Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5loNOWOYkVRl1Z1E8pLGHhElUqg.roa
File: 5loNOWOYkVRl1Z1E8pLGHhElUqg.roa (raw, json)
Hash identifier: VmzkydDxjYBb537bJPZuZIiginnsqj84jjYkL8xl6cI=
Subject key identifier: E6:5A:0D:39:63:98:91:54:65:D5:9D:44:F2:92:C6:1E:11:25:52:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A06B592CC180FFFDC4431FD98CE8FE78F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5loNOWOYkVRl1Z1E8pLGHhElUqg.roa
Signing time: Fri 04 Sep 2026 07:36:41 +0000
ROA not before: Fri 04 Sep 2026 07:36:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.146.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
5.175.128.0/24 maxlen: 24
5.175.132.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.185.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:59:2c:c1:80:ff:fd:c4:43:1f:d9:8c:e8:fe:78:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 4 07:36:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e65a0d396398915465d59d44f292c61e112552a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:c6:34:78:a0:a2:e2:2d:5c:3b:e4:ef:49:
f9:b5:16:66:1b:01:bf:e7:99:00:9e:ab:47:b2:13:
11:73:f7:78:95:d1:07:78:a2:85:d9:a1:b9:f8:13:
28:db:ce:f3:46:08:a1:1a:1f:fb:71:97:ef:ec:43:
3b:62:55:39:dc:0a:86:4f:e2:86:6b:51:8b:29:c6:
89:4f:c6:5c:46:75:5e:6b:18:8c:f4:b3:38:2d:0f:
aa:30:d5:5e:ad:f7:58:81:54:7b:4a:d6:7b:75:9a:
e9:47:42:31:8b:17:19:5e:2f:42:de:ac:6c:12:18:
69:6a:68:0c:4d:1c:29:a2:16:10:b6:52:af:c2:ae:
31:90:52:15:05:06:f1:f4:89:27:49:89:64:79:79:
73:bb:3f:bd:b6:61:c6:8f:85:e1:5d:64:b9:9c:bc:
7f:0a:86:19:63:df:80:a9:64:98:8d:32:c5:b6:b5:
92:cf:50:27:be:c2:81:c8:2e:1d:5d:f9:35:80:55:
ce:02:0f:de:d3:cc:7b:ff:4f:7f:f5:19:f5:68:bb:
48:8f:33:f1:fe:7e:4b:a3:d9:43:f8:a8:2b:33:08:
bb:8d:de:52:0b:79:15:a1:f0:f9:f0:df:71:bc:c6:
fa:82:f0:a1:24:d8:04:bf:c1:8e:8e:1e:f8:da:52:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5A:0D:39:63:98:91:54:65:D5:9D:44:F2:92:C6:1E:11:25:52:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5loNOWOYkVRl1Z1E8pLGHhElUqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.146.0/24
5.83.148.0/24
5.175.128.0/24
5.175.132.0/24
5.175.140.0/24
5.175.185.0/24
5.175.192.0/24
5.175.221.0/24
5.231.94.0/24
87.239.131.0/24
89.106.77.0/24
89.106.82.0/24
89.144.49.0/24
94.249.247.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ea:3d:19:ab:29:7e:c7:c0:5f:03:08:2a:5e:15:ed:fd:6f:
e1:9b:fa:93:64:a6:33:ec:d7:9f:08:28:0e:e1:ac:f0:08:ec:
b2:6c:86:98:f1:08:35:5f:2e:55:00:d1:27:68:15:dd:b1:52:
72:d2:54:f4:1b:87:05:78:5d:ce:dd:71:2e:51:a0:2d:c7:cd:
23:46:f6:56:36:66:cc:eb:6e:cb:01:58:8b:28:d1:9f:7e:a6:
92:44:45:81:10:8a:a7:31:d0:38:6e:70:cc:ad:a4:d4:1e:50:
cc:75:2c:73:41:43:fc:da:ca:28:8e:d2:5b:80:aa:d9:df:a6:
40:74:35:31:6d:49:2f:cb:f7:18:a4:eb:1d:d0:73:c3:da:4f:
35:33:6b:37:22:8b:ef:40:bb:49:34:6c:6a:59:aa:89:8c:3e:
8c:93:1d:39:c5:b4:0f:99:28:4a:e3:fd:47:09:e9:85:a9:3d:
e8:6d:0d:ab:3f:62:f6:70:1d:f4:66:ce:eb:cc:3f:51:55:4d:
c8:b9:2d:02:c9:2e:f2:45:6d:72:e8:f4:53:c8:e7:d6:7c:ff:
62:ec:5d:aa:91:0d:a7:b0:fa:2b:aa:0d:15:dd:f9:27:43:4b:
70:22:e7:b0:1f:1a:ad:48:ab:93:8b:28:5e:47:be:5e:a9:e6:
e3:a6:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:40 2026 by rpki-client