Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/78s2NUNQ3EpN5H_7zmz6bvO3KhU.roa
File: 78s2NUNQ3EpN5H_7zmz6bvO3KhU.roa (raw, json)
Hash identifier: bIerAO8+FrxrM30aufsJM0pdYRBIdR24PWj//VCjC7g=
Subject key identifier: EF:CB:36:35:43:50:DC:4A:4D:E4:7F:FB:CE:6C:FA:6E:F3:B7:2A:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E679CED9AF21EF50909548EF67A88AC22
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/78s2NUNQ3EpN5H_7zmz6bvO3KhU.roa
Signing time: Wed 27 May 2026 04:06:38 +0000
ROA not before: Wed 27 May 2026 04:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.175.186.0/24 maxlen: 24
5.175.248.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:67:9c:ed:9a:f2:1e:f5:09:09:54:8e:f6:7a:88:ac:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 27 04:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efcb36354350dc4a4de47ffbce6cfa6ef3b72a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:e3:bb:62:6d:f5:35:a8:bd:2c:8e:b0:98:
f9:32:b4:a5:1b:12:f9:ad:d5:8c:5e:2c:5f:8c:80:
6e:63:d0:73:60:6d:13:66:4a:d8:57:31:ab:67:58:
70:0b:2a:e7:61:87:95:f8:ae:45:4b:36:d4:90:59:
42:53:4a:c8:f4:09:2d:e0:94:8d:0b:2b:73:d7:dc:
a3:fa:d7:46:ef:14:d5:78:56:03:16:20:b5:17:68:
8d:27:8c:4f:3d:21:01:cb:a9:4f:c9:3b:58:4f:11:
b7:92:bd:96:2e:98:10:af:a5:7b:ae:fc:c0:c6:69:
3d:3b:81:3a:3c:63:39:f7:ec:0c:bd:72:14:9b:43:
d2:59:51:b5:17:de:9e:f5:7a:5b:76:68:28:cc:1a:
1a:85:18:95:9c:a8:f0:fa:3d:a7:9b:39:91:ae:b4:
da:0a:dc:00:f6:2d:90:0f:1c:16:12:7b:e1:b0:99:
a9:50:30:4f:f2:11:a2:5e:78:3b:f6:26:ac:07:2e:
fb:53:bd:7e:f5:ac:cd:70:90:ec:80:ed:a9:c3:65:
04:f4:8c:7c:d6:83:59:75:44:c9:20:e3:c1:05:b5:
02:8a:a1:90:83:e4:be:11:78:31:84:0e:fb:ee:71:
3d:1b:eb:d7:26:66:fb:9f:42:81:d7:b2:bd:5a:db:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:36:35:43:50:DC:4A:4D:E4:7F:FB:CE:6C:FA:6E:F3:B7:2A:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/78s2NUNQ3EpN5H_7zmz6bvO3KhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.186.0/24
5.175.248.0/24
77.90.33.0/24
89.106.89.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ad:08:27:2b:fd:44:e4:f2:a2:25:0f:94:5f:34:04:c9:9f:
59:59:08:1d:58:81:db:4d:38:ee:46:bd:dd:64:28:0b:8f:48:
6a:81:b3:a5:54:6d:0b:cc:89:3e:4c:a4:b3:db:53:90:d4:82:
86:c0:8a:80:5f:3a:25:94:7c:fa:eb:1e:f5:2e:5a:16:4b:9e:
8b:18:1c:c1:c2:06:1d:1a:d3:63:03:95:69:65:4b:78:3b:b3:
8f:bb:7d:51:25:25:7d:12:1d:1a:3b:84:0b:67:13:55:91:a3:
ee:55:c7:8a:76:79:3c:35:54:69:07:a8:65:80:f3:9d:f1:97:
fe:8f:2a:fa:7b:78:41:87:d8:da:40:6b:35:96:fa:84:d9:74:
5a:60:d2:9d:8f:b4:82:65:05:2e:94:02:eb:bb:13:4b:c3:69:
e0:38:6b:97:d9:13:46:b1:d7:fd:ce:b2:dc:83:8a:80:c6:58:
85:fe:32:49:6d:cf:fa:99:78:d6:4a:7b:66:ef:c2:26:04:7e:
5f:a1:65:73:eb:91:af:70:5d:ec:c0:96:83:77:f3:53:72:65:
e5:42:15:95:61:c5:e1:a3:7d:5b:35:5d:24:bb:a6:23:d5:fd:
77:12:76:27:2f:cd:37:22:df:17:3e:a1:7e:e8:28:34:d1:a2:
e4:99:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:19 2026 by rpki-client