Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AvcWNTdiZyO1iwIES1dmNqD6qDo.roa
File: AvcWNTdiZyO1iwIES1dmNqD6qDo.roa (raw, json)
Hash identifier: i2cCqdRVe0UHkZsFAtv1L1ekeTrTct3viC5ADN+qcFw=
Subject key identifier: 02:F7:16:35:37:62:67:23:B5:8B:02:04:4B:57:66:36:A0:FA:A8:3A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F4598B7E4F4FDB82BA3394255909AC7D5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AvcWNTdiZyO1iwIES1dmNqD6qDo.roa
Signing time: Thu 09 Jul 2026 06:37:44 +0000
ROA not before: Thu 09 Jul 2026 06:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
77.90.63.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
217.69.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:98:b7:e4:f4:fd:b8:2b:a3:39:42:55:90:9a:c7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 9 06:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02f7163537626723b58b02044b576636a0faa83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:ca:06:90:5e:4a:f8:01:a4:8f:ed:88:7b:
c7:76:16:39:25:33:96:ca:65:ab:3b:28:dd:c7:59:
f8:7d:4e:c4:05:d4:ac:7a:c6:b6:94:16:df:f5:12:
5e:e9:ec:e1:01:39:22:55:ea:47:bc:b0:00:87:6e:
e7:34:09:b5:4f:26:2a:f1:2c:2a:eb:a2:4d:99:3a:
fb:86:13:ec:00:76:2a:62:1b:6b:60:97:2a:68:32:
07:f4:af:24:d9:94:01:ee:36:aa:ab:7b:ed:5b:fa:
cb:66:cd:d0:83:48:6e:4a:1d:ad:ee:81:61:24:90:
cf:65:9b:b5:a6:02:e9:98:43:c4:ca:36:79:98:aa:
5e:c6:b4:c2:a1:4b:df:df:55:f9:25:07:09:a4:ac:
da:17:bc:1c:eb:e1:78:02:1e:28:ce:84:8a:28:ff:
e3:7e:8b:bf:57:8b:29:de:f4:4d:03:98:fa:8c:bf:
03:11:25:90:c4:8a:e6:6b:25:2a:6d:d1:55:fe:e1:
1d:91:74:51:40:08:02:1c:6f:0d:9d:ad:f5:f1:78:
73:3f:53:ef:da:82:ef:4e:a2:38:3c:5e:2c:af:d9:
13:39:92:18:8d:92:41:0a:02:42:92:c8:df:4a:4e:
28:30:b6:e8:e6:db:77:63:57:f8:e0:bb:8d:d9:a5:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:16:35:37:62:67:23:B5:8B:02:04:4B:57:66:36:A0:FA:A8:3A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AvcWNTdiZyO1iwIES1dmNqD6qDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.118.0/23
5.231.123.0/24
77.90.15.0/24
77.90.52.0/24
77.90.60.0/23
77.90.63.0/24
94.249.184.0/24
94.249.186.0-94.249.188.255
94.249.198.0/24
185.129.84.0/22
217.69.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:31:14:fb:6c:73:03:56:a8:c4:5a:c5:61:4e:70:fc:3a:ae:
ff:87:af:5a:43:e4:56:33:48:7b:ab:17:22:e9:1e:37:67:de:
c1:a2:f0:2e:49:ca:e1:c6:9b:db:3a:46:ef:af:57:52:f7:07:
2e:15:c6:49:a7:f8:90:18:05:9c:9d:d5:9d:77:1d:a3:81:e5:
c2:d3:0e:a5:4a:d6:7c:67:ef:ad:78:55:25:5a:f4:00:9b:8e:
94:ff:49:00:13:14:f2:8e:d0:8e:ac:64:dc:2e:59:7a:ea:97:
06:ac:05:45:77:10:ee:c3:4c:c6:af:4b:08:ac:0f:f2:63:89:
51:cd:b1:e9:4b:f4:6b:47:5b:40:e3:0b:27:6c:4c:32:90:24:
d7:dc:d4:46:47:65:05:f6:94:d4:75:22:79:5f:2c:49:54:61:
5e:a5:26:5f:8f:c5:cc:17:99:e8:f1:77:f2:10:a7:fe:56:2e:
75:90:13:61:0d:56:4c:e2:9f:a2:3f:b8:23:a2:9c:83:9d:79:
52:36:67:70:97:dd:bb:5a:dc:27:f2:b1:9f:ca:5a:1c:8c:5b:
bc:66:d2:9b:99:d8:ca:89:08:86:b6:13:ee:d7:d8:8d:43:53:
2c:f3:e5:b7:bc:c4:0c:e8:ae:0a:87:d4:f3:44:0c:ed:b8:a0:
82:e7:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:02 2026 by rpki-client