Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aRXzR3BkEGD8kXsjWRxwVfA9yAc.roa
File: aRXzR3BkEGD8kXsjWRxwVfA9yAc.roa (raw, json)
Hash identifier: KcHXSD53qfOuuq1sQ1qgPSfRyeLxuGA/CXWKgfpH5FE=
Subject key identifier: 69:15:F3:47:70:64:10:60:FC:91:7B:23:59:1C:70:55:F0:3D:C8:07
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D2085E6A90793B1D2437D6BE2CA3EC79F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aRXzR3BkEGD8kXsjWRxwVfA9yAc.roa
Signing time: Tue 24 Mar 2026 15:45:39 +0000
ROA not before: Tue 24 Mar 2026 15:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
5.175.164.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:85:e6:a9:07:93:b1:d2:43:7d:6b:e2:ca:3e:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 15:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6915f34770641060fc917b23591c7055f03dc807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:c2:f2:25:92:dc:22:ad:94:7e:b6:a7:86:
8e:25:fb:eb:ee:70:83:21:80:75:6f:29:c0:aa:7f:
19:0b:f8:f0:40:7c:0d:92:ca:99:94:4f:ba:68:cf:
63:be:3c:13:d2:da:12:fc:96:c5:a5:6f:c3:df:f7:
9b:62:73:16:5a:23:fe:44:d1:9d:24:ab:98:3d:96:
c9:2d:2b:e2:21:7c:b8:2e:1b:5a:bd:39:6e:c0:84:
18:31:df:6d:30:e3:a9:84:45:6a:c2:e7:f4:d1:01:
46:7d:b7:e6:79:a6:53:65:4b:cd:b8:2b:b0:21:c8:
e9:95:9c:39:de:71:d2:31:a4:58:95:b8:87:8d:33:
01:97:e2:fa:f1:9a:8f:24:4c:31:c5:9a:39:78:a0:
e4:ac:51:ce:90:16:74:40:f7:1c:cf:19:bd:fd:2a:
06:97:0b:3b:4e:43:7f:1a:b9:5b:be:d9:c0:a1:ca:
31:7f:62:c4:fa:7d:ac:f8:f7:51:61:ec:5b:2c:07:
b0:e1:5d:6a:f2:1a:aa:7a:25:bf:9b:60:10:34:22:
55:fd:b8:2f:97:7c:df:ec:bf:15:91:2a:66:eb:36:
35:ae:3e:3a:65:23:d9:33:85:8d:74:97:de:2b:59:
eb:37:f6:ce:48:63:68:92:cf:13:ae:3e:72:99:67:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:F3:47:70:64:10:60:FC:91:7B:23:59:1C:70:55:F0:3D:C8:07
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aRXzR3BkEGD8kXsjWRxwVfA9yAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.175.164.0/24
5.175.168.0/24
5.175.195.0/24
5.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0b:f8:d2:58:f9:3d:31:df:73:41:59:cc:a3:9e:64:ec:c8:
03:39:9b:18:42:3c:e0:0c:88:b7:a3:fb:cc:0b:da:67:ba:1d:
68:2e:74:d0:75:0d:b8:b9:12:d5:29:a2:01:38:90:4d:e8:02:
e4:a3:5e:f5:5c:23:21:9c:e0:9a:0f:ea:10:00:86:02:5e:d0:
ae:72:31:fb:34:9c:d1:a8:88:bd:62:ab:01:38:9b:fe:db:9e:
58:40:f9:6c:0c:8b:f0:03:1a:03:23:b0:00:26:9d:71:0b:d9:
21:c3:1c:63:40:d7:89:8c:8d:23:06:14:c9:69:eb:1f:8d:fa:
8c:9f:c1:e0:c4:13:ac:4f:f2:e2:51:ba:b1:87:9d:79:b2:d5:
8a:2e:52:b5:16:47:75:b8:d0:5f:fd:b6:8f:28:1a:4a:ca:81:
7e:29:5d:32:ae:41:a9:05:7d:50:f6:af:2e:32:7c:5d:f4:fa:
73:76:0b:c7:dc:8c:c2:2e:8e:46:5b:2b:8c:76:b5:6e:4f:03:
6c:62:0b:7d:25:7c:13:68:66:6a:a0:18:ce:dd:ec:5b:ee:63:
cf:7f:fa:ab:9c:43:6b:44:f9:b3:13:97:47:24:cf:f8:74:9a:
de:a8:82:79:37:cc:19:16:9b:42:ac:27:7b:a7:04:9f:af:19:
18:a1:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:00 2026 by rpki-client