Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4vMGOl1s0vtg_vlBB-ndwsxzn2c.roa
File: 4vMGOl1s0vtg_vlBB-ndwsxzn2c.roa (raw, json)
Hash identifier: AQa4NRInMfYCErQUiG/1n87p1ea+aj/qdthmr1Dmc+E=
Subject key identifier: E2:F3:06:3A:5D:6C:D2:FB:60:FE:F9:41:07:E9:DD:C2:CC:73:9F:67
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CACF1B5CB78CBD2E522711287506B528D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4vMGOl1s0vtg_vlBB-ndwsxzn2c.roa
Signing time: Mon 02 Mar 2026 05:07:27 +0000
ROA not before: Mon 02 Mar 2026 05:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 12:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:f1:b5:cb:78:cb:d2:e5:22:71:12:87:50:6b:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 05:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2f3063a5d6cd2fb60fef94107e9ddc2cc739f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:64:4a:b8:5a:ee:6a:06:d6:97:e5:5c:5f:
24:f8:f0:5c:c2:79:9d:7c:d7:57:83:48:8b:d7:57:
65:19:84:b1:5b:3d:b3:71:68:d1:5e:e0:12:c0:d2:
1e:70:cb:bd:e1:b0:e2:b4:08:41:4d:53:f8:ac:0e:
db:52:60:a9:69:25:43:27:cc:64:8c:a8:94:c8:e2:
ec:63:47:20:0b:fd:51:82:6c:68:3a:ad:5e:89:be:
b1:69:4e:08:6e:2e:7d:52:73:8c:d1:13:90:3c:a0:
b9:cc:31:fd:80:10:b3:39:06:05:21:43:eb:e5:37:
0a:5e:f5:82:bd:1a:75:65:86:f9:d8:ff:bc:44:68:
9f:0f:e5:5a:58:8f:d9:e7:29:08:2b:a2:f1:c8:d4:
d7:97:37:d6:b2:3d:8a:17:f9:cc:9a:14:4b:97:8d:
7a:ea:c7:2c:41:ad:c4:f2:83:53:fe:1d:8f:09:2e:
c9:b7:04:34:ab:b5:08:9e:6c:da:1f:0b:60:23:0a:
f2:b5:fc:61:cd:58:7b:64:c9:2a:25:a8:20:e3:5f:
46:b5:45:ee:a8:d4:e2:22:dc:64:02:2e:7a:e3:25:
c1:17:52:10:84:16:59:e3:c6:2a:34:a0:5d:6f:14:
ee:15:89:87:da:58:40:1b:0a:1d:5e:59:5a:b3:5f:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F3:06:3A:5D:6C:D2:FB:60:FE:F9:41:07:E9:DD:C2:CC:73:9F:67
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4vMGOl1s0vtg_vlBB-ndwsxzn2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.70.0/24
77.90.22.0/24
89.144.25.0/24
89.144.46.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:a9:29:1a:3c:61:26:c6:49:15:a3:28:8d:47:b3:51:0c:
5d:37:61:02:4c:cb:e5:9e:06:46:14:97:8b:dd:ea:2f:11:6c:
a6:ab:e8:8c:31:0c:65:62:19:0c:a3:bb:9b:8c:12:6b:d7:5b:
81:8b:b2:51:cf:cb:09:be:b5:68:90:a3:31:0e:9d:bd:90:d9:
fb:fc:55:b1:db:9f:3d:fc:76:53:ad:90:93:fa:ef:5c:21:09:
ff:d2:f5:9c:a1:51:87:16:4d:2e:dc:6d:ff:15:24:cc:78:47:
31:aa:77:6d:7b:d5:51:56:c1:4d:eb:d0:c7:72:e0:00:1f:cb:
e9:55:78:55:f9:db:5c:26:93:fb:25:85:67:6c:b7:e7:f8:22:
29:63:7b:a2:6b:83:4e:c4:b0:e0:dd:64:f5:71:6b:31:55:35:
8b:97:8f:d6:d3:99:50:fa:14:ed:a6:2d:d3:6b:a0:40:b9:03:
41:ae:8d:54:0b:e7:ad:35:7b:a3:07:03:a6:aa:45:28:c7:19:
70:bf:46:10:36:6e:5e:5b:e4:85:bf:13:36:78:08:c9:a0:eb:
9b:a5:4f:2a:b5:3b:17:03:27:3c:1e:46:02:11:3d:6c:c5:bc:
65:1a:01:cf:dc:17:95:9f:13:91:42:2f:9c:25:2c:cf:64:4d:
49:27:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:34:05 2026 by rpki-client