Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4H95ULytE9ooYKo5-JS6IjmRCYY.roa
File: 4H95ULytE9ooYKo5-JS6IjmRCYY.roa (raw, json)
Hash identifier: SMC12PiWmOOTWImYpEjQg/cDAKlQ5VuCjIXo2G/K1M0=
Subject key identifier: E0:7F:79:50:BC:AD:13:DA:28:60:AA:39:F8:94:BA:22:39:91:09:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F788BCA856D05A616D88DBAC5E9BDC655
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4H95ULytE9ooYKo5-JS6IjmRCYY.roa
Signing time: Sun 19 Jul 2026 04:04:15 +0000
ROA not before: Sun 19 Jul 2026 04:04:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.230.125.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.44.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
89.144.15.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:78:8b:ca:85:6d:05:a6:16:d8:8d:ba:c5:e9:bd:c6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 19 04:04:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e07f7950bcad13da2860aa39f894ba2239910986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:ef:55:3f:57:52:f1:d7:2b:39:cd:fb:c3:
eb:d7:8c:19:6e:96:9e:64:89:38:ac:dd:87:a6:4b:
52:4f:4f:b0:c8:f1:3d:c7:93:6f:5f:36:e4:fe:7c:
8a:6b:76:c6:bb:c9:5a:f2:cf:a8:9e:ac:e3:4b:c2:
60:d4:81:78:52:bc:3c:70:5a:1b:6a:24:83:fe:37:
3e:6a:fc:4f:61:5c:c3:f5:87:fb:54:aa:22:49:10:
7d:41:df:0a:18:eb:0e:c5:de:95:4d:c6:3a:0e:41:
b5:61:ee:3e:8b:79:e6:60:7d:36:a6:d5:88:72:2f:
ea:7b:fe:f7:6c:22:fc:58:e1:76:f0:92:5a:46:ab:
40:6a:2e:1d:de:b9:1e:a5:b0:92:73:d4:35:15:24:
67:ea:36:8a:00:1f:be:4d:d7:9b:4a:1d:19:54:d0:
37:51:fc:40:13:10:50:93:1b:ff:8c:de:66:d9:f9:
e4:15:3f:2b:76:13:84:4f:e9:22:dc:af:29:6f:26:
9b:9c:9e:c9:ff:f9:49:54:7f:c2:18:ea:b5:80:05:
1e:fd:48:77:fc:70:70:2c:7b:d1:ae:fb:71:bf:45:
5e:3e:34:c0:68:17:f6:7f:b8:a7:0d:bf:76:d3:f5:
e0:2d:b2:70:6a:c6:86:69:5b:48:51:0f:16:0e:c8:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:79:50:BC:AD:13:DA:28:60:AA:39:F8:94:BA:22:39:91:09:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4H95ULytE9ooYKo5-JS6IjmRCYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.230.125.0/24
5.231.29.0/24
5.231.44.0/24
5.231.204.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
89.144.15.0/24
185.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
14:52:7d:33:34:33:75:8c:70:27:1d:c1:50:1b:f7:98:6b:39:
4d:d5:fc:4c:e8:6b:f9:c9:41:fa:e6:31:18:2c:bd:d6:cd:3a:
c2:d2:37:1d:3d:31:ac:b4:9b:87:b9:de:76:76:60:12:76:25:
05:62:6c:02:1e:88:28:67:da:fe:27:83:85:a7:80:9a:16:a1:
67:ff:2f:80:f4:a5:81:9e:e6:40:62:2c:53:41:03:eb:73:ad:
0a:20:22:83:a4:d2:63:b5:30:3e:8b:55:5d:c9:33:e9:d5:86:
2f:73:d9:bd:44:48:fa:2e:46:40:cc:db:5e:fb:c8:ad:a8:53:
1b:b7:c4:da:3b:7a:02:5b:8b:44:87:a7:6c:62:23:d8:75:97:
e3:1f:ba:f3:1a:eb:46:50:f0:1d:cf:99:5e:16:72:91:dd:ff:
36:41:a9:65:d2:2b:7f:ae:f0:e7:c4:c4:33:ea:fa:44:aa:82:
cc:eb:9d:a8:62:18:47:27:7c:5f:cf:d3:a0:c2:a6:e1:8a:98:
41:5e:c6:e4:4e:2f:1a:4a:6c:46:87:58:32:d3:e4:6c:e2:a9:
72:b5:82:17:7e:31:f3:c8:35:a6:77:19:01:89:0d:11:4f:ff:
a1:22:5f:b6:c3:4e:22:cc:5a:13:8a:72:57:a4:30:3f:6f:de:
36:9d:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:57 2026 by rpki-client