Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JLiTbMh3drhoS1zhlUURNJFShHY.roa
File: JLiTbMh3drhoS1zhlUURNJFShHY.roa (raw, json)
Hash identifier: DCAfMvgCH7sNxb8AA8mu2ghzRjgBiSWlSr8K05k9gGA=
Subject key identifier: 24:B8:93:6C:C8:77:76:B8:68:4B:5C:E1:95:45:11:34:91:52:84:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F8E98EEC1A6A20524087ADB0F88028DB4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JLiTbMh3drhoS1zhlUURNJFShHY.roa
Signing time: Thu 23 Jul 2026 10:50:15 +0000
ROA not before: Thu 23 Jul 2026 10:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:98:ee:c1:a6:a2:05:24:08:7a:db:0f:88:02:8d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 10:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b8936cc87776b8684b5ce19545113491528476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:c7:30:74:e3:78:30:d2:22:f7:23:96:8a:
78:66:37:1a:38:98:94:ea:1d:1f:8a:b3:71:e8:c8:
c3:6c:f5:31:72:da:01:84:db:d2:3d:03:53:72:ec:
48:44:78:60:46:fe:83:42:9c:4a:b2:01:e3:bb:74:
52:7c:04:ea:3f:7f:9a:81:56:76:9a:50:aa:ca:9c:
55:bb:47:ee:1e:20:41:8c:d5:ce:24:a9:e9:f4:19:
bb:55:ea:67:81:83:40:19:09:02:2a:e6:44:52:c8:
d1:75:cf:3e:e4:a1:09:08:df:63:ce:84:d9:83:6c:
f7:76:91:9f:e7:73:87:79:f1:b3:58:4a:8a:f3:e4:
87:29:75:18:9e:77:f2:a7:81:f5:11:21:11:24:5f:
f2:6c:f8:7f:13:08:88:b6:93:17:11:36:45:79:f6:
56:be:d7:8a:8c:b8:fa:fc:eb:47:69:0f:66:cd:af:
47:91:7f:e2:0f:ab:51:a7:41:fe:95:12:a9:9b:72:
1c:1e:bc:8a:e1:ed:51:40:54:0b:d3:8b:d3:dd:42:
d2:25:7d:58:a1:69:35:cc:c4:67:45:f0:ad:6a:bb:
8e:97:57:4b:5a:e0:6e:ba:42:d5:34:3d:27:fe:1d:
c7:67:78:36:57:3c:e6:36:15:1c:16:4c:db:60:4b:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:93:6C:C8:77:76:B8:68:4B:5C:E1:95:45:11:34:91:52:84:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JLiTbMh3drhoS1zhlUURNJFShHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.175.203.0/24
5.175.221.0/24
87.239.131.0/24
89.106.75.0-89.106.77.255
89.106.82.0/24
94.249.247.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:86:f7:ad:32:63:1b:bc:67:b9:5e:41:69:18:b8:d2:3e:42:
bd:b9:c1:38:bd:41:28:e2:a2:a4:da:39:35:ce:17:d8:da:87:
fc:a5:9d:5a:01:2d:12:0f:80:4a:fa:b2:df:27:6b:44:22:25:
11:62:bd:d6:65:b9:49:52:d7:5e:5b:4d:94:cc:b2:ff:68:15:
36:64:dc:43:b5:25:ca:22:70:a7:59:55:db:a1:17:0e:ab:87:
7b:ce:08:15:ba:e5:b2:4d:45:3f:ce:88:98:b2:c7:89:be:a4:
f9:30:47:82:ce:07:4c:4f:07:ff:60:77:5c:57:ac:5c:20:41:
27:98:0e:4f:70:69:76:03:ff:de:c4:ee:65:a0:d2:d1:bb:dc:
10:a9:d0:0f:e8:84:22:cf:b4:af:69:58:f0:ab:84:ed:3e:9c:
d7:01:f1:ad:63:4c:04:da:72:56:34:7d:52:43:03:56:45:55:
3e:4c:82:be:19:83:d9:d8:a7:55:04:b0:48:8e:fb:59:c9:56:
a6:a4:18:15:1f:27:da:15:4a:32:71:5c:5b:8d:a3:2e:8d:ee:
92:76:d7:fd:a9:1b:d4:2f:e5:4b:c5:6c:6e:81:55:bc:6e:59:
dd:b9:1f:cf:ad:3c:83:0b:0e:83:f2:ec:43:3b:ca:58:82:e5:
6a:3a:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:22 2026 by rpki-client