Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a42vx-u9qzAvDtp_BT2qiBmIjWA.roa
File: a42vx-u9qzAvDtp_BT2qiBmIjWA.roa (raw, json)
Hash identifier: wi/Nk8kEBWKemA8+IwKI8xGf0HOI3Edzig/bqYepGo4=
Subject key identifier: 6B:8D:AF:C7:EB:BD:AB:30:2F:0E:DA:7F:05:3D:AA:88:19:88:8D:60
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1B56EEFECC1B644CCCA3670905EB36428
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a42vx-u9qzAvDtp_BT2qiBmIjWA.roa
Signing time: Sat 07 Nov 2026 09:55:08 +0000
ROA not before: Sat 07 Nov 2026 09:55:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206491
IP address blocks: 5.175.224.0/24 maxlen: 24
5.230.5.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b5:6e:ef:ec:c1:b6:44:cc:ca:36:70:90:5e:b3:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 7 09:55:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b8dafc7ebbdab302f0eda7f053daa8819888d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:ba:db:1d:97:a9:a3:9c:5c:43:54:c5:43:
af:cd:1f:d8:09:bb:79:b7:b5:fe:d6:94:81:4e:88:
2a:3c:5e:d3:0a:3b:f4:b6:1f:6a:70:00:54:64:2a:
85:63:b0:87:1d:c5:f5:3c:84:17:7f:3c:69:31:70:
1f:7c:43:c4:85:0d:95:59:45:1e:b3:52:54:fa:f9:
1c:f9:78:28:e7:c9:8a:9e:dc:b9:42:e1:26:2e:89:
09:71:46:76:25:d2:64:fd:3f:ba:b4:00:96:b8:5c:
af:a2:24:73:27:57:cc:6e:c4:b4:c4:a5:82:8a:1f:
63:fc:e2:9a:73:70:b5:62:54:3b:96:a5:4d:3d:23:
72:ac:50:3f:48:b1:b4:0a:1d:2d:41:30:af:71:72:
bc:ac:ea:6a:79:88:88:08:f6:b6:d4:4f:93:53:fe:
57:7b:e6:f2:9a:54:fc:33:05:23:20:e2:40:b6:50:
66:ef:59:17:50:bf:38:5b:9c:7d:4b:5d:7d:81:d1:
31:b9:29:73:1d:ee:34:36:00:2f:fe:52:41:66:af:
c9:cc:26:c9:c1:77:b3:b4:30:9c:04:23:f5:b7:0a:
dc:e8:6a:63:d9:ce:e1:ce:a3:f3:e6:e0:9e:e9:7d:
89:46:aa:ca:e6:9c:81:cf:73:b1:df:89:da:c6:03:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:AF:C7:EB:BD:AB:30:2F:0E:DA:7F:05:3D:AA:88:19:88:8D:60
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a42vx-u9qzAvDtp_BT2qiBmIjWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.224.0/24
5.230.5.0/24
85.118.162.0/24
89.144.61.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:4a:23:dc:77:00:3f:6c:9e:49:10:bd:ca:cc:cf:65:64:6e:
dd:be:78:47:68:0b:2e:ff:19:75:61:b7:fe:fb:d2:57:52:8e:
9f:c2:42:e9:79:c0:cc:24:50:90:0f:15:18:e3:e8:d7:0f:e2:
3c:bb:71:9b:42:ab:ba:9b:c6:2f:07:c7:df:36:df:7f:a8:43:
01:0e:09:72:56:14:8b:8f:7f:90:52:7d:83:68:bb:1d:c8:23:
78:d2:89:42:02:b3:00:c8:63:ac:e5:d6:ba:46:43:05:91:8e:
e6:48:b4:34:5c:2f:1e:fc:85:5b:1b:ef:41:8e:f0:e4:51:94:
ff:28:1e:b7:0a:14:ad:7c:d6:11:1a:de:b0:42:a5:b1:f5:0b:
b1:1d:18:50:0d:84:4f:60:27:ec:1c:29:ce:95:9c:7b:ae:26:
f6:a6:56:9f:16:6b:d5:d3:9a:3a:9f:1f:24:a0:9e:44:69:20:
02:2a:0b:73:cf:96:0c:1a:e2:ff:a7:dd:43:5e:f3:16:59:7b:
df:20:17:43:33:bb:de:cd:1a:50:c3:e2:cb:cc:4a:f8:07:45:
35:a4:8a:e1:3d:f1:8f:45:37:12:c2:df:90:61:fb:1a:d0:14:
64:da:27:b8:51:dd:ce:65:56:84:f0:54:05:e4:ad:0e:80:66:
e2:33:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:24 2026 by rpki-client