Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aRcjAw9YlMkoT7gtT4aJqW1az18.roa
File: aRcjAw9YlMkoT7gtT4aJqW1az18.roa (raw, json)
Hash identifier: Y3NG6OROKFrfxmTzG90q9k4P0XC5VojDM0f6EbAEFeM=
Subject key identifier: 69:17:23:03:0F:58:94:C9:28:4F:B8:2D:4F:86:89:A9:6D:5A:CF:5F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E0AE89F76CAA8C108B60D7169EEDDF5D7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aRcjAw9YlMkoT7gtT4aJqW1az18.roa
Signing time: Sat 09 May 2026 04:04:37 +0000
ROA not before: Sat 09 May 2026 04:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.165.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.232.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0a:e8:9f:76:ca:a8:c1:08:b6:0d:71:69:ee:dd:f5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 04:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=691723030f5894c9284fb82d4f8689a96d5acf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:f0:bb:5a:e4:02:a7:8e:33:5b:6c:50:b0:
89:20:e6:c7:1e:9c:30:b2:1d:99:f6:a6:61:ed:8c:
e7:18:e1:b4:0d:9b:79:a9:db:fd:f4:4d:a6:10:e0:
d0:8b:6c:d1:66:86:66:3c:a9:c2:e2:8c:d3:4c:e2:
c3:60:80:74:04:53:41:10:3c:15:8d:7d:33:2b:98:
7a:4a:b3:74:96:97:7f:2b:80:47:dd:4f:85:5c:fa:
93:3c:ec:b2:bb:06:98:ec:79:de:c1:30:f6:4c:9e:
e4:f0:9e:e7:a5:ba:a3:c4:da:c6:f9:ec:16:cf:9d:
86:36:e8:ca:80:82:e6:e9:b5:b9:a1:08:f4:42:6e:
74:e3:e7:58:26:14:7e:25:18:c0:02:15:e9:4d:08:
b2:5b:d9:ed:b7:14:fc:7b:a3:85:26:26:06:f1:82:
b0:9e:7d:06:04:b1:2e:80:e5:ed:bd:02:b5:8f:5f:
e8:f4:6e:52:b8:c3:de:20:ec:8c:9a:e0:ff:00:af:
ba:9a:1c:8f:f2:2b:0b:27:73:37:b1:12:99:ef:b3:
82:69:ac:6c:0c:49:1f:18:b7:45:52:47:88:b1:13:
f1:91:25:5d:9c:21:1d:76:b8:98:b9:9d:c1:96:79:
f8:b7:26:66:6a:ef:7f:af:53:23:f7:1b:41:d8:68:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:23:03:0F:58:94:C9:28:4F:B8:2D:4F:86:89:A9:6D:5A:CF:5F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aRcjAw9YlMkoT7gtT4aJqW1az18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.165.0/24
5.175.211.0-5.175.212.255
5.231.110.0/24
5.231.123.0-5.231.124.255
5.231.241.0/24
89.144.40.0/24
94.249.181.0/24
94.249.232.0/24
178.18.149.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9f:37:11:11:1f:d9:ed:6f:e7:2a:ad:c6:d3:61:83:e1:5e:
f5:fe:bb:15:a8:6b:bb:59:1d:de:20:be:36:39:c4:52:e0:4d:
5a:91:38:6b:8f:a3:49:4e:b0:e6:6d:63:6b:5b:6f:4d:68:9e:
02:96:f8:56:a4:e5:66:7b:64:6e:76:63:36:bc:c0:3a:82:81:
5d:c9:7b:a6:7d:ae:34:46:43:b3:43:36:bc:bf:c7:73:28:02:
ab:67:87:24:be:b9:db:4c:8a:25:59:b1:b0:52:6c:ce:b1:8e:
71:dc:09:56:c1:4e:eb:38:e0:dc:b1:14:d6:93:f3:eb:08:64:
04:92:b3:13:7d:74:bd:cb:df:32:ff:66:d2:86:ef:78:44:4f:
ff:2b:22:45:ad:bb:10:22:e0:6f:2a:60:d1:10:38:7c:99:51:
ba:00:cd:a3:43:d2:44:7e:59:92:db:cf:e2:91:30:34:ff:a7:
8e:be:78:36:dd:6e:3f:eb:45:78:ee:c9:de:53:34:d5:48:31:
31:b8:ee:99:e5:d3:f4:34:8d:a1:02:d3:96:0a:11:ec:27:ff:
31:b3:35:57:d2:22:31:a9:0a:f9:d5:25:e1:88:11:cf:7a:9f:
00:6f:f1:ac:1a:4b:e7:e0:cf:d7:9b:00:78:6b:e5:8a:a7:a7:
6d:fd:03:39
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ4K6J92yqjBCLYNcWnu3fXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNTA5MDQwNDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTE3MjMwMzBmNTg5NGM5Mjg0ZmI4MmQ0Zjg2ODlhOTZkNWFjZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vbwu1rkAqeOM1tsULCJIObHHpww
sh2Z9qZh7YznGOG0DZt5qdv99E2mEODQi2zRZoZmPKnC4ozTTOLDYIB0BFNBEDwV
jX0zK5h6SrN0lpd/K4BH3U+FXPqTPOyyuwaY7HnewTD2TJ7k8J7npbqjxNrG+ewW
z52GNujKgILm6bW5oQj0Qm504+dYJhR+JRjAAhXpTQiyW9nttxT8e6OFJiYG8YKw
nn0GBLEugOXtvQK1j1/o9G5SuMPeIOyMmuD/AK+6mhyP8isLJ3M3sRKZ77OCaaxs
DEkfGLdFUkeIsRPxkSVdnCEddriYuZ3Blnn4tyZmau9/r1Mj9xtB2GjXYQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFGkXIwMPWJTJKE+4LU+GialtWs9fMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYVJjakF3OVlsTWtvVDdndFQ0YUpxVzFhejE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQABa+lMAwD
BAAFr9MDBAAFr9QDBAAF524wDAMEAAXnewMEAAXnfAMEAAXn8QMEAFmQKAMEAF75
tQMEAF756AMEALISlTANBgkqhkiG9w0BAQsFAAOCAQEAmZ83EREf2e1v5yqtxtNh
g+Fe9f67Fahru1kd3iC+NjnEUuBNWpE4a4+jSU6w5m1ja1tvTWieApb4VqTlZntk
bnZjNrzAOoKBXcl7pn2uNEZDs0M2vL/HcygCq2eHJL6520yKJVmxsFJszrGOcdwJ
VsFO6zjg3LEU1pPz6whkBJKzE310vcvfMv9m0obveERP/ysiRa27ECLgbypg0RA4
fJlRugDNo0PSRH5ZktvP4pEwNP+njr54Nt1uP+tFeO7J3lM01UgxMbjumeXT9DSN
oQLTlgoR7Cf/MbM1V9IiMakK+dUl4YgRz3qfAG/xrBpL5+DP15sAeGvliqenbf0D
OQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:13:11 2026 by rpki-client