Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eN25vRiwD7nNMSWPO1ct1ByO33k.roa
File: eN25vRiwD7nNMSWPO1ct1ByO33k.roa (raw, json)
Hash identifier: wwfnnRbg5DMzGweXrsf93dMla7cK0riQfcg0jVvU6w8=
Subject key identifier: 78:DD:B9:BD:18:B0:0F:B9:CD:31:25:8F:3B:57:2D:D4:1C:8E:DF:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D49CE8D3618F1852EF7975CACAB2CFA77
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eN25vRiwD7nNMSWPO1ct1ByO33k.roa
Signing time: Wed 01 Apr 2026 16:09:26 +0000
ROA not before: Wed 01 Apr 2026 16:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150716
IP address blocks: 5.231.76.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
85.118.166.0/24 maxlen: 24
94.249.242.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
185.47.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:ce:8d:36:18:f1:85:2e:f7:97:5c:ac:ab:2c:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 1 16:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78ddb9bd18b00fb9cd31258f3b572dd41c8edf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:9e:a4:bf:5f:e0:a6:77:39:27:dd:7d:de:
a2:32:14:e7:46:f3:db:df:24:07:2e:6f:53:7a:8b:
56:12:15:62:af:55:88:34:d8:52:c2:f3:b6:ec:8f:
b8:5f:cb:e5:8b:e0:de:9f:4e:e3:7f:d3:46:b8:9c:
d1:cc:cc:cc:79:eb:57:4c:c5:f9:fe:ff:b1:10:a9:
69:4f:7e:c1:80:ff:f3:33:a8:ec:0a:71:1f:93:ab:
ec:d8:cb:d1:46:3a:3a:3d:77:c9:16:74:03:2a:9a:
bb:d8:e7:02:37:d2:66:e8:4f:a6:60:12:b1:c9:90:
1b:c6:79:0e:93:56:97:3e:13:b9:aa:51:c8:f3:4b:
b1:6a:d7:c7:64:39:94:85:f0:60:a4:d0:51:da:6f:
b3:5d:b9:82:69:b9:46:ee:37:3c:9a:fe:0e:0d:6f:
f3:3c:70:00:8d:9d:c5:fb:fc:1e:9e:fe:d3:cf:02:
87:36:02:d1:56:5b:2d:bf:b6:95:62:65:76:82:b1:
12:00:bb:05:64:ce:ca:40:87:4c:0f:1d:35:7b:e4:
84:de:83:d8:f3:41:48:a4:90:f3:45:2b:2f:27:30:
79:a4:63:b6:54:db:b9:b1:26:fd:51:c7:98:45:c0:
a7:5d:9b:00:89:49:f1:a7:ce:6b:6b:38:91:a7:47:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DD:B9:BD:18:B0:0F:B9:CD:31:25:8F:3B:57:2D:D4:1C:8E:DF:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eN25vRiwD7nNMSWPO1ct1ByO33k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.76.0/24
77.90.48.0/24
85.118.166.0/24
94.249.242.0/24
178.18.151.0/24
185.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:65:ee:a8:65:f0:a0:6f:dc:46:c6:57:8e:cc:84:c1:1e:93:
22:2b:d1:58:e7:70:c2:ed:a8:67:5a:e1:b9:7e:6f:de:96:fd:
b8:9f:5c:9c:60:d6:5e:8f:b5:75:40:6e:dc:d3:a5:a4:1c:e2:
c7:14:09:9e:17:72:5d:2d:a9:6b:29:60:57:3b:86:bb:47:9e:
78:da:21:9e:9a:e3:3a:ae:6b:72:ea:fe:27:f5:62:99:47:5d:
df:23:0c:87:1b:d7:be:3a:71:6b:c1:27:e0:bc:83:d4:e0:17:
7a:f5:7a:80:4c:4e:3c:b6:0f:3e:e2:7f:ae:59:4b:ad:40:c6:
91:88:f3:50:0e:2c:6b:ec:6d:8c:11:2c:34:2c:0a:94:25:56:
1c:28:48:15:ff:0d:ff:0e:a3:2c:1d:53:13:39:6c:69:a0:27:
38:d4:8a:0f:6e:56:42:25:21:c9:81:b7:c4:d1:bc:79:44:23:
f7:02:26:84:aa:c2:8f:a7:84:24:32:fc:79:0a:a4:bd:35:75:
1b:7a:30:b3:65:06:65:9f:26:cc:51:3b:c3:03:0e:39:67:5c:
af:a9:94:56:79:ac:c5:d4:45:af:d8:50:a1:27:33:0a:c3:d4:
a0:51:a2:d5:ab:84:8e:c0:a3:b7:7e:c7:34:dc:3b:1e:6f:cc:
f0:77:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:00:54 2026 by rpki-client