Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0IAitl8TGriHepyOHu6nX3Ed6iM.roa
File: 0IAitl8TGriHepyOHu6nX3Ed6iM.roa (raw, json)
Hash identifier: XEQVj29c/SovLkIy6yxY4HJspO64qKDjZ8fx2uHaqUg=
Subject key identifier: D0:80:22:B6:5F:13:1A:B8:87:7A:9C:8E:1E:EE:A7:5F:71:1D:EA:23
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F2103CBE99A8FE8D3732FC711B39A11F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0IAitl8TGriHepyOHu6nX3Ed6iM.roa
Signing time: Thu 02 Jul 2026 04:08:44 +0000
ROA not before: Thu 02 Jul 2026 04:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.217.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:03:cb:e9:9a:8f:e8:d3:73:2f:c7:11:b3:9a:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 2 04:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d08022b65f131ab8877a9c8e1eeea75f711dea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:b8:98:1b:77:41:51:28:05:a8:fa:ac:05:
95:ef:af:0e:7f:65:05:7f:f0:24:a7:66:09:f0:86:
33:8a:2d:df:95:1b:ff:e5:37:ca:97:9d:4b:6d:21:
26:b7:ed:e1:f1:e8:18:1a:ec:f7:38:73:48:cb:bd:
7e:41:dc:c2:df:65:65:04:3e:05:7a:4e:0b:b2:60:
dd:31:2d:8e:33:7f:e5:1a:1c:0b:f8:f1:f2:35:eb:
84:95:d9:93:8d:d1:e5:77:10:da:f8:99:05:ad:0f:
ba:e3:58:54:b7:6a:eb:73:8b:be:88:82:56:62:0e:
74:ef:5a:73:64:ee:b5:63:f3:4d:d9:cf:68:56:69:
7f:f1:13:db:1d:89:b7:09:c5:d3:02:d6:4e:73:11:
01:c6:89:32:dc:b1:80:43:5d:5b:95:9a:a4:5b:d8:
bd:ec:a5:94:bc:7f:6f:e7:c2:ae:77:5a:0f:ee:ee:
17:48:e8:06:b8:7f:66:3e:9a:81:85:09:b8:56:fd:
2a:e9:b3:82:af:8e:14:c8:99:8b:8f:46:cb:9c:ca:
00:d2:f1:49:6b:6e:13:21:a8:8e:37:e9:02:33:f5:
e3:ab:35:7d:a6:36:c0:a1:96:28:3b:de:3d:de:93:
15:59:b7:de:1c:2f:68:95:3f:96:10:a6:ad:aa:a7:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:22:B6:5F:13:1A:B8:87:7A:9C:8E:1E:EE:A7:5F:71:1D:EA:23
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0IAitl8TGriHepyOHu6nX3Ed6iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.174.0/24
5.175.217.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
87.239.129.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:43:bb:e6:f2:11:1c:75:98:16:e4:32:6a:ce:c5:46:83:c0:
2f:e0:b2:1e:a9:15:be:90:41:64:c5:23:ef:10:eb:a4:c1:2b:
a5:3d:8f:d7:cf:ad:76:9f:e8:70:b0:bd:c4:4f:91:8f:11:2e:
b5:b5:de:28:64:dd:51:b1:2f:65:a4:08:c7:ec:21:cb:f9:47:
25:09:3a:89:7c:36:83:f0:5e:ca:37:8b:74:c9:0e:8d:8e:08:
58:09:34:d4:ad:7a:df:da:97:e0:da:34:1a:3a:31:ab:fe:b9:
1c:b6:b2:bd:2d:6c:e0:cc:e5:cd:b4:08:b5:31:2b:24:ad:61:
6e:42:55:c5:2e:9e:a0:5c:1f:09:78:25:72:08:41:76:1b:46:
f2:ab:62:a0:94:29:e1:59:3e:60:e5:9f:a8:9e:e3:92:36:be:
30:10:f8:b7:ee:11:c9:95:17:14:84:0c:39:dd:de:cc:f1:71:
8e:d0:7e:fc:26:e9:c9:d7:71:d8:50:4e:21:b3:11:41:43:c9:
af:63:28:f7:1f:dd:3b:0b:fc:1a:3b:eb:d4:0b:15:11:30:6c:
ad:6f:f2:08:d4:3a:18:50:82:cb:78:d4:a4:e0:a2:86:f2:6d:
95:41:0d:65:64:d3:d3:c0:8d:77:70:b5:15:6b:fc:59:06:17:
cb:d1:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client