Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1x6irEzu-kBEjAcT6eH77c1rCZU.roa
File: 1x6irEzu-kBEjAcT6eH77c1rCZU.roa (raw, json)
Hash identifier: 0KETKjCeV5jKq6IfIRQCmR+sSS0d+MiUnumuem86ac8=
Subject key identifier: D7:1E:A2:AC:4C:EE:FA:40:44:8C:07:13:E9:E1:FB:ED:CD:6B:09:95
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A153DECE292842BA0E7A3A1B3E5300AF62
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1x6irEzu-kBEjAcT6eH77c1rCZU.roa
Signing time: Mon 19 Oct 2026 11:14:32 +0000
ROA not before: Mon 19 Oct 2026 11:14:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.230.154.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
77.90.24.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.249.149.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:de:ce:29:28:42:ba:0e:7a:3a:1b:3e:53:00:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 11:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d71ea2ac4ceefa40448c0713e9e1fbedcd6b0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:8c:88:7d:48:bc:df:49:b8:73:0f:e0:bf:
b2:ef:de:3a:3d:0a:d4:e8:98:11:e1:e0:15:dd:81:
0a:29:4e:4e:51:25:71:9d:46:ef:07:b5:54:00:cc:
7e:1c:ad:be:49:96:bf:59:1d:8b:81:50:86:c7:e5:
57:fc:65:c7:1c:a2:65:f3:48:72:e0:28:c3:be:52:
9c:5a:09:5d:c5:71:8f:8e:e7:b1:a9:e0:12:67:7b:
8d:4b:88:40:2b:bf:da:b1:a3:15:67:a0:c6:43:df:
fd:5e:50:03:94:87:8d:27:73:fd:fa:cb:0a:43:b2:
f3:6b:ec:f9:d7:41:9c:04:25:bc:97:03:f2:a1:88:
f7:ce:62:7c:70:ab:a3:00:e8:33:bb:53:41:04:33:
63:e1:0e:fe:3a:fe:09:01:bd:c4:29:4f:28:88:93:
10:4e:e7:22:cf:54:cc:cb:59:a8:e1:f0:4f:ee:1d:
1b:f2:b6:db:31:31:46:c4:a1:c0:f3:7a:62:87:74:
d4:9f:8d:58:a0:d8:b4:2a:94:4c:9c:28:9c:7f:31:
92:3d:f3:d6:f4:b7:f0:8d:26:71:06:0e:fa:e5:01:
8b:07:d5:71:e3:f2:4c:d5:5a:85:27:d7:93:c3:80:
17:b9:64:62:62:2f:00:1f:2b:1f:77:6b:a5:82:2a:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:A2:AC:4C:EE:FA:40:44:8C:07:13:E9:E1:FB:ED:CD:6B:09:95
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1x6irEzu-kBEjAcT6eH77c1rCZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.230.154.0/24
5.231.242.0/24
77.90.24.0/24
77.90.48.0/24
89.106.71.0/24
94.103.171.0/24
94.249.149.0/24
94.249.170.0/24
94.249.230.0/24
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
61:54:36:93:e8:fa:00:bf:0a:97:22:36:00:8a:66:7d:62:30:
ed:31:d8:db:c6:0e:74:80:77:be:7e:30:d6:ca:a8:25:0f:34:
27:f7:0e:a5:a2:be:61:0c:37:f5:c4:40:79:10:55:aa:6d:f3:
99:22:a3:91:97:e8:e9:9a:e7:22:90:5d:59:ac:22:24:89:4f:
4a:ab:23:47:05:71:64:99:65:42:22:3b:fb:86:aa:9f:ce:cf:
de:df:45:ef:ff:6a:93:46:3a:cb:5d:42:2d:2f:af:09:61:fe:
91:82:de:bc:84:fb:75:1c:58:39:29:93:37:60:6a:71:e3:e9:
7c:96:d3:de:28:d8:35:fc:82:7f:94:3d:e6:f6:c3:3e:7d:b5:
e9:2b:b4:fc:32:0b:9e:65:4c:76:12:3a:6a:c0:3b:27:43:43:
d3:fe:0e:6d:54:1f:35:b8:5c:7e:f2:49:1a:fd:d5:28:76:ee:
3d:4f:11:9e:a4:cb:43:93:08:73:be:47:59:c3:22:5a:e4:54:
70:d3:61:2e:75:c8:a4:a0:98:48:8c:59:b2:b5:18:32:3e:a0:
1a:45:5f:fc:71:a5:5e:3b:86:1c:e2:2c:44:46:58:8e:50:82:
94:fe:b5:83:5f:69:57:66:91:51:ea:93:67:cf:c3:7f:58:c6:
58:c1:b3:46
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAaFT3s4pKEK6Dno6Gz5TAK9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDE5MTExNDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzFlYTJhYzRjZWVmYTQwNDQ4YzA3MTNlOWUxZmJlZGNkNmIwOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2MiH1IvN9JuHMP4L+y7946PQrU
6JgR4eAV3YEKKU5OUSVxnUbvB7VUAMx+HK2+SZa/WR2LgVCGx+VX/GXHHKJl80hy
4CjDvlKcWgldxXGPjuexqeASZ3uNS4hAK7/asaMVZ6DGQ9/9XlADlIeNJ3P9+ssK
Q7Lza+z510GcBCW8lwPyoYj3zmJ8cKujAOgzu1NBBDNj4Q7+Ov4JAb3EKU8oiJMQ
Tuciz1TMy1mo4fBP7h0b8rbbMTFGxKHA83pih3TUn41YoNi0KpRMnCicfzGSPfPW
9LfwjSZxBg765QGLB9Vx4/JM1VqFJ9eTw4AXuWRiYi8AHysfd2ulgiqVFQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFNceoqxM7vpARIwHE+nh++3NawmVMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMXg2aXJFenUta0JFakFjVDZlSDc3YzFyQ1pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQABVOZAwQA
BeaaAwQABefyAwQATVoYAwQATVowAwQAWWpHAwQAXmerAwQAXvmVAwQAXvmqAwQA
XvnmAwQAXvn2MA0GCSqGSIb3DQEBCwUAA4IBAQBhVDaT6PoAvwqXIjYAimZ9YjDt
Mdjbxg50gHe+fjDWyqglDzQn9w6lor5hDDf1xEB5EFWqbfOZIqORl+jpmucikF1Z
rCIkiU9KqyNHBXFkmWVCIjv7hqqfzs/e30Xv/2qTRjrLXUItL68JYf6Rgt68hPt1
HFg5KZM3YGpx4+l8ltPeKNg1/IJ/lD3m9sM+fbXpK7T8MgueZUx2EjpqwDsnQ0PT
/g5tVB81uFx+8kka/dUodu49TxGepMtDkwhzvkdZwyJa5FRw02EudcikoJhIjFmy
tRgyPqAaRV/8caVeO4Yc4ixERliOUIKU/rWDX2lXZpFR6pNnz8N/WMZYwbNG
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:48 2026 by rpki-client