Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AEFgV3B-oM6GmvG0JO3pfN-8ais.roa
File: AEFgV3B-oM6GmvG0JO3pfN-8ais.roa (raw, json)
Hash identifier: 5xk/xQpvhG4kkuW6mwH50+7rH8gZP8rJf/+kWF3NIGY=
Subject key identifier: 00:41:60:57:70:7E:A0:CE:86:9A:F1:B4:24:ED:E9:7C:DF:BC:6A:2B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1D709022D25A64EC4267C853A71B69C30
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AEFgV3B-oM6GmvG0JO3pfN-8ais.roa
Signing time: Fri 13 Nov 2026 22:30:54 +0000
ROA not before: Fri 13 Nov 2026 22:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
77.90.24.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.149.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d7:09:02:2d:25:a6:4e:c4:26:7c:85:3a:71:b6:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 13 22:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00416057707ea0ce869af1b424ede97cdfbc6a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:5b:48:40:e8:79:70:b7:e7:18:df:43:35:
e0:bf:38:30:5e:aa:7a:3a:52:aa:4c:ff:4a:a0:1c:
11:4e:5a:8e:f9:bc:42:f1:cc:89:d1:77:f0:8e:f6:
f1:89:01:3b:04:43:9d:6a:3f:8b:86:aa:26:e8:cc:
6c:50:b1:d9:92:ab:fe:8d:3b:2a:74:30:94:eb:65:
7d:c6:be:12:b1:2b:2e:52:ba:18:03:87:97:c9:09:
4f:31:14:d2:cc:45:cf:1b:41:90:c3:c5:40:60:a7:
1c:54:9b:95:3a:4f:b2:63:22:21:99:f8:d2:42:50:
3e:a0:47:c7:09:91:ef:e8:5b:bc:41:e3:25:9e:ba:
66:a8:1c:05:21:e6:74:8a:6a:62:09:be:f1:6b:67:
09:08:ab:a6:a9:e3:06:62:92:6f:45:c6:2e:0f:af:
93:cb:5a:33:01:dc:aa:a1:75:46:33:cf:10:cf:df:
1e:c0:55:bf:56:4d:55:fb:01:46:39:91:80:f0:0e:
32:6b:24:9d:6a:72:fc:ae:49:b9:e5:73:4d:3a:a7:
cd:3f:a0:75:c4:b2:a8:2d:ef:68:9c:bd:32:3a:ee:
75:17:0e:46:17:dd:95:21:a6:53:57:ef:a1:e7:82:
46:ab:de:d9:5a:83:63:41:ec:3c:08:1e:1f:9c:bf:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:60:57:70:7E:A0:CE:86:9A:F1:B4:24:ED:E9:7C:DF:BC:6A:2B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AEFgV3B-oM6GmvG0JO3pfN-8ais.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.231.242.0/24
77.90.24.0/24
77.90.48.0/24
89.106.71.0/24
94.249.149.0/24
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:ea:ff:bb:df:27:b9:d5:75:4a:96:66:02:c8:9d:ec:db:51:
d0:d2:4a:bb:3b:31:e6:59:75:b3:01:29:60:7c:38:af:d1:6e:
e0:9e:34:ce:b4:ec:28:84:69:04:74:09:58:8f:30:a0:84:50:
e8:36:eb:ba:63:43:35:01:51:d5:bf:8f:19:49:17:39:54:2b:
5b:49:99:34:09:2c:c6:7a:44:d5:4e:e9:15:be:7a:c7:0c:f1:
82:3c:78:e3:8c:e2:ba:4e:43:9a:5b:9a:d3:63:1a:2c:2d:88:
88:26:d0:7f:a7:1d:5e:55:15:68:fa:8b:99:f2:b2:02:e5:ba:
56:82:07:bd:c0:88:8b:44:6d:c6:20:5f:2e:50:0c:44:fb:63:
59:8f:39:00:55:c0:91:1f:69:8d:01:ee:2f:5b:11:e2:76:06:
6f:53:c1:5b:84:2e:9b:e3:dc:da:b0:11:b4:9d:e2:7d:47:fb:
f3:a3:2c:76:99:26:21:4e:e6:46:36:c4:0e:dd:01:54:6c:83:
8b:36:c9:6a:b3:97:cb:af:d8:84:25:ef:d9:d8:88:a2:b4:49:
97:80:fa:19:28:dd:86:8c:8a:41:93:d2:c1:be:ea:32:f9:73:
e2:c7:b9:b5:ee:e7:fe:d1:f2:3f:bf:01:f0:e8:56:4a:50:2a:
dc:8b:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:46 2026 by rpki-client