Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kjjPOxoL-sOtcoRlZfI7GKzFa-g.roa
File: kjjPOxoL-sOtcoRlZfI7GKzFa-g.roa (raw, json)
Hash identifier: 6kqjcQa/d6YYgjOz8z6/eMv+vUYXtIk2PkGRLseV9bg=
Subject key identifier: 92:38:CF:3B:1A:0B:FA:C3:AD:72:84:65:65:F2:3B:18:AC:C5:6B:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0C68C71A6933AAC2A69E5C396D893BAF0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kjjPOxoL-sOtcoRlZfI7GKzFa-g.roa
Signing time: Tue 22 Sep 2026 00:38:07 +0000
ROA not before: Tue 22 Sep 2026 00:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.209.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.231.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
85.118.164.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:8c:71:a6:93:3a:ac:2a:69:e5:c3:96:d8:93:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 22 00:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9238cf3b1a0bfac3ad72846565f23b18acc56be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:e1:b0:e2:e9:b0:ef:c1:d8:15:15:ae:e9:
db:45:d2:89:15:77:b8:a7:b3:f7:75:32:75:15:93:
b6:cb:09:3f:c9:5c:28:ff:d3:28:47:dd:51:6e:1e:
0b:ad:e8:28:c4:02:95:2a:0d:55:34:61:21:ac:37:
a8:61:ca:0c:15:bd:25:04:6b:bb:c5:a5:65:f7:ea:
e1:a8:57:81:fc:ee:5f:0a:6f:64:5e:05:0a:f2:b0:
cd:6c:01:d7:89:c6:a5:f7:df:f9:68:c1:46:db:4b:
0e:70:50:68:19:c5:58:19:e6:5f:bb:34:b7:30:b1:
32:74:2f:3a:ac:20:cd:47:8a:31:91:b4:1a:6e:1d:
a1:54:9d:63:c3:fb:9e:91:8d:c3:48:c5:9e:e1:a7:
14:ba:a4:b3:9c:40:07:90:43:e3:2c:ae:c1:69:61:
7d:35:65:2d:46:ea:fc:7c:4c:7d:de:89:17:c5:86:
55:05:55:aa:61:b3:96:1a:c5:e5:ad:82:80:3c:09:
0d:8b:1c:ca:02:57:7c:fb:ef:c0:84:6c:46:e7:14:
98:55:a7:77:24:e7:a2:42:a7:17:76:d6:41:d0:6e:
e3:59:13:a7:f7:54:d5:88:6d:89:0f:3a:be:bf:3d:
da:9b:e8:1d:be:04:1f:07:55:02:37:86:be:5a:ba:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:38:CF:3B:1A:0B:FA:C3:AD:72:84:65:65:F2:3B:18:AC:C5:6B:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kjjPOxoL-sOtcoRlZfI7GKzFa-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.209.0/24
5.175.212.0/24
5.231.110.0/24
5.231.115.0/24
5.231.124.0/24
5.231.231.0/24
5.231.241.0/24
85.118.164.0/24
89.106.87.0/24
89.144.40.0/24
94.249.181.0/24
94.249.183.0/24
94.249.226.0/24
94.249.238.0/24
94.249.243.0/24
178.18.149.0/24
178.18.152.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a1:cd:4a:6e:99:5e:be:c4:31:30:d1:8c:7e:f9:ee:0b:c2:
5d:17:87:1d:17:ed:7a:f6:df:37:e9:a6:07:01:4d:9c:29:ed:
ea:a0:02:bb:e5:cf:e3:60:ff:88:d8:b0:15:80:90:b3:82:ca:
12:b6:4c:30:36:1d:44:40:a6:3c:da:af:25:4f:16:43:6f:c8:
c8:40:b3:8f:6a:37:da:3e:80:c7:25:a2:0d:fc:11:a8:09:3a:
d0:5a:b5:7f:eb:13:06:47:64:d7:a1:91:89:0d:fe:80:bd:27:
f4:a9:f0:43:a7:b8:dd:db:bc:aa:1d:63:43:a8:a8:df:70:32:
d1:f5:69:da:f1:95:66:c0:68:59:7d:9d:71:03:e5:a0:5e:e4:
6c:7d:b8:fd:98:d7:e8:2b:9e:6e:f5:bb:20:d0:a5:50:51:2e:
0c:89:5f:94:e1:f5:4a:89:fb:40:a1:fe:8a:13:4a:a1:8c:9f:
0c:56:a2:9b:5d:ca:4f:1d:06:d3:b4:08:06:32:d5:9a:6f:c0:
2f:b1:39:d7:bf:a3:2b:f2:0a:bc:3a:70:83:65:88:f2:5d:fa:
03:59:f9:e8:7f:74:da:a4:95:bf:f9:e3:30:a0:6b:0c:0b:64:
df:39:e5:37:ea:18:fa:62:e6:d1:0b:c5:22:e0:6b:b1:51:11:
84:c0:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:50 2026 by rpki-client