Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xXmv2XkglmLOTA0Js6hxVev3ATM.roa
File: xXmv2XkglmLOTA0Js6hxVev3ATM.roa (raw, json)
Hash identifier: 7S5YXM/iQp63ASubOvg0G/GPkzIYoRAidrW9rD5DFvs=
Subject key identifier: C5:79:AF:D9:79:20:96:62:CE:4C:0D:09:B3:A8:71:55:EB:F7:01:33
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1D18B8CCF02A7F5BEFE7F691E84ABCF60
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xXmv2XkglmLOTA0Js6hxVev3ATM.roa
Signing time: Thu 12 Nov 2026 20:55:46 +0000
ROA not before: Thu 12 Nov 2026 20:55:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.83.146.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
5.175.128.0/24 maxlen: 24
5.175.132.0/24 maxlen: 24
5.175.185.0/24 maxlen: 24
5.175.186.0/24 maxlen: 24
5.175.248.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.99.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.118.163.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
185.47.141.0/24 maxlen: 24
193.28.251.0/24 maxlen: 24
195.110.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:8b:8c:cf:02:a7:f5:be:fe:7f:69:1e:84:ab:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 20:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c579afd979209662ce4c0d09b3a87155ebf70133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:51:c2:71:37:65:20:16:d6:af:7e:31:90:
68:af:e2:d3:f9:43:9b:8b:1b:9d:6a:92:f0:42:d9:
f8:8e:2a:fc:c3:c7:62:06:d6:f3:2a:92:9d:be:0a:
04:c7:bf:74:22:27:51:fe:e2:30:73:8e:50:de:9b:
61:c3:0e:0a:26:48:82:60:2b:33:7d:d0:46:0e:91:
58:f9:69:6a:29:6a:e2:4f:c4:12:14:49:e5:1b:3e:
30:91:1d:f8:b4:3a:1b:97:77:fa:b3:87:5b:0a:f8:
c8:1b:97:56:25:c9:55:51:88:f2:30:98:7e:a3:50:
23:71:b3:c4:f6:57:84:79:28:64:b4:fa:74:4a:57:
fa:cc:43:27:c8:61:09:4d:5f:b9:08:42:d7:12:c0:
a7:5b:05:b6:33:b6:14:36:c2:5c:57:ab:cc:40:54:
99:21:8a:ea:5b:54:e8:73:07:14:e2:4f:93:31:cc:
75:78:eb:71:5a:de:90:ff:d0:06:3c:9e:ae:eb:14:
fe:5b:a1:31:02:68:28:7a:79:cc:a3:cb:81:8c:98:
ff:85:42:a0:00:93:0d:12:4e:99:81:24:7b:89:51:
77:4d:c1:17:63:4f:58:29:32:7e:90:81:de:73:5b:
51:e8:a5:37:54:ed:3f:d1:ca:4e:35:a0:d7:b6:d0:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:AF:D9:79:20:96:62:CE:4C:0D:09:B3:A8:71:55:EB:F7:01:33
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xXmv2XkglmLOTA0Js6hxVev3ATM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
5.83.148.0/24
5.175.128.0/24
5.175.132.0/24
5.175.185.0-5.175.186.255
5.175.248.0/24
5.231.94.0/24
5.231.99.0/24
77.90.33.0/24
85.118.163.0/24
87.239.131.0/24
89.106.89.0/24
89.144.3.0/24
89.144.49.0/24
94.249.170.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
94.249.247.0/24
185.47.141.0/24
193.28.251.0/24
195.110.14.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d6:aa:bb:3c:27:32:7e:e9:b0:84:c7:5f:f1:87:ee:be:b5:
f2:cf:93:17:5a:6f:93:c4:50:5b:b3:bf:a7:96:da:d9:5a:f5:
ea:19:a4:1e:0c:7b:a7:bf:29:e8:24:ad:62:c9:cd:f0:46:1d:
ec:2b:ff:db:22:3c:23:cf:c1:b3:0e:74:e8:c7:48:8a:24:0c:
03:8c:e6:b9:24:d3:f2:d0:b8:97:34:ee:cf:b7:98:4d:8f:f9:
e4:f8:f2:4e:2b:ea:90:88:24:60:d4:ee:98:35:56:c2:86:08:
d8:e7:5e:d7:84:4f:b7:e3:4c:08:78:a5:2d:8f:35:a3:69:27:
24:fb:67:59:a8:2d:37:9c:1a:1b:3b:a2:fa:f0:ee:60:52:37:
8f:8d:10:e6:d3:04:d8:09:a9:d5:dd:60:a1:7c:31:d6:eb:e9:
3f:a7:ff:c9:34:86:b9:3f:84:85:85:bf:fa:7a:8f:f6:dd:d2:
dc:2f:da:7a:2a:65:ea:75:bb:43:5c:ab:e3:1c:48:92:e8:f3:
ce:8e:17:64:09:1e:1d:3b:8c:d7:e2:0f:e7:e9:c8:63:5a:84:
59:67:57:3c:48:b6:27:7f:58:e2:1e:33:7d:68:1f:8f:ee:7d:
41:c5:90:62:b9:be:63:04:5f:60:ff:08:bd:ed:40:18:87:9f:
95:f1:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:32 2026 by rpki-client