Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7dZNqGU_JMn6bQcqhDy6u3d5Xh0.roa
File: 7dZNqGU_JMn6bQcqhDy6u3d5Xh0.roa (raw, json)
Hash identifier: iuvf01DUi4FMRKU+sSHn6fA9TLTU1LSpYELhVO7rbzQ=
Subject key identifier: ED:D6:4D:A8:65:3F:24:C9:FA:6D:07:2A:84:3C:BA:BB:77:79:5E:1D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0B62EFE0AE23F0DF9B1480953EB80E0E8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7dZNqGU_JMn6bQcqhDy6u3d5Xh0.roa
Signing time: Fri 18 Sep 2026 20:22:07 +0000
ROA not before: Fri 18 Sep 2026 20:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.83.146.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
5.175.186.0/24 maxlen: 24
5.175.248.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.118.163.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:2e:fe:0a:e2:3f:0d:f9:b1:48:09:53:eb:80:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 18 20:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edd64da8653f24c9fa6d072a843cbabb77795e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:d0:53:30:d6:d1:af:f9:fc:30:8b:a6:19:
83:de:8c:e4:51:00:db:e8:e0:88:81:29:e8:34:99:
5b:16:8d:a1:47:0f:ba:aa:9a:4b:d4:d9:b8:b2:2c:
8b:75:c5:41:a8:8b:30:fa:41:c4:7d:4d:53:96:32:
bc:fe:d4:27:19:a3:b9:d7:cb:fa:9f:73:64:69:1e:
3d:71:e1:d6:a4:85:06:49:cb:b3:0c:d5:0f:23:22:
6a:bb:a1:cf:52:8a:90:78:e8:55:8e:e5:60:bb:7b:
14:7e:21:3e:df:cd:8b:21:de:7a:53:aa:9e:81:a1:
c0:32:ec:ed:37:61:70:e5:07:e2:09:0d:d3:17:8b:
4a:b7:58:d8:76:c6:0a:06:88:7d:4d:6c:c5:88:96:
25:01:ed:34:5d:ef:22:bf:d8:75:b9:92:cf:fc:e7:
86:79:45:00:d5:d9:29:2f:d8:95:f9:98:63:c8:32:
a9:54:30:f2:45:e6:58:fd:a6:23:64:cb:98:e0:da:
72:d4:6c:b8:92:9d:ff:9e:fe:3e:f9:21:2d:d0:00:
18:71:f5:4a:94:33:ef:8a:d8:78:9e:af:16:78:ac:
70:eb:42:41:17:29:20:41:b9:58:18:38:4e:d7:f4:
a0:22:9f:50:a8:ec:b1:18:72:3a:09:f5:f5:6f:95:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:4D:A8:65:3F:24:C9:FA:6D:07:2A:84:3C:BA:BB:77:79:5E:1D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7dZNqGU_JMn6bQcqhDy6u3d5Xh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
5.83.148.0/24
5.175.186.0/24
5.175.248.0/24
77.90.33.0/24
85.118.163.0/24
89.106.89.0/24
89.144.3.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fd:a3:76:90:3e:f7:46:29:82:7f:25:56:f1:ba:db:5f:20:
41:aa:eb:17:07:95:21:66:5f:95:54:21:a8:2c:49:93:fa:ad:
1d:06:89:34:75:3c:68:58:4c:50:1e:de:d9:10:19:fd:ec:2c:
cd:bc:02:42:1c:e3:a7:b6:e6:65:41:5a:c5:18:8c:d2:1e:de:
6c:36:6f:a3:4d:20:49:11:b2:ad:ed:dc:af:b1:ef:9f:b0:cf:
9c:97:3f:12:db:53:34:05:74:e5:51:90:c5:c2:3c:ee:69:ab:
c5:02:81:4d:87:65:31:86:e1:fe:60:dd:24:9d:17:7f:43:51:
69:09:f0:57:aa:31:1b:46:a1:16:4c:ad:f9:46:e3:f0:fe:81:
a2:e9:f7:84:02:96:a3:36:4b:37:81:04:fb:15:86:52:f5:fd:
68:3b:8a:63:f8:b9:f8:ab:d7:fe:b2:00:53:f5:19:33:f7:a9:
51:45:8c:7e:9a:97:ec:4e:48:e6:73:e2:3e:69:a5:8e:5d:b5:
29:0e:df:0e:d7:15:7d:34:0e:73:f5:dc:79:92:11:fc:17:9d:
1c:8d:38:5c:d3:09:9a:fe:cc:ef:8b:34:0a:03:2c:0f:4d:d8:
79:7f:0b:d6:51:bb:fa:0b:e8:58:27:aa:1a:29:55:88:ef:eb:
15:82:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:20 2026 by rpki-client