Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mV5xZeSD2kj3hPuTlC7gBuNxdV8.roa
File: mV5xZeSD2kj3hPuTlC7gBuNxdV8.roa (raw, json)
Hash identifier: S++fvpPD543W0RgtdZ7TruCOI5jtXCBzRQx3tbn0D20=
Subject key identifier: 99:5E:71:65:E4:83:DA:48:F7:84:FB:93:94:2E:E0:06:E3:71:75:5F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D25BC4DF0210F37A29AD56A45AD7DE842
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mV5xZeSD2kj3hPuTlC7gBuNxdV8.roa
Signing time: Wed 25 Mar 2026 16:03:10 +0000
ROA not before: Wed 25 Mar 2026 16:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.175.162.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.187.0/24 maxlen: 24
5.175.225.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.144.1.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.236.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:bc:4d:f0:21:0f:37:a2:9a:d5:6a:45:ad:7d:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 25 16:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=995e7165e483da48f784fb93942ee006e371755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:d8:62:a6:f7:a1:d5:e8:10:2f:92:c2:2f:
d7:a1:5e:0f:e2:d0:3e:c1:c6:df:e5:14:de:db:4f:
c8:11:e0:f3:c9:19:5d:63:8e:93:a7:6d:dd:55:04:
25:b0:40:16:25:00:1a:ad:ea:60:a4:66:e3:05:87:
32:4e:5b:75:5b:e5:8a:ec:fa:22:18:fa:a8:24:a4:
eb:3b:6b:b0:08:1f:10:5e:fd:b0:57:f1:e2:a8:4d:
f2:30:52:cd:2d:8f:44:fc:e5:62:a4:72:71:31:6d:
b6:6e:75:ba:25:07:47:3d:c9:c1:30:8b:fc:44:f3:
e3:ae:7c:c4:5f:a0:2e:9a:0e:1b:be:a4:61:4e:c1:
6c:3b:bc:24:e7:4d:d5:12:df:86:9c:4f:ba:c2:10:
5b:c1:75:f8:56:16:e1:8b:42:7a:02:5a:ea:e0:c7:
e9:96:51:04:2b:5d:17:b3:8a:40:8b:cc:cc:77:7d:
9a:4e:8b:a4:e1:9e:b2:77:ba:45:5c:7e:ba:31:4d:
45:91:d4:79:61:69:1e:4f:bc:4e:b5:a0:01:3e:8e:
78:6e:1b:a0:c6:c1:5d:37:c5:10:82:64:ab:d0:98:
4c:42:2b:c3:a0:e9:73:95:5e:3b:2b:90:5a:b3:17:
fe:7f:b1:cc:7d:7c:c6:03:da:c9:6c:7d:f2:56:1e:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:71:65:E4:83:DA:48:F7:84:FB:93:94:2E:E0:06:E3:71:75:5F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mV5xZeSD2kj3hPuTlC7gBuNxdV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.137.0/24
5.175.162.0/24
5.175.174.0/24
5.175.187.0/24
5.175.225.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
5.231.203.0/24
77.90.39.0/24
85.118.162.0/24
87.239.129.0/24
89.144.1.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.197.0/24
94.249.236.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b2:4f:8b:ef:93:41:1e:85:cb:1a:a8:3c:37:75:fb:e6:e9:
16:a1:75:9f:91:39:ec:ea:54:c8:77:c7:60:9b:ae:cf:f5:5a:
95:97:56:76:f6:78:9c:6e:82:43:e8:9c:64:00:e3:71:f8:aa:
8c:ff:c2:05:ac:2d:29:60:92:5c:e0:03:62:cf:8a:59:06:5a:
87:15:bc:f1:59:15:19:45:6f:9c:33:a0:80:db:b4:17:c9:b3:
a1:0c:f7:0a:6c:97:27:de:ff:0b:68:83:60:6c:07:15:a6:33:
55:54:a5:17:37:18:60:e7:fa:14:e5:43:fe:6f:14:0d:70:6d:
91:62:c3:0a:85:04:53:4a:91:6c:84:d7:28:78:bb:b3:a8:d1:
e2:6d:9e:1b:2c:19:9f:d3:1d:87:b8:43:2a:9f:13:7b:3d:45:
30:af:3e:bf:a5:82:a1:55:96:73:c9:50:75:34:be:0a:d7:b1:
7b:3c:33:5f:86:0d:a7:a4:45:6e:94:51:bd:3b:c6:ab:15:3b:
59:ec:e3:b5:8f:70:00:00:51:52:6e:15:1a:6f:0f:5a:8d:74:
4d:fe:03:94:dd:77:0b:b4:82:f0:a8:aa:82:81:c0:70:c1:62:
37:b7:f2:08:80:e6:ad:df:c3:dc:79:6e:28:96:f2:ba:d0:ca:
58:4b:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:25 2026 by rpki-client