Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yUqusN3OEKyRRWl7od2vXFV-7PY.roa
File: yUqusN3OEKyRRWl7od2vXFV-7PY.roa (raw, json)
Hash identifier: DKX0nbEhbWxWshVtmwqgk491Co+DIQFuzzT9fuUH9jw=
Subject key identifier: C9:4A:AE:B0:DD:CE:10:AC:91:45:69:7B:A1:DD:AF:5C:55:7E:EC:F6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E0607D6E65AE12F645E01E6941B8F4A5C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yUqusN3OEKyRRWl7od2vXFV-7PY.roa
Signing time: Fri 08 May 2026 05:20:37 +0000
ROA not before: Fri 08 May 2026 05:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:07:d6:e6:5a:e1:2f:64:5e:01:e6:94:1b:8f:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 8 05:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c94aaeb0ddce10ac9145697ba1ddaf5c557eecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:8e:18:6c:54:23:ea:a8:4a:93:e9:d6:0b:
5a:bd:b1:26:66:88:d2:c7:80:d2:d3:7f:c5:14:21:
e0:51:0d:2d:18:ab:b4:2b:fc:9b:b2:53:63:2e:9d:
17:2d:08:be:12:de:2d:73:65:a4:ed:73:70:f7:27:
b0:7d:e2:56:f5:1a:77:e1:ea:b2:36:04:83:16:c6:
ae:02:f7:67:c5:d5:fe:8e:11:30:c3:33:5d:ad:87:
98:fd:b3:5b:03:31:cd:7b:f0:e3:10:8f:f4:b5:fc:
fa:7f:ad:7a:8e:86:b9:5d:ca:03:95:30:2a:ba:ef:
ef:7b:0a:1f:2e:cd:e7:c4:e9:56:6b:64:c4:46:70:
72:35:0e:4b:39:0b:41:b9:8c:3e:4b:89:fd:fc:f6:
71:fc:d4:2c:76:0e:1e:45:a5:00:b1:5d:27:1e:54:
4c:dc:3f:e1:b9:13:4e:9a:83:57:9a:31:f7:40:96:
2e:ff:24:ec:42:1f:07:0f:21:8e:4c:5c:4a:7a:ec:
d1:66:60:bc:10:44:ce:33:df:93:ed:f4:50:17:3b:
dd:86:f9:12:a7:16:4e:fa:93:68:9b:11:db:6b:73:
f6:d9:de:f5:4e:b1:06:75:f5:7b:d0:c2:20:4c:53:
6b:07:d3:79:aa:c5:b8:38:e1:df:73:91:77:e2:17:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:AE:B0:DD:CE:10:AC:91:45:69:7B:A1:DD:AF:5C:55:7E:EC:F6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yUqusN3OEKyRRWl7od2vXFV-7PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.175.221.0/24
87.239.131.0/24
89.106.73.0/24
89.106.75.0/24
89.106.82.0/24
94.249.247.0/24
Signature Algorithm: sha256WithRSAEncryption
05:82:f3:8b:c8:62:59:d1:f0:da:1a:89:c0:61:71:1d:e4:2a:
6e:30:8d:4c:3c:a9:52:4c:b1:0f:72:d0:a5:5e:04:55:1d:29:
35:8e:c6:cb:61:c7:9c:c0:49:42:13:d8:65:54:fc:1b:f7:71:
4e:73:67:7a:ba:59:d5:3d:31:59:c2:0b:5f:93:33:f0:67:90:
b7:79:94:59:f6:d0:41:d3:68:07:8e:d1:fb:af:a3:f3:94:ab:
20:79:80:9f:23:a9:0e:28:55:06:43:33:e9:fb:49:af:90:1e:
30:55:e7:07:0f:03:b8:f2:02:fe:16:7e:68:f2:52:a6:8e:4f:
6d:84:0b:35:ad:05:58:ab:72:fa:17:7a:d4:ef:85:bc:4f:03:
04:62:44:bf:12:6e:59:67:78:8d:c5:79:d5:06:d7:c6:79:bf:
17:f1:4a:37:ee:b8:2e:dc:53:a7:0b:74:7f:cc:51:0c:78:9c:
20:01:02:be:20:4d:31:58:38:50:a9:1d:4f:f4:48:80:4b:e7:
d4:c3:dc:f5:30:26:82:7f:b2:29:eb:e8:83:91:86:fd:47:2c:
6d:97:6e:88:90:a4:d8:b8:ba:1a:4e:6e:ee:0d:2f:5e:bd:ae:
20:26:69:bc:44:3f:56:eb:ba:74:02:71:97:0d:59:34:67:9c:
ab:7c:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:50 2026 by rpki-client