Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zlhowy2wFEz1AntLeNcHwJVCmeo.roa
File: Zlhowy2wFEz1AntLeNcHwJVCmeo.roa (raw, json)
Hash identifier: AU2O510OpfXixpit7V4TLln8trkPKPVeEAEWT6c8r/8=
Subject key identifier: 66:58:68:C3:2D:B0:14:4C:F5:02:7B:4B:78:D7:07:C0:95:42:99:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DF287A8FC64CCB522AA8E22A6E69DC3BD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zlhowy2wFEz1AntLeNcHwJVCmeo.roa
Signing time: Mon 04 May 2026 10:27:49 +0000
ROA not before: Mon 04 May 2026 10:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:87:a8:fc:64:cc:b5:22:aa:8e:22:a6:e6:9d:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 4 10:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=665868c32db0144cf5027b4b78d707c0954299ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:b8:85:a6:57:52:0b:ba:51:30:48:f8:dc:
3c:a2:45:41:03:98:88:ec:a7:a1:45:d4:45:92:f6:
82:d6:08:dd:93:6a:5e:cd:e2:1b:6e:f2:bd:e3:11:
0d:48:84:e5:53:56:f8:61:f4:49:d1:17:76:72:b2:
7b:27:18:14:4b:5b:9e:1b:2e:94:bd:84:af:13:ff:
2b:a5:fc:92:0f:99:be:f4:e3:de:73:7d:e1:3f:4b:
d8:2c:eb:2a:e4:66:e1:82:33:f7:d0:56:5d:e1:a4:
5a:fa:63:dc:eb:6a:85:d8:d2:7a:e8:19:31:d8:92:
7c:3f:db:51:f0:6d:af:76:83:95:75:07:44:d6:c2:
fc:7c:67:6f:18:81:dc:7a:46:0c:4e:f1:78:89:15:
c7:bc:3b:a4:2c:53:9e:b3:1e:54:78:8c:95:88:58:
67:dc:28:2a:fa:2d:61:04:1b:a0:40:bf:da:bb:ae:
ff:ae:f0:f1:12:38:28:ec:c3:f9:55:04:7d:df:e5:
0f:d5:b8:44:a4:6b:90:11:97:bc:0f:2c:fb:65:fd:
24:1e:69:11:dc:f1:f2:f2:7a:13:b1:d4:52:8f:69:
f9:d5:b4:bc:af:79:a6:12:27:64:4c:38:77:db:98:
be:ea:7b:b6:4c:6b:49:4e:ec:c5:c2:67:f6:d8:33:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:68:C3:2D:B0:14:4C:F5:02:7B:4B:78:D7:07:C0:95:42:99:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zlhowy2wFEz1AntLeNcHwJVCmeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.231.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:38:01:20:25:ed:df:03:01:77:8b:8d:dd:b5:12:e5:54:0a:
fe:e4:cb:92:35:28:7a:ca:3c:80:9b:05:45:6a:82:0b:3c:57:
60:ff:af:be:f5:6a:f3:3d:3a:ec:d1:61:12:d7:73:c5:43:86:
5f:13:4d:ae:4e:e5:0c:9b:54:a4:be:7d:be:61:29:99:99:7d:
72:48:98:08:99:e3:4a:52:13:0b:eb:6c:2f:75:29:d1:ef:3a:
18:20:79:d4:b3:10:15:d4:65:c1:22:40:9c:1f:73:4c:cc:bf:
1e:a0:5d:40:41:38:1e:d8:9b:a2:1f:2f:8e:3d:d0:31:54:b9:
e1:17:71:ff:22:71:58:9d:c2:22:1d:b4:6b:3d:ae:8e:28:e8:
0d:e4:a3:9a:b9:f4:e9:0b:d5:f5:f1:dc:78:38:52:2b:68:31:
2d:cd:08:da:b8:ac:3f:89:ac:f4:ca:92:6c:70:2f:08:85:9a:
cd:ab:d2:98:ef:72:31:67:d7:a9:be:24:c5:e9:45:67:a2:68:
05:ce:24:0f:0d:da:59:f8:99:2e:4e:0e:fe:67:d8:eb:bc:28:
ee:32:e6:c1:f0:ff:db:88:e4:94:55:0b:27:a7:c6:74:52:57:
55:ab:65:27:72:97:b0:67:e0:7f:eb:68:63:a9:e7:bd:50:90:
d4:ec:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:21 2026 by rpki-client