Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jVB0u2Pq_UdHXUHzGq3h9ffzP5s.roa
File: jVB0u2Pq_UdHXUHzGq3h9ffzP5s.roa (raw, json)
Hash identifier: GkSTKbIJ7ptaqOiYwuzCaBoerNebaBcVTBHDVpJlyto=
Subject key identifier: 8D:50:74:BB:63:EA:FD:47:47:5D:41:F3:1A:AD:E1:F5:F7:F3:3F:9B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D0C251647498E84A06FAF498FBCBD3152
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jVB0u2Pq_UdHXUHzGq3h9ffzP5s.roa
Signing time: Fri 20 Mar 2026 16:47:30 +0000
ROA not before: Fri 20 Mar 2026 16:47:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.165.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:25:16:47:49:8e:84:a0:6f:af:49:8f:bc:bd:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 20 16:47:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d5074bb63eafd47475d41f31aade1f5f7f33f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:bf:84:56:8a:26:9e:b8:31:9a:b0:ec:38:
9f:1a:15:da:db:2b:17:44:65:4d:59:10:a2:ed:cd:
cb:59:bd:b7:b5:4f:3a:a4:0c:27:53:6d:ee:1a:bc:
6c:d0:63:23:03:aa:9f:e4:a6:d9:0f:7b:b3:50:0e:
2f:6e:67:98:12:37:1e:1a:0a:d9:c9:e2:f1:63:61:
78:d3:6a:49:f0:1a:14:0c:89:c7:c7:c9:f4:61:78:
74:f0:fa:cc:8d:23:a2:2e:b7:a8:68:a4:63:b0:e5:
09:b4:bb:95:cc:ef:3b:62:b0:ba:c0:ef:b5:7a:b7:
57:47:79:2f:a2:45:04:b7:53:f2:43:c5:eb:8d:27:
20:9f:4e:1c:32:58:ba:a0:78:14:ef:c8:64:54:23:
3c:e9:d1:09:69:57:63:0e:b7:48:8f:b1:6d:b2:69:
ba:16:0f:97:e2:5c:40:30:c3:36:1c:a8:b0:d2:a8:
55:62:c2:24:f6:40:10:85:89:ce:18:19:ae:4f:9b:
b3:d7:f3:8d:93:8b:9a:41:d0:f7:3f:f0:f0:31:05:
e4:75:b7:21:fc:3e:e8:c1:ab:9f:23:a3:5a:e9:f8:
c8:e6:e6:f1:ba:c0:d6:2e:f7:65:72:d6:b5:8d:a9:
52:c7:4e:09:9c:92:6c:14:d8:17:af:7b:cb:ff:46:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:74:BB:63:EA:FD:47:47:5D:41:F3:1A:AD:E1:F5:F7:F3:3F:9B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jVB0u2Pq_UdHXUHzGq3h9ffzP5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.165.0/24
5.175.211.0-5.175.212.255
5.231.110.0/24
5.231.123.0-5.231.124.255
5.231.241.0/24
89.106.74.0/24
89.144.40.0/24
94.249.181.0/24
178.18.149.0/24
Signature Algorithm: sha256WithRSAEncryption
88:50:7d:30:f5:3a:fd:af:64:56:6a:90:a4:d1:1f:c3:73:e0:
b6:33:82:20:75:ce:6d:4e:c7:5a:d4:9d:62:29:43:cc:0d:f2:
b1:c0:f6:30:18:a3:88:45:b8:36:d1:23:38:4d:0a:d3:b6:c7:
fd:23:f9:1a:29:51:46:14:53:61:1a:7a:d5:58:b2:e5:46:be:
6b:38:72:24:40:55:ff:2f:bc:ee:11:4a:28:73:b9:d2:58:11:
70:cb:bb:42:c9:78:6d:49:1f:60:72:35:a0:99:6e:48:9b:a8:
1b:c7:11:84:a6:2f:88:d3:a6:64:9c:e5:9b:f5:9f:52:14:d1:
67:43:d8:8d:05:66:08:be:fc:f6:56:da:31:8e:a9:d9:09:f5:
2b:81:83:4a:6d:65:7b:0b:83:45:f2:a2:6c:1c:1a:b7:09:0e:
e4:8e:88:40:7d:d9:38:d2:47:2c:f0:b1:47:28:39:63:98:25:
15:b5:f4:6d:d7:0a:9a:16:ac:9d:e6:05:ce:8b:a0:9e:9f:c9:
b1:0b:48:85:3e:3f:13:96:1e:44:75:3c:9c:7c:9f:64:fe:3e:
5c:59:9c:65:8b:74:2f:01:d2:3c:ad:d2:7a:1d:ce:36:78:1f:
c2:ad:61:52:f9:8e:4e:2a:4d:02:97:74:54:56:fa:d6:5a:cd:
61:54:75:e9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ0MJRZHSY6EoG+vSY+8vTFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzIwMTY0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDUwNzRiYjYzZWFmZDQ3NDc1ZDQxZjMxYWFkZTFmNWY3ZjMzZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzi/hFaKJp64MZqw7DifGhXa2ysX
RGVNWRCi7c3LWb23tU86pAwnU23uGrxs0GMjA6qf5KbZD3uzUA4vbmeYEjceGgrZ
yeLxY2F402pJ8BoUDInHx8n0YXh08PrMjSOiLreoaKRjsOUJtLuVzO87YrC6wO+1
erdXR3kvokUEt1PyQ8XrjScgn04cMli6oHgU78hkVCM86dEJaVdjDrdIj7Ftsmm6
Fg+X4lxAMMM2HKiw0qhVYsIk9kAQhYnOGBmuT5uz1/ONk4uaQdD3P/DwMQXkdbch
/D7owaufI6Na6fjI5ubxusDWLvdlcta1jalSx04JnJJsFNgXr3vL/0ZYXQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFI1QdLtj6v1HR11B8xqt4fX38z+bMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvalZCMHUyUHFfVWRIWFVIekdxM2g5ZmZ6UDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQABa+lMAwD
BAAFr9MDBAAFr9QDBAAF524wDAMEAAXnewMEAAXnfAMEAAXn8QMEAFlqSgMEAFmQ
KAMEAF75tQMEALISlTANBgkqhkiG9w0BAQsFAAOCAQEAiFB9MPU6/a9kVmqQpNEf
w3PgtjOCIHXObU7HWtSdYilDzA3yscD2MBijiEW4NtEjOE0K07bH/SP5GilRRhRT
YRp61Viy5Ua+azhyJEBV/y+87hFKKHO50lgRcMu7Qsl4bUkfYHI1oJluSJuoG8cR
hKYviNOmZJzlm/WfUhTRZ0PYjQVmCL789lbaMY6p2Qn1K4GDSm1lewuDRfKibBwa
twkO5I6IQH3ZONJHLPCxRyg5Y5glFbX0bdcKmhasneYFzougnp/JsQtIhT4/E5Ye
RHU8nHyfZP4+XFmcZYt0LwHSPK3Seh3ONngfwq1hUvmOTipNApd0VFb61lrNYVR1
6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:29 2026 by rpki-client