Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/APGcUJDFCJp19D5RUFYHTBwWvow.roa
File: APGcUJDFCJp19D5RUFYHTBwWvow.roa (raw, json)
Hash identifier: LBOl6DsowWUvVcBsCqY52AtnawIQQ/m6AUgVrkABZZQ=
Subject key identifier: 00:F1:9C:50:90:C5:08:9A:75:F4:3E:51:50:56:07:4C:1C:16:BE:8C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1567E49E97F28236265AF97458301041C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/APGcUJDFCJp19D5RUFYHTBwWvow.roa
Signing time: Mon 19 Oct 2026 23:27:59 +0000
ROA not before: Mon 19 Oct 2026 23:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48314
IP address blocks: 5.175.233.0/24 maxlen: 24
77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.51.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
94.249.193.0/24 maxlen: 24
185.47.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:7e:49:e9:7f:28:23:62:65:af:97:45:83:01:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 23:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00f19c5090c5089a75f43e515056074c1c16be8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:29:a4:b1:a2:e7:b4:be:e7:62:d9:52:04:
4e:5b:3e:03:34:46:41:2e:a2:52:ab:d0:5d:52:a5:
44:ca:96:1e:91:0a:44:61:1a:6f:c3:c0:92:b1:3e:
b5:16:bf:cb:bf:b9:71:a2:00:a9:90:6e:9b:11:8b:
65:62:b0:5f:09:0d:30:30:fe:c7:9d:05:84:f1:cf:
94:ea:a9:2d:64:fc:2a:ac:ef:17:55:89:b3:f7:78:
5f:8a:12:be:fc:f9:5e:e5:f5:97:55:40:6f:ee:6f:
98:58:05:79:b0:96:c2:12:28:06:52:c8:d4:46:24:
35:90:de:b7:d2:95:95:72:36:ee:2b:e3:54:63:ce:
ea:4c:af:54:00:10:3c:da:81:ab:b6:0b:3c:54:f4:
0a:82:ad:e2:97:c6:c2:08:fe:54:42:df:9a:1b:38:
41:e1:dd:eb:6a:70:2a:70:c8:34:ca:4b:b8:e4:a5:
e0:a1:a3:2e:2c:96:26:91:bb:b9:82:88:01:61:18:
fb:0d:ef:67:71:da:17:01:80:86:e2:03:52:4a:39:
72:8a:98:74:d5:41:2e:9b:ea:52:81:1b:ad:c7:99:
39:a4:7d:99:58:8f:e4:97:c8:ee:b5:ac:5f:16:37:
d9:23:48:dd:c0:9c:b6:d8:66:ee:5f:4b:6b:bf:f8:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F1:9C:50:90:C5:08:9A:75:F4:3E:51:50:56:07:4C:1C:16:BE:8C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/APGcUJDFCJp19D5RUFYHTBwWvow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.233.0/24
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.18.0/24
77.90.51.0/24
85.93.15.0/24
94.249.193.0/24
185.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
85:04:f0:ef:df:23:2f:d8:a2:69:4f:41:9d:f6:c7:15:43:b8:
f1:b5:11:03:2c:6c:8c:f0:0d:44:e4:32:c7:b9:a9:eb:e7:e8:
2c:49:d0:a1:83:fc:d1:ea:7d:fa:e2:3b:9c:90:2f:71:a3:d2:
88:63:e8:2f:15:90:44:dd:c4:31:86:f5:d9:e5:e0:1b:02:27:
63:3c:bc:d8:bc:33:69:e5:cf:0b:79:4f:c6:b1:30:14:4f:3e:
6a:79:98:25:d7:7a:97:1f:21:cd:e1:cf:01:cb:dc:f2:79:fb:
e4:ad:17:c5:5c:70:7a:36:dc:f6:8d:0d:bd:74:b3:6d:a7:8c:
a2:a0:30:d4:e2:6b:20:de:59:d4:ab:8b:78:ee:18:6a:aa:b6:
4e:1a:6e:08:ca:d2:8e:ec:22:b1:b8:07:6b:03:2c:4c:1b:84:
eb:3d:6f:a5:8a:00:bd:5f:b8:f7:fb:28:2c:ae:9c:ed:65:77:
a5:d7:2e:ce:76:8f:70:24:b2:73:f2:47:e7:20:6b:5e:ad:e9:
2f:af:3f:77:47:9e:b7:c2:c4:b4:d2:9c:97:d1:94:43:25:d3:
13:de:f9:59:9d:6d:e5:3a:f8:94:a9:97:94:ed:94:8a:e6:94:
bb:36:34:94:0f:be:bd:59:0f:3e:e5:e7:e2:78:35:ab:1d:9a:
a8:8b:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:18 2026 by rpki-client