Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8XzKHCdFRFHUkyrgftQBH6ukXtQ.roa
File: 8XzKHCdFRFHUkyrgftQBH6ukXtQ.roa (raw, json)
Hash identifier: IDP3j6zTTtA+bQ3arBRoyStilzdsKIGitU17qxjELXw=
Subject key identifier: F1:7C:CA:1C:27:45:44:51:D4:93:2A:E0:7E:D4:01:1F:AB:A4:5E:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A198AE5C1EE3B046B82603AB278DCE15D1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8XzKHCdFRFHUkyrgftQBH6ukXtQ.roa
Signing time: Sun 01 Nov 2026 19:55:26 +0000
ROA not before: Sun 01 Nov 2026 19:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.221.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.64.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.249.174.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:ae:5c:1e:e3:b0:46:b8:26:03:ab:27:8d:ce:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 1 19:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f17cca1c27454451d4932ae07ed4011faba45ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:54:fd:6e:78:9f:7d:01:0f:73:2f:7e:b3:
5c:1c:c8:64:b6:a2:97:95:a3:88:34:53:85:c8:c6:
b6:4b:ad:54:c5:a9:1f:41:80:e8:dc:2d:bc:09:60:
50:4e:0e:e7:ab:05:92:cd:d9:68:2c:d4:35:de:25:
05:e9:3d:64:29:38:4b:c3:a9:6e:e0:f6:cc:e8:95:
2d:0c:c4:91:74:ee:64:de:0a:69:73:dc:83:6d:ce:
c5:79:c3:80:46:3e:1a:ca:22:c7:0c:05:36:41:7d:
7f:10:54:a2:59:39:e4:b6:cc:96:43:a7:6c:76:69:
57:10:88:f7:56:d0:fa:e2:a5:70:29:79:b3:b1:22:
1a:dc:47:ea:7d:e5:6d:29:9f:e2:16:2b:b7:ff:c8:
13:72:36:4d:d2:19:d8:93:7e:11:cf:b8:df:42:33:
ee:9e:4b:49:6e:18:7d:61:b3:79:a8:b2:df:4b:c7:
d6:1e:55:7a:e4:dd:c3:24:db:52:31:5b:f8:7d:bd:
55:23:ac:c1:ac:f8:f9:df:fe:a0:d4:5f:24:09:6d:
10:55:8f:8c:7c:7b:e4:83:29:21:dd:a5:12:3f:0f:
2b:5d:92:cf:04:f4:db:01:19:08:c2:62:64:96:a1:
57:fc:b3:15:d8:e8:07:5a:2e:ff:fa:3c:87:b3:88:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:CA:1C:27:45:44:51:D4:93:2A:E0:7E:D4:01:1F:AB:A4:5E:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8XzKHCdFRFHUkyrgftQBH6ukXtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.175.220.0/24
5.231.26.0/24
5.231.221.0/24
5.231.253.0/24
77.90.3.0/24
77.90.28.0/24
85.93.23.0/24
89.106.64.0/24
89.106.76.0/24
89.144.33.0/24
89.144.42.0/24
94.103.170.0/24
94.103.172.0/23
94.249.174.0/24
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ee:6a:25:9b:8d:0e:93:d3:09:25:74:1a:24:40:50:b0:7a:
06:32:a7:ce:20:b9:1d:d2:aa:0e:4f:1c:66:74:5b:6a:4b:53:
8d:9b:bc:f8:83:23:9e:0f:4c:01:14:7b:17:ce:09:a5:a8:b6:
bb:48:4f:ea:21:4f:71:9f:d4:f0:6f:6a:8d:23:16:07:b2:44:
ce:60:88:57:f4:19:f2:65:70:a2:8d:fa:56:8d:2c:0b:1e:42:
ee:c9:4f:04:d6:1f:35:49:6b:1e:ff:6e:57:28:e5:6e:e1:a5:
95:50:99:30:69:ea:fd:52:a2:3f:e7:12:c4:13:e7:cc:8e:c7:
aa:d9:42:e8:92:8c:20:9b:ae:22:1c:05:39:df:a8:c3:0b:f5:
b5:05:9d:73:85:5d:65:5d:45:ca:00:26:09:d4:ec:53:eb:99:
ed:a9:e1:09:b7:2d:46:8e:c1:e4:96:be:74:ba:af:35:86:df:
72:c4:18:47:d0:9c:dc:56:bf:4c:d4:7e:42:d2:1f:9f:3c:95:
8d:67:0b:1e:9d:1a:e9:d1:3e:e6:3b:21:50:da:c2:11:d1:e1:
dc:21:f4:62:50:37:5f:cf:59:f1:b5:5e:52:de:be:19:4b:fa:
84:bd:e3:c1:29:4f:b1:fd:25:aa:33:57:07:b6:95:9c:72:f0:
54:4a:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:54 2026 by rpki-client