Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0lvbMh8-UpedInXSBIA9WVk-opA.roa
File: 0lvbMh8-UpedInXSBIA9WVk-opA.roa (raw, json)
Hash identifier: UrjVxyvO8Rwvwfxy5Se1TxilBn4wTgw7/3GG9jtoxPE=
Subject key identifier: D2:5B:DB:32:1F:3E:52:97:9D:22:75:D2:04:80:3D:59:59:3E:A2:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E8ED344F3618A44A9BA940742B75489DB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0lvbMh8-UpedInXSBIA9WVk-opA.roa
Signing time: Wed 03 Jun 2026 18:51:10 +0000
ROA not before: Wed 03 Jun 2026 18:51:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.217.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:d3:44:f3:61:8a:44:a9:ba:94:07:42:b7:54:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 3 18:51:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d25bdb321f3e52979d2275d204803d59593ea290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:90:4c:97:65:29:0a:9e:d0:5d:35:40:00:
e3:48:79:61:88:c7:e3:b9:a0:f1:90:7d:f2:51:69:
0e:cb:6a:76:d1:b6:7b:2a:b1:4b:2c:da:54:b9:de:
c6:9f:0c:75:c4:74:70:7e:27:ef:9a:d0:e7:f7:d5:
07:3e:09:82:63:9a:54:45:c9:3b:8a:b6:bd:bb:a6:
e5:34:da:f4:40:a3:89:b1:43:ef:4b:74:e8:4e:2c:
71:05:e6:2c:7e:68:e5:c3:83:0d:ec:26:22:31:94:
12:98:0e:19:f0:ae:6a:c4:bb:cc:65:f7:b9:87:eb:
a8:c9:17:28:5d:60:6a:e0:5a:e5:7a:7c:aa:73:8b:
4a:29:03:e7:50:2c:54:77:32:8e:76:12:92:bb:dd:
9d:d7:f5:a0:1e:4b:cf:df:5d:f5:21:cc:a9:fb:a9:
e6:aa:36:b2:1d:d1:9e:e2:36:9b:09:48:97:66:0b:
de:8a:c8:6d:87:ea:a5:44:10:e4:29:3c:8e:a3:5f:
98:75:5c:68:c2:6f:bd:2f:8c:9e:99:13:c1:20:43:
ef:f5:d5:49:1f:23:24:ef:16:fd:dd:0b:bb:7f:29:
ee:6c:c8:a2:fa:75:a8:cf:3b:2e:ae:0a:41:aa:8e:
db:3d:28:01:b6:fb:83:97:75:cc:12:94:52:ce:ee:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:DB:32:1F:3E:52:97:9D:22:75:D2:04:80:3D:59:59:3E:A2:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0lvbMh8-UpedInXSBIA9WVk-opA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.174.0/24
5.175.217.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
85.118.162.0/24
87.239.129.0/24
89.144.18.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.197.0/24
94.249.202.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d1:a1:03:17:b2:43:7f:ae:af:24:19:bf:ae:be:7a:16:b1:
83:9e:54:35:62:11:7f:64:37:10:1f:95:99:2f:31:26:f0:9c:
3e:af:c5:89:85:9f:fe:c3:65:58:06:95:49:e0:60:9e:4b:91:
2c:7d:49:78:01:d3:b0:c1:19:0f:83:32:21:6c:80:bc:04:64:
f9:97:b2:25:33:89:34:3c:b5:3c:ed:27:26:c8:2d:2e:32:92:
86:08:3d:83:78:9e:2e:b5:f0:ed:d3:9c:d3:c5:36:e6:88:b2:
94:94:01:31:38:fb:84:4c:37:50:c1:ee:d3:68:31:35:81:0e:
93:df:ef:e5:c7:73:29:ac:55:40:9c:54:cb:0b:df:0f:79:05:
bd:e8:83:ed:1d:45:c8:cb:fa:ca:63:6b:4b:fc:68:41:b1:01:
0b:58:cf:fa:51:a3:fa:ac:c0:de:ff:56:59:50:19:5f:5f:df:
38:52:58:5b:dc:d0:a8:37:f8:66:d2:58:c5:61:85:c1:47:60:
64:3d:e8:b0:db:0b:2f:bf:72:9a:1e:58:8f:0e:d7:3d:e1:3e:
96:f2:fe:24:c6:44:24:ce:c3:c9:24:4d:b3:ac:e6:9b:8a:a9:
38:a0:e8:95:50:84:e6:31:7f:e3:11:32:a0:0c:04:4c:9f:9e:
91:cc:96:40
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZ6O00TzYYpEqbqUB0K3VInbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNjAzMTg1MTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjViZGIzMjFmM2U1Mjk3OWQyMjc1ZDIwNDgwM2Q1OTU5M2VhMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsKQTJdlKQqe0F01QADjSHlhiMfj
uaDxkH3yUWkOy2p20bZ7KrFLLNpUud7Gnwx1xHRwfifvmtDn99UHPgmCY5pURck7
ira9u6blNNr0QKOJsUPvS3ToTixxBeYsfmjlw4MN7CYiMZQSmA4Z8K5qxLvMZfe5
h+uoyRcoXWBq4Frlenyqc4tKKQPnUCxUdzKOdhKSu92d1/WgHkvP3131Icyp+6nm
qjayHdGe4jabCUiXZgveishth+qlRBDkKTyOo1+YdVxowm+9L4yemRPBIEPv9dVJ
HyMk7xb93Qu7fynubMii+nWozzsurgpBqo7bPSgBtvuDl3XMEpRSzu7XtQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFNJb2zIfPlKXnSJ10gSAPVlZPqKQMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMGx2Yk1oOC1VcGVkSW5YU0JJQTlXVmstb3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQABVOOAwQA
BVOWAwQABa+uAwQABa/ZAwQABecZAwQABedSAwQABedgAwQATVonAwQAVXaiAwQA
V++BAwQAWZASAwQAXmenAwQAXvmWAwQAXvmZAwQAXvnFAwQAXvnKMA0GCSqGSIb3
DQEBCwUAA4IBAQB20aEDF7JDf66vJBm/rr56FrGDnlQ1YhF/ZDcQH5WZLzEm8Jw+
r8WJhZ/+w2VYBpVJ4GCeS5EsfUl4AdOwwRkPgzIhbIC8BGT5l7IlM4k0PLU87Scm
yC0uMpKGCD2DeJ4utfDt05zTxTbmiLKUlAExOPuETDdQwe7TaDE1gQ6T3+/lx3Mp
rFVAnFTLC98PeQW96IPtHUXIy/rKY2tL/GhBsQELWM/6UaP6rMDe/1ZZUBlfX984
Ulhb3NCoN/hm0ljFYYXBR2BkPeiw2wsvv3KaHliPDtc94T6W8v4kxkQkzsPJJE2z
rOabiqk4oOiVUITmMX/jETKgDARMn56RzJZA
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client