Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-tQuS86Y1vUUwTdTxq_iRz0onmQ.roa
File: 1-tQuS86Y1vUUwTdTxq_iRz0onmQ.roa (raw, json)
Hash identifier: zswxhzo58f/oE+FOeoGRTOA4kHP4HsA2nvKGkLspY5Q=
Subject key identifier: FA:D4:2E:4B:CE:98:D6:F5:14:C1:37:53:C6:AF:E2:47:3D:28:9E:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F66A093D6A34BDB9ED2DAF382D61E511E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-tQuS86Y1vUUwTdTxq_iRz0onmQ.roa
Signing time: Wed 15 Jul 2026 16:33:47 +0000
ROA not before: Wed 15 Jul 2026 16:33:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 5.175.143.0/24 maxlen: 24
5.175.187.0/24 maxlen: 24
5.230.110.0/24 maxlen: 24
5.230.111.0/24 maxlen: 24
5.230.161.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.230.190.0/24 maxlen: 24
5.230.198.0/24 maxlen: 24
5.230.199.0/24 maxlen: 24
5.230.233.0/24 maxlen: 24
5.231.210.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:a0:93:d6:a3:4b:db:9e:d2:da:f3:82:d6:1e:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 15 16:33:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fad42e4bce98d6f514c13753c6afe2473d289e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:dd:d8:a8:4b:90:1b:d4:56:cc:44:01:04:
2a:47:66:9e:44:0e:ed:43:fe:99:10:fc:e6:2e:37:
b1:67:41:ee:9c:bf:c1:c3:ce:d3:8a:76:cc:9a:03:
23:54:5c:8a:a7:37:cd:f1:eb:55:77:d1:27:02:4a:
d9:14:95:d0:f9:da:e7:77:04:53:c2:c2:f9:49:50:
75:d3:e0:7f:c3:d5:58:4c:1e:40:b7:3a:96:4c:4c:
8b:56:72:83:2e:02:2b:8b:22:9c:ff:e5:a8:1f:35:
81:3a:8d:41:20:0f:8e:82:83:e8:32:76:f3:4d:bc:
3b:74:21:08:ab:6d:43:e3:38:ef:61:21:22:09:84:
98:24:95:45:9c:98:9a:29:85:c3:59:ac:7e:07:2c:
c3:be:07:c1:a1:85:cf:aa:8e:15:f9:9a:5b:09:de:
fb:bf:f4:f5:44:33:db:f8:3b:fa:9c:21:e8:e9:2c:
92:08:11:be:8a:50:bd:dd:58:86:8f:40:d6:c7:28:
3a:a0:7b:37:c3:bf:5b:de:38:be:79:f6:b3:e2:b5:
a3:51:8b:29:9d:c3:c0:b9:ec:98:f6:8b:27:eb:79:
bd:90:86:b3:9d:f2:9d:61:5d:e6:45:21:34:2c:0b:
19:6e:14:27:bb:55:7d:cc:57:47:a2:dd:ae:d0:23:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D4:2E:4B:CE:98:D6:F5:14:C1:37:53:C6:AF:E2:47:3D:28:9E:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-tQuS86Y1vUUwTdTxq_iRz0onmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.143.0/24
5.175.187.0/24
5.230.110.0/23
5.230.161.0/24
5.230.164.0/24
5.230.190.0/24
5.230.198.0/23
5.230.233.0/24
5.231.210.0/24
5.231.225.0/24
77.90.38.0/24
89.144.14.0/24
94.249.173.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:81:b7:be:e0:af:8a:8c:1b:c1:99:d3:e1:39:d5:98:d8:cf:
c1:f0:ef:3f:e7:dd:4e:75:7b:13:f6:b3:7f:94:33:0b:91:39:
4c:53:71:7c:2a:07:01:3a:a2:13:3c:00:39:04:a2:b6:2f:d3:
e0:48:63:b1:47:da:76:59:86:58:60:93:5d:0c:96:98:c9:d4:
f2:1b:e5:21:01:11:59:0c:84:26:94:30:34:c1:62:c2:32:45:
5d:2d:3a:cf:87:a6:eb:70:3e:61:ab:92:3b:83:91:1b:cf:76:
cc:03:5f:85:84:3e:74:3d:1f:bf:f8:f0:34:20:8a:de:1a:e8:
7e:32:2c:f1:c4:8b:e9:48:c7:06:14:6b:22:46:6e:37:cd:1b:
21:a0:e7:fb:3c:73:be:ce:9c:90:03:0a:8c:45:13:1b:f2:f9:
3a:23:2a:a1:16:8d:45:ba:55:54:c8:a5:fd:e4:ea:39:7f:c0:
41:53:b5:60:61:00:1f:75:ec:3f:13:16:f8:d0:dd:20:14:b3:
63:6b:ca:ae:5e:b5:27:ac:5e:54:59:48:56:5d:62:db:89:a6:
9a:2c:26:01:05:60:07:03:56:4e:51:73:32:c9:77:97:a5:f2:
f5:5b:ae:59:f4:bc:22:05:bb:70:6a:a0:d4:97:20:51:40:f5:
f6:00:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client