Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cxu6l7oi-YVav4OkmPjP26HWalA.roa
File: cxu6l7oi-YVav4OkmPjP26HWalA.roa (raw, json)
Hash identifier: IDf3N9NyTQ14cEuJj/cWSew6xtuleW+wsUDs3FBfBCc=
Subject key identifier: 73:1B:BA:97:BA:22:F9:85:5A:BF:83:A4:98:F8:CF:DB:A1:D6:6A:50
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C484BCDBD86784A67948A54D248D108C7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cxu6l7oi-YVav4OkmPjP26HWalA.roa
Signing time: Tue 10 Feb 2026 16:04:13 +0000
ROA not before: Tue 10 Feb 2026 16:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 5.175.203.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:4b:cd:bd:86:78:4a:67:94:8a:54:d2:48:d1:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 10 16:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=731bba97ba22f9855abf83a498f8cfdba1d66a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:0a:31:47:c6:31:57:92:88:51:9a:93:da:
da:9b:f2:8a:07:52:5a:97:f1:50:64:ac:f2:61:cb:
81:58:b0:b2:8f:8f:fa:64:26:b7:e5:39:74:d4:94:
cf:fa:83:ad:59:15:2b:c1:ca:1a:4a:e3:ef:05:63:
13:40:42:1f:33:29:44:d6:9f:f2:3a:df:1f:d3:59:
e5:69:6b:9e:f7:c0:f8:67:f9:db:de:bd:b6:f4:19:
fd:53:67:fb:e1:73:2d:17:43:5a:c1:f2:de:23:b2:
73:db:ea:e1:20:4d:44:b2:c5:c9:bb:ac:23:63:f7:
79:01:9b:28:25:8d:c0:45:ab:78:e3:4b:4b:46:a6:
be:0d:89:4c:93:4d:9b:04:2a:d5:65:49:52:27:76:
0b:18:62:8d:cd:9c:79:9a:49:52:6a:d0:30:0f:65:
b6:99:52:32:10:02:bf:b7:12:f7:18:40:cd:63:ab:
03:cb:11:c1:3f:53:e8:88:4a:bc:87:c8:a9:d5:aa:
19:42:17:b0:4d:09:fe:1f:b4:89:7a:34:59:f8:6a:
50:aa:23:f6:f3:2b:61:06:53:8d:21:b2:58:57:8e:
3b:d9:14:b5:00:de:62:d3:79:ee:1c:9c:70:d7:02:
d9:d1:7b:79:9c:92:2e:8d:d0:32:1a:94:4c:d9:8e:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:BA:97:BA:22:F9:85:5A:BF:83:A4:98:F8:CF:DB:A1:D6:6A:50
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cxu6l7oi-YVav4OkmPjP26HWalA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.203.0-5.175.204.255
89.106.76.0/24
94.103.171.0/24
94.103.174.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:8c:96:6c:f0:c0:8a:25:15:f6:80:6a:3b:d0:f5:1d:d1:99:
68:4a:5b:4c:f3:41:e9:b3:ab:17:5c:c2:ee:83:2a:10:5d:b0:
c8:31:26:d8:43:81:aa:a1:83:cc:fa:32:d4:74:86:4a:7b:62:
1c:e3:f3:51:49:55:4a:12:d2:f4:d3:9f:0a:d7:60:e3:99:94:
cd:2f:82:c4:2d:02:1b:dc:5c:bd:03:e8:7b:a8:45:00:60:47:
18:1c:1c:bc:d9:71:3f:c3:7e:cd:00:1d:58:a3:94:a0:2f:f6:
c2:d7:3b:0f:91:a2:03:98:38:e6:e9:95:81:25:c6:b5:cc:10:
c1:15:bb:e6:3a:ca:e7:5d:16:54:d9:14:70:07:a8:c2:6b:c7:
e4:90:4b:13:e8:03:60:bd:3e:1d:35:da:5f:47:72:be:b5:c8:
b7:15:33:d3:f1:c7:19:07:28:70:9c:d0:1f:1f:65:f8:89:67:
ab:71:c7:16:e8:dc:0c:2d:ae:83:cb:95:26:1f:9f:36:4a:ca:
7f:fc:f9:66:f0:f1:ec:b3:f9:94:db:d4:e0:98:64:24:e0:43:
e1:d8:99:70:5a:7d:2b:09:76:73:33:e4:47:8f:b7:1c:fb:d5:
aa:d4:c6:26:6c:21:e5:45:d0:52:27:7e:3b:d9:77:e6:2c:de:
f8:ab:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 16:31:15 2026 by rpki-client