Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/66Tx5n0VF2gb4Dk9h-g3joehC4M.roa
File: 66Tx5n0VF2gb4Dk9h-g3joehC4M.roa (raw, json)
Hash identifier: eVVDzVvgH+ct9gBkbE/fh8FRSbLjrk1rJXuPLUlBaCE=
Subject key identifier: EB:A4:F1:E6:7D:15:17:68:1B:E0:39:3D:87:E8:37:8E:87:A1:0B:83
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0CFDC6ADD402A1DA01BB6E04D76E6B7A3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/66Tx5n0VF2gb4Dk9h-g3joehC4M.roa
Signing time: Wed 23 Sep 2026 20:02:03 +0000
ROA not before: Wed 23 Sep 2026 20:02:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
77.90.63.0/24 maxlen: 24
85.93.2.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
217.69.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:dc:6a:dd:40:2a:1d:a0:1b:b6:e0:4d:76:e6:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 23 20:02:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eba4f1e67d1517681be0393d87e8378e87a10b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:01:67:1a:de:01:bc:8f:24:77:d7:30:fd:
1d:5e:5a:ba:f7:fc:3d:2f:d6:c1:b6:94:ea:ff:92:
e3:7a:65:3d:d8:56:82:0a:83:b8:99:33:b3:7f:a3:
43:69:12:c9:5d:0b:30:75:80:90:9d:3a:3d:47:8d:
29:ad:08:3c:4d:c6:7e:e4:50:3a:a9:66:d6:cc:ac:
2f:2e:d1:ae:6a:0a:dc:ee:94:ba:7a:d2:04:f9:51:
e8:37:ce:5b:8a:13:6e:8b:be:1f:6e:38:21:5d:7f:
b2:88:f0:dd:6c:0a:f5:c8:de:1e:b7:b4:2d:47:8a:
90:a1:3f:28:8b:ac:65:70:b4:dd:2b:44:dc:19:a8:
a1:69:db:0a:bf:91:bc:9e:cb:15:9a:7b:ac:c4:e7:
f4:57:a2:f3:13:ab:2c:3b:0f:06:f5:02:ae:cf:0d:
36:6c:b9:0b:b9:40:8a:57:ba:a7:67:30:21:5e:b1:
cb:4a:4b:5f:38:ce:a7:2e:0e:80:f3:99:18:96:f7:
1f:a9:d6:58:f4:0f:8b:c0:4c:f2:14:0e:95:9d:99:
6b:ef:62:5a:fa:ab:0d:64:6f:1f:54:78:ec:ac:8b:
2a:3d:dc:7a:8c:ab:95:15:fa:bc:9f:4a:05:ff:d8:
18:4f:29:1a:71:47:a5:bb:26:61:b5:6f:19:40:61:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:F1:E6:7D:15:17:68:1B:E0:39:3D:87:E8:37:8E:87:A1:0B:83
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/66Tx5n0VF2gb4Dk9h-g3joehC4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.117.0-5.231.119.255
5.231.123.0/24
77.90.15.0/24
77.90.52.0/24
77.90.60.0/23
77.90.63.0/24
85.93.2.0/24
94.249.184.0/24
94.249.186.0-94.249.189.255
94.249.195.0/24
94.249.198.0/24
185.129.84.0/22
217.69.167.0/24
Signature Algorithm: sha256WithRSAEncryption
66:aa:93:94:27:de:e5:e1:48:6f:9b:56:99:a5:7e:84:b5:02:
d8:7a:45:c7:74:d7:22:e3:a0:09:7e:52:bd:45:42:16:e1:9f:
27:40:b2:7c:fd:bb:a8:16:3f:52:2d:a9:a4:c1:79:e5:c3:9d:
5c:ba:e2:04:28:0c:cd:3e:9f:e0:4a:3c:ac:d4:92:d6:95:ca:
3e:ec:ab:60:00:2f:05:59:07:41:6a:84:c2:65:a0:bb:9d:f7:
d5:bb:db:37:12:e5:17:b5:d3:53:45:4d:b4:fd:60:dd:38:9d:
db:ff:ed:77:0a:e8:aa:b4:fc:9a:b1:74:1c:8b:0e:e9:54:89:
af:b3:a5:9f:8f:6a:3a:fc:85:4f:f5:ca:04:ac:67:c4:fb:26:
f8:a6:9c:a8:81:d5:97:94:5f:54:59:26:7a:46:57:73:de:5f:
10:1f:c8:49:23:2a:44:35:cc:cd:e5:9a:c3:81:a4:f1:4f:49:
d6:23:0a:89:4e:01:b5:84:ed:5c:e6:51:37:09:59:bf:68:79:
a9:0e:e7:40:c8:a3:e2:38:7c:7f:a3:b3:5b:17:18:de:4f:7b:
54:1a:e6:00:a2:b7:2f:af:d5:df:1b:80:03:8b:5d:1c:53:a0:
08:bc:8f:a0:8a:0d:b7:ce:be:f6:1b:08:43:4c:a1:e9:e3:82:
3e:30:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:03:56 2026 by rpki-client