Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1gln2qeW065ifjUPvjzx25sI2pQ.roa
File: 1gln2qeW065ifjUPvjzx25sI2pQ.roa (raw, json)
Hash identifier: krDfEJ8ToiKpM8J2ZcuxCDwmpf3gD7PC16E2mROIk28=
Subject key identifier: D6:09:67:DA:A7:96:D3:AE:62:7E:35:0F:BE:3C:F1:DB:9B:08:DA:94
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F66A0928B624C10130DE53DB971A3239F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1gln2qeW065ifjUPvjzx25sI2pQ.roa
Signing time: Wed 15 Jul 2026 16:33:46 +0000
ROA not before: Wed 15 Jul 2026 16:33:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 5.175.143.0/24 maxlen: 24
5.175.187.0/24 maxlen: 24
5.230.110.0/24 maxlen: 24
5.230.111.0/24 maxlen: 24
5.230.161.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.230.190.0/24 maxlen: 24
5.230.198.0/24 maxlen: 24
5.230.199.0/24 maxlen: 24
5.230.233.0/24 maxlen: 24
5.231.210.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 09:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:a0:92:8b:62:4c:10:13:0d:e5:3d:b9:71:a3:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 15 16:33:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d60967daa796d3ae627e350fbe3cf1db9b08da94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:24:bf:0d:05:b4:cc:5c:2b:bf:a1:75:09:
e2:a7:56:ce:3d:bc:0a:82:c7:10:98:fd:1b:96:49:
38:57:74:a3:3e:a8:9a:af:67:38:12:06:bf:0e:24:
88:8a:73:ea:a4:f0:71:73:55:71:9b:3f:14:25:c4:
cf:0d:74:a2:92:d1:5d:a8:7a:2d:b8:01:50:a9:a8:
4b:3b:52:32:ac:9d:50:da:f6:b5:4f:91:12:13:af:
16:27:85:d7:9e:6f:20:5c:a3:01:52:46:27:b0:3a:
ce:66:ea:b1:48:39:2c:1a:8d:0a:0e:71:71:fd:c4:
ba:88:a6:a4:25:10:5e:fb:40:a9:f7:23:cf:7e:d6:
14:c2:bd:1f:e1:cc:ab:0a:a2:b1:13:a2:87:a1:fe:
59:a3:bc:cd:3b:91:1e:15:5d:e5:2d:48:d4:aa:5e:
a5:8c:10:cb:ca:2e:a2:1a:c0:ee:3b:50:c4:c5:0e:
fc:e0:ed:68:44:3c:75:5c:50:50:3d:31:8e:7a:01:
1f:4c:05:72:cb:23:9a:1d:2e:7c:8d:55:1d:f8:d8:
0d:83:cf:8e:62:2d:76:39:68:66:99:23:5b:d3:62:
64:bb:3d:02:33:06:7c:e3:d9:5c:8b:6c:87:8a:15:
3e:d1:bc:34:8b:3b:22:da:0e:a4:e8:12:1b:91:b5:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:67:DA:A7:96:D3:AE:62:7E:35:0F:BE:3C:F1:DB:9B:08:DA:94
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1gln2qeW065ifjUPvjzx25sI2pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.143.0/24
5.175.187.0/24
5.230.110.0/23
5.230.161.0/24
5.230.164.0/24
5.230.190.0/24
5.230.198.0/23
5.230.233.0/24
5.231.210.0/24
5.231.225.0/24
77.90.38.0/24
89.144.14.0/24
94.249.173.0/24
Signature Algorithm: sha256WithRSAEncryption
54:75:6e:3b:df:9f:f7:be:76:33:eb:c9:a5:72:c7:05:12:5e:
90:09:12:e3:b1:79:eb:15:bd:a4:e1:a4:8d:60:97:3f:e4:40:
17:b7:e2:c4:d0:fd:1b:f9:5e:60:31:af:b2:71:d8:2b:55:3b:
7f:ae:ae:e4:a0:f9:f7:2c:3c:05:2d:de:f0:ab:eb:b3:e8:84:
59:72:30:cc:f2:4b:c1:d6:e5:42:7b:9f:27:ca:7b:2b:1f:9f:
be:1a:b0:fc:65:b6:7b:cb:59:f4:ec:e5:06:1e:9f:98:ef:1e:
3a:11:7b:a8:46:b0:f1:0c:a8:b0:9a:c5:d5:9d:d9:8d:a6:bc:
1a:6e:21:af:3b:a5:f6:b8:67:9d:a0:49:a9:ab:26:d8:42:77:
55:dd:38:b1:77:74:6a:47:80:9b:b6:c6:81:26:83:f9:c3:b3:
c7:79:53:92:0e:41:55:5a:ab:22:46:5c:ed:f7:40:96:bc:59:
7e:68:1f:1e:29:fd:5e:02:a5:a1:4a:43:0f:9e:20:c3:83:5d:
1f:7d:34:d5:11:9a:0f:4d:41:0d:0a:70:76:1a:c4:64:83:b5:
a2:77:1a:95:90:80:78:b6:1d:3b:5a:fa:cb:12:c4:4a:6a:9e:
fa:24:a9:f2:10:3d:c9:6b:67:89:33:92:39:f0:d5:5a:f2:e5:
95:be:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:37 2026 by rpki-client