Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4BM5KwAv4zeZMpgFymFKT3Oy9Gk.roa
File: 4BM5KwAv4zeZMpgFymFKT3Oy9Gk.roa (raw, json)
Hash identifier: 8hVbB10dqfmb94Ylp/ZFi0T7bQpJbJHRvMdvU19cZ4Q=
Subject key identifier: E0:13:39:2B:00:2F:E3:37:99:32:98:05:CA:61:4A:4F:73:B2:F4:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0C1CF5EC18F203C9053BC86B445253BD8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4BM5KwAv4zeZMpgFymFKT3Oy9Gk.roa
Signing time: Mon 21 Sep 2026 02:33:07 +0000
ROA not before: Mon 21 Sep 2026 02:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.230.153.0/24 maxlen: 24
5.230.196.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.255.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:cf:5e:c1:8f:20:3c:90:53:bc:86:b4:45:25:3b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 21 02:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e013392b002fe33799329805ca614a4f73b2f469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:79:00:05:dd:ac:cf:34:9d:3e:73:07:e9:
0a:a2:15:e5:b2:de:86:e2:8d:8f:fa:d6:5b:5b:06:
89:b4:d6:26:08:11:3a:30:10:e9:7f:1b:45:45:af:
77:e4:fd:51:5b:71:ea:cf:ad:f6:c3:37:22:7a:04:
44:d9:b2:a6:63:0a:df:c0:0f:c5:c8:ec:d3:5a:2d:
bb:2b:e1:a3:8d:fd:71:ae:17:fa:8d:a9:1d:42:ba:
b1:c4:99:94:00:27:71:a8:df:0b:22:a7:84:8e:f6:
0d:48:91:94:b3:16:80:e3:66:5e:df:ae:e8:88:2b:
d3:00:b9:e0:cd:1d:ae:63:4c:37:ae:44:76:6f:25:
9e:ae:80:ac:a5:80:b6:e0:6c:ba:e8:03:d0:ce:e6:
aa:75:b1:a4:75:65:e0:a8:32:03:3a:89:47:67:35:
16:26:cc:05:ee:a9:f9:29:ab:7c:bf:ba:b6:fe:cd:
e8:a2:d2:8f:ac:a2:dc:03:e2:7c:49:6c:3c:68:5c:
1b:13:b1:9d:6e:70:97:7c:2b:fb:e7:93:1d:f4:93:
d2:4c:e6:43:5d:a8:7c:e7:ec:4b:88:d6:a4:e3:98:
3e:83:41:7b:71:39:e1:56:28:f9:b0:48:8d:4a:62:
6e:1e:39:39:42:b5:a5:89:33:7a:f3:96:3a:bc:2f:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:39:2B:00:2F:E3:37:99:32:98:05:CA:61:4A:4F:73:B2:F4:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4BM5KwAv4zeZMpgFymFKT3Oy9Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.230.153.0/24
5.230.196.0/24
5.231.207.0/24
5.231.255.0/24
85.93.21.0/24
89.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1b:40:9c:ea:47:83:c6:0e:90:67:41:65:c3:84:7a:5a:bd:
f9:ba:b4:55:d9:63:bd:18:52:1f:3f:b0:70:df:78:77:08:58:
45:32:4c:f5:95:a4:ee:8f:fb:d1:f9:52:be:e3:9a:6b:14:d3:
06:88:81:b7:8e:45:6a:f0:c0:89:72:86:f7:e6:26:d5:0f:7e:
54:40:91:21:df:30:b7:65:97:1a:ae:1f:d6:12:f0:3c:27:a4:
61:a9:2e:df:40:2a:48:7c:63:32:ce:38:38:63:35:a8:02:4d:
62:de:e8:01:10:0e:bb:bb:bd:d6:97:ec:0a:f5:6b:a0:50:35:
6f:c9:21:e7:47:e0:be:e5:0b:46:7e:ed:fb:6d:d1:92:a1:a7:
b5:ee:61:8f:eb:ab:6e:ef:ae:8d:4b:99:db:3c:5a:95:8a:5e:
61:9d:03:1f:56:b9:24:79:87:bf:54:d3:75:9e:5d:d4:54:08:
da:b8:d0:c8:3a:89:1d:f4:80:c4:44:18:9c:34:9e:9a:20:21:
98:83:4e:bd:22:8b:43:34:06:d4:16:91:d8:fb:8c:a7:dd:97:
2a:92:48:76:99:5d:bb:c4:b6:64:7d:ed:c7:43:ae:e7:dd:c2:
17:01:f5:6b:04:b7:10:3b:7a:c6:24:f4:13:9b:48:93:37:d0:
ff:7a:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:46:40 2026 by rpki-client