Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6EtdEgygEE9n9s014_nn29JchsU.roa
File: 6EtdEgygEE9n9s014_nn29JchsU.roa (raw, json)
Hash identifier: PabRQqBDetcncN8mrEbFhS4y28FT1+Z6DrD5+NunMjg=
Subject key identifier: E8:4B:5D:12:0C:A0:10:4F:67:F6:CD:35:E3:F9:E7:DB:D2:5C:86:C5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FF1EF2F973707DA749DBBCA466FB03E88
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6EtdEgygEE9n9s014_nn29JchsU.roa
Signing time: Tue 11 Aug 2026 17:46:51 +0000
ROA not before: Tue 11 Aug 2026 17:46:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.252.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:ef:2f:97:37:07:da:74:9d:bb:ca:46:6f:b0:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 11 17:46:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e84b5d120ca0104f67f6cd35e3f9e7dbd25c86c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:e3:e4:ff:23:96:bb:02:68:77:f3:54:a9:
73:60:9e:64:ab:e8:f1:4b:bf:79:c4:9a:66:a0:d1:
7c:de:4a:5d:46:3f:c1:44:47:75:12:12:81:38:98:
b9:a7:68:84:7d:80:98:64:b2:c9:c9:12:49:f7:3f:
1c:9e:32:a3:6b:de:08:19:ac:47:42:7c:a3:19:11:
cd:ab:3e:e2:7b:dd:6b:04:0d:50:0c:c2:7e:aa:f8:
1e:40:10:2e:80:f4:f9:12:dc:7b:7d:6d:30:8e:27:
35:70:54:ce:2a:10:0a:74:e2:3b:01:5b:91:97:1d:
47:42:c9:f3:6f:6a:99:a6:57:79:42:dc:1c:d8:4f:
85:eb:ec:f2:f5:2f:de:0a:9c:6a:3d:2e:99:1a:87:
9c:54:57:e0:70:17:9a:d2:66:81:49:5d:0c:c0:92:
67:fc:a3:6a:d0:4e:bd:79:50:95:4b:e2:e4:35:0a:
f6:95:21:45:cd:8f:6d:60:4a:f4:7d:1c:99:67:33:
d7:40:19:69:60:cc:37:bc:7f:11:34:5f:87:eb:ed:
62:3f:b8:cb:c6:68:43:52:c8:ea:78:53:57:01:03:
90:2a:e8:39:8a:07:da:83:3f:6b:c1:c2:a0:5a:ad:
e9:88:65:33:55:0a:25:08:fd:cc:ab:88:48:4a:31:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:5D:12:0C:A0:10:4F:67:F6:CD:35:E3:F9:E7:DB:D2:5C:86:C5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6EtdEgygEE9n9s014_nn29JchsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.175.223.0/24
5.231.107.0/24
5.231.252.0/24
89.106.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ca:d9:10:6c:de:33:09:5a:a0:f1:7c:0f:48:a6:f3:29:28:
9c:86:db:6e:87:b8:a0:51:59:01:41:fe:cc:14:40:14:74:ac:
61:ff:51:9a:a6:62:bd:bd:ce:75:e9:9c:70:80:04:56:23:c9:
db:b1:3a:f3:e0:46:71:46:32:8d:0d:4b:6c:bd:f9:27:60:0c:
54:d9:c7:d6:d7:3f:48:7f:47:7e:75:cf:88:97:04:dd:0b:6e:
11:90:3f:aa:41:ab:6f:55:3d:dc:ee:fd:23:ea:2b:08:1a:8a:
e7:0a:49:25:24:f1:46:a5:b1:b1:9b:56:13:48:68:37:af:28:
ae:c9:da:be:d9:50:98:30:19:36:fd:7c:33:47:10:d1:9a:96:
0e:b1:79:3b:e7:01:53:11:64:f2:95:02:9d:4e:e7:12:c6:c5:
33:e2:2c:af:c7:05:68:93:5d:f9:c1:1b:d2:c8:d9:94:1f:9e:
93:48:64:65:bc:f1:43:52:2c:ee:51:9f:91:df:06:96:9f:3a:
7b:cc:bc:b0:1f:34:8c:ce:c3:14:df:3e:1b:52:1c:e8:c4:8c:
ea:55:cd:35:1b:cd:82:4e:2a:a1:da:19:d8:5e:01:b0:8a:b5:
0a:10:93:98:2e:d1:cb:f6:5d:b7:a7:b1:5d:84:61:b1:0a:56:
59:68:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:24:56 2026 by rpki-client