Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pCItsjA9XgGzC0YBwwoGj20flBU.roa
File: pCItsjA9XgGzC0YBwwoGj20flBU.roa (raw, json)
Hash identifier: q/XT5pvpxIeyIJi2OeNPNBYwonn1qx1DTnuqA5S9u/Q=
Subject key identifier: A4:22:2D:B2:30:3D:5E:01:B3:0B:46:01:C3:0A:06:8F:6D:1F:94:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D0BF01AA21C259C02ECA6168FCFE383B7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pCItsjA9XgGzC0YBwwoGj20flBU.roa
Signing time: Fri 20 Mar 2026 15:49:37 +0000
ROA not before: Fri 20 Mar 2026 15:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.230.125.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.44.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
89.144.15.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
185.129.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:f0:1a:a2:1c:25:9c:02:ec:a6:16:8f:cf:e3:83:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 20 15:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4222db2303d5e01b30b4601c30a068f6d1f9415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:b2:b9:6b:a5:aa:c5:51:93:49:cd:35:9c:
6c:95:48:39:c3:32:24:85:37:ce:07:a7:f4:16:7e:
7b:d0:10:11:59:50:96:41:4f:f7:c8:7a:0f:44:7d:
d3:f2:62:3e:41:a9:63:03:6a:96:10:d4:91:37:eb:
10:56:cb:ce:2b:80:04:d0:43:a0:f2:2d:6f:6f:00:
46:ca:17:4a:95:61:de:d6:79:26:9e:33:8b:d1:27:
ce:4f:4a:17:8b:a7:d0:8c:b6:dc:7d:1c:4b:1b:ad:
10:c7:b9:2b:c5:0a:b4:5e:0b:db:3c:07:b8:ed:b4:
16:a2:f0:2d:5d:9e:b5:25:04:76:c6:87:12:d6:f3:
87:a3:34:f1:a3:96:59:93:7f:34:f1:81:38:fa:b7:
7e:26:6d:06:e6:3a:9e:d9:2c:0b:c2:97:0d:ec:76:
6f:ca:b6:ed:77:75:96:b1:6a:8a:3b:54:5d:05:03:
05:15:51:65:d9:d2:8c:d2:a2:88:8f:6c:5a:bd:00:
ee:55:91:f7:80:db:29:74:de:56:96:d4:a8:1c:36:
70:27:fa:0a:04:b6:54:27:6f:97:5b:52:83:6c:a9:
30:26:e2:d3:cc:ec:90:b8:d2:8d:51:f0:42:1f:4d:
54:c1:05:02:57:2a:66:2e:37:c6:de:b3:b6:52:dc:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:2D:B2:30:3D:5E:01:B3:0B:46:01:C3:0A:06:8F:6D:1F:94:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pCItsjA9XgGzC0YBwwoGj20flBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.230.125.0/24
5.231.29.0/24
5.231.44.0/24
5.231.204.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
89.144.15.0/24
185.119.16.0/22
185.129.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f3:ea:bf:dd:0f:07:67:ed:fe:34:73:a4:b7:59:77:4a:1d:
a4:48:33:16:c2:f2:86:da:7b:9a:07:b4:9b:44:35:6c:84:dc:
e3:a1:5f:66:9e:52:18:b3:15:36:90:d0:5a:7d:31:bb:da:63:
8c:19:9c:e4:1d:3a:3d:df:d2:1d:0b:73:e0:9a:54:53:ee:82:
b0:ee:5c:d1:4a:fe:a7:79:0a:36:36:13:fc:fa:d4:23:b2:a9:
05:0d:a5:92:89:00:72:2b:14:ae:65:73:41:97:5a:ea:04:28:
0a:ee:64:8b:a6:50:1f:db:2c:7e:24:7e:fd:2d:99:57:16:48:
98:b1:0b:77:11:e9:f8:ae:2a:bf:30:18:89:52:73:ce:3b:5f:
52:74:f4:01:cf:7f:8a:da:3d:bc:28:a4:0c:7c:df:36:0b:2d:
a0:ca:fd:86:49:f8:04:0c:f5:1e:a0:9b:d3:b9:f5:87:3a:38:
20:cc:90:73:a7:a9:b3:43:61:b7:d7:f5:72:fd:1f:b7:32:f7:
cc:69:1c:5e:1c:64:08:0e:e1:7c:d0:3a:29:2b:88:b3:9f:cc:
38:40:f9:14:80:ae:69:24:86:1f:80:b5:ba:49:b1:2b:91:db:
db:53:af:4b:39:b9:11:8b:36:2c:9c:b8:35:bc:32:a2:d2:1b:
ba:70:d9:25
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ0L8BqiHCWcAuymFo/P44O3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzIwMTU0OTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDIyMmRiMjMwM2Q1ZTAxYjMwYjQ2MDFjMzBhMDY4ZjZkMWY5NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uSyuWulqsVRk0nNNZxslUg5wzIk
hTfOB6f0Fn570BARWVCWQU/3yHoPRH3T8mI+QaljA2qWENSRN+sQVsvOK4AE0EOg
8i1vbwBGyhdKlWHe1nkmnjOL0SfOT0oXi6fQjLbcfRxLG60Qx7krxQq0XgvbPAe4
7bQWovAtXZ61JQR2xocS1vOHozTxo5ZZk3808YE4+rd+Jm0G5jqe2SwLwpcN7HZv
yrbtd3WWsWqKO1RdBQMFFVFl2dKM0qKIj2xavQDuVZH3gNspdN5WltSoHDZwJ/oK
BLZUJ2+XW1KDbKkwJuLTzOyQuNKNUfBCH01UwQUCVypmLjfG3rO2UtwlkQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFKQiLbIwPV4BswtGAcMKBo9tH5QVMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcENJdHNqQTlYZ0d6QzBZQnd3b0dqMjBmbEJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQABVOYAwQA
BeZ9AwQABecdAwQABecsAwQABefMAwQATVoMAwQATVoqAwQAVV0IAwQAWZAPAwQC
uXcQAwQAuYFXMA0GCSqGSIb3DQEBCwUAA4IBAQAv8+q/3Q8HZ+3+NHOkt1l3Sh2k
SDMWwvKG2nuaB7SbRDVshNzjoV9mnlIYsxU2kNBafTG72mOMGZzkHTo939IdC3Pg
mlRT7oKw7lzRSv6neQo2NhP8+tQjsqkFDaWSiQByKxSuZXNBl1rqBCgK7mSLplAf
2yx+JH79LZlXFkiYsQt3Een4riq/MBiJUnPOO19SdPQBz3+K2j28KKQMfN82Cy2g
yv2GSfgEDPUeoJvTufWHOjggzJBzp6mzQ2G31/Vy/R+3MvfMaRxeHGQIDuF80Dop
K4izn8w4QPkUgK5pJIYfgLW6SbErkdvbU69LObkRizYsnLg1vDKi0hu6cNkl
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:56 2026 by rpki-client