1a:1b:8d:ef:15:90:d9:b7:b9:c8:4d:53:
da:75:e7:63:6c:2b:bd:46:28:b4:79:34:b7:63:df:c8:5b:25:
8d:94:69:2d:c1:05:34:f6:1c:da:2c:4c:28:fe:5e:e1:32:79:
21:29:61:18:e8:d1:66:6a:62:7c:72:dc:36:2e:fe:e8:dc:c1:
e1:05:bb:99:b8:b7:05:df:88:d4:da:9f:f6:91:ed:15:63:39:
9a:ce:a0:e2:d3:84:76:95:30:a2:ea:34:0a:1c:4e:97:aa:45:
bb:d5:06:30:2f:97:2c:3f:a5:e3:0e:b5:63:f5:b9:df:d3:82:
35:11:d5:44:db:98:e4:5d:c4:9f:ce:97:f6:00:ad:e6:81:65:
b2:4a:e7:68:4d:f5:2f:b9:41:31:59:3b:3e:fd:bd:98:ab:40:
cd:82:60:17:6b:a9:56:4c:9d:c8:a5:b2:8c:17:53:75:19:43:
c4:d6:0a:72:11:d1:69:c0:d0:44:1e:65:20:ac:43:e2:89:4d:
20:a8:c1:97:6a:fd:ad:4e:01:66:e8:64:c6:f8:b1:24:24:74:
d6:48:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:59 2026 by rpki-client