Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6O7OMctW5NGlB_R7ZXuSD_fC6WM.roa
File: 6O7OMctW5NGlB_R7ZXuSD_fC6WM.roa (raw, json)
Hash identifier: o5aSeWizYosMTc8vrTTiTvIRshWC81APAKNoozNOjPE=
Subject key identifier: E8:EE:CE:31:CB:56:E4:D1:A5:07:F4:7B:65:7B:92:0F:F7:C2:E9:63
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A026D378FC8E716A23C7CC61A9B53A92CF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6O7OMctW5NGlB_R7ZXuSD_fC6WM.roa
Signing time: Sat 22 Aug 2026 00:16:28 +0000
ROA not before: Sat 22 Aug 2026 00:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
5.231.45.0/24 maxlen: 24
5.231.59.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
85.93.9.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:d3:78:fc:8e:71:6a:23:c7:cc:61:a9:b5:3a:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 22 00:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8eece31cb56e4d1a507f47b657b920ff7c2e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:8e:2c:66:93:c8:0f:30:3f:97:8a:5f:cb:
6e:1b:fe:d1:1a:12:ca:19:81:4c:52:7d:b7:0b:82:
33:48:f0:e6:95:e0:8f:9f:d2:b3:9c:49:36:be:2d:
55:9f:32:e5:10:7c:63:4b:02:c0:5a:e3:d3:ef:78:
84:0f:e4:a8:c6:07:26:f7:b5:d2:a0:49:cf:3b:fe:
4f:84:88:a6:45:a9:bb:5f:11:ff:67:fb:72:b5:22:
d6:cf:78:79:cd:9b:c0:5c:d4:d1:d3:1f:f7:22:f1:
ee:bf:60:08:55:33:cd:ec:67:4c:e3:83:b9:54:c0:
90:ea:0f:1d:74:7e:b1:d9:25:ff:e7:bb:1f:e1:fd:
4d:db:c8:02:a2:78:9f:ef:51:df:84:b3:5b:3a:a9:
1a:f2:3f:eb:8c:b5:37:5b:72:55:a8:28:d6:a2:08:
5c:93:39:fa:7f:bd:e5:c5:4e:88:05:f2:14:e1:87:
eb:fe:e7:8b:b6:5e:1c:67:39:99:cc:59:4b:94:8d:
58:75:62:a4:d7:6a:de:8d:02:39:bd:0a:10:7d:c5:
7c:c8:e5:20:2d:0a:0a:c5:9d:01:0f:c0:e4:39:43:
b0:df:b8:43:0e:38:5c:d7:5d:10:4e:59:63:fb:58:
72:47:92:43:a4:0b:4b:07:72:e2:41:15:10:c1:98:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EE:CE:31:CB:56:E4:D1:A5:07:F4:7B:65:7B:92:0F:F7:C2:E9:63
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6O7OMctW5NGlB_R7ZXuSD_fC6WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.175.211.0/24
5.231.28.0/24
5.231.45.0/24
5.231.59.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
85.93.9.0/24
89.144.8.0/24
89.144.53.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fb:69:c6:ef:d2:c2:74:36:32:de:91:0c:5f:ef:5c:75:e6:
a4:18:5d:a0:b9:8a:68:89:46:3b:e8:3d:81:96:89:b6:a6:01:
8a:ae:61:0b:5e:fe:0f:51:b2:83:51:29:fd:4a:bc:2d:88:7b:
7a:62:0d:c0:0f:6b:95:5b:b6:72:7c:73:f0:64:4b:5e:e9:c0:
ec:a5:db:96:41:99:8f:f0:83:9a:db:22:64:7e:82:1f:16:86:
6d:26:c8:16:42:92:d9:78:37:27:0d:fb:4d:44:ca:09:e2:c7:
5d:36:12:fe:a7:25:0b:61:5f:30:fd:bd:63:a7:a5:49:03:ce:
02:86:57:41:6b:48:cf:b7:ec:54:5a:cd:81:7c:88:04:f2:e3:
99:c3:87:1f:53:a7:f4:d7:60:b4:1e:5d:1c:64:f6:7f:b1:01:
3a:b5:59:b8:8a:a0:a9:be:ec:22:8e:77:07:21:1f:1b:b2:84:
54:fa:46:c3:67:3a:c1:7d:35:e6:d1:c5:21:6b:b9:7b:99:9e:
d3:4e:61:65:33:aa:eb:8e:64:84:27:3d:92:f2:78:74:93:91:
7d:c2:6c:e7:3b:2d:9d:49:40:f6:60:12:79:b0:25:f9:2f:2c:
b2:27:8d:88:0d:e9:42:b7:cd:24:69:00:82:6d:d2:31:0d:b9:
f3:e0:12:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:32 2026 by rpki-client