Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DEHQOtGS7lu8oLRwIvdMhizjsC8.roa
File: DEHQOtGS7lu8oLRwIvdMhizjsC8.roa (raw, json)
Hash identifier: 3AXwcxYr+GQecLRJPw0FO7y3ezIEP6hIEx23g+iz084=
Subject key identifier: 0C:41:D0:3A:D1:92:EE:5B:BC:A0:B4:70:22:F7:4C:86:2C:E3:B0:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CBD0FFF69BA6835E8980C8E2480524BAE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DEHQOtGS7lu8oLRwIvdMhizjsC8.roa
Signing time: Thu 05 Mar 2026 08:14:28 +0000
ROA not before: Thu 05 Mar 2026 08:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.175.162.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.187.0/24 maxlen: 24
5.175.225.0/24 maxlen: 24
5.230.9.0/24 maxlen: 24
5.231.23.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.144.1.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:0f:ff:69:ba:68:35:e8:98:0c:8e:24:80:52:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 5 08:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c41d03ad192ee5bbca0b47022f74c862ce3b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:f7:d0:f5:a2:b7:a3:a9:8e:64:0f:55:0e:
66:b3:8f:21:70:ff:de:07:3f:17:31:7b:2b:f3:0e:
c6:88:44:51:c7:99:88:10:22:d6:4a:12:69:9c:fc:
92:74:08:29:2d:dd:79:04:dc:ff:70:b6:8b:d6:f0:
f7:b1:71:5b:c0:f0:9f:42:1c:67:e2:ff:ee:d0:0a:
9f:42:d7:61:1d:ca:4e:39:d0:12:41:3b:29:22:34:
ce:c8:4c:8d:c3:7d:58:7f:04:5b:1f:d5:0d:03:14:
a9:20:b1:80:13:7c:94:35:55:9f:b8:72:70:e4:72:
e1:46:0f:4c:90:8a:55:33:75:9d:f0:c7:45:58:32:
39:47:7f:ea:64:19:af:d5:6c:08:32:4b:b8:bb:fe:
6c:98:bf:1d:de:88:80:f5:e8:fd:4a:42:0b:54:60:
c0:75:d3:2c:c0:91:7a:8c:b2:b2:12:58:c3:1d:e6:
88:42:c4:75:3c:46:32:0d:db:80:c0:ec:42:d0:eb:
27:01:66:80:52:db:22:46:b1:26:a0:1d:bb:b7:0e:
7d:5d:09:82:98:3f:98:2d:5b:f9:3f:3e:29:7c:2f:
a1:ea:4c:8d:f1:08:b3:f4:2d:d9:01:6b:15:70:6b:
bc:ba:b6:3a:c9:e4:da:32:a6:54:38:47:4d:79:51:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:D0:3A:D1:92:EE:5B:BC:A0:B4:70:22:F7:4C:86:2C:E3:B0:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DEHQOtGS7lu8oLRwIvdMhizjsC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.137.0/24
5.175.162.0/24
5.175.174.0/24
5.175.187.0/24
5.175.225.0/24
5.230.9.0/24
5.231.23.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
5.231.203.0/24
77.90.39.0/24
85.118.162.0/24
87.239.129.0/24
89.144.1.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.187.0/24
94.249.197.0-94.249.198.255
94.249.201.0/24
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:04:40:56:f5:74:60:0f:c6:be:1f:59:cd:37:53:7f:5c:17:
03:7f:21:c6:8e:c3:c8:99:a2:2f:d5:bf:b5:4f:fb:2a:e1:ac:
f0:82:eb:0f:03:c6:b6:17:da:46:cf:7f:4c:2b:8f:3a:af:f0:
84:ef:af:42:ee:3f:41:83:5a:3a:0a:a5:4e:b6:a5:a2:67:bb:
96:a6:59:e1:5f:56:a4:86:ab:a8:4e:2b:c5:95:71:bd:b3:cf:
43:0a:4a:c7:a4:99:13:36:1f:06:0f:f5:83:33:8c:8b:04:ba:
e3:a6:be:ac:a6:c7:56:3e:99:b3:16:7b:89:7d:b9:16:f6:f5:
0f:bf:30:81:d2:96:8b:26:37:88:c8:d5:2d:31:06:92:4f:f5:
6c:01:b6:ca:a6:82:fd:24:d3:de:f6:cb:e2:37:f2:9b:a5:ee:
0f:cc:51:61:3b:49:53:c5:05:37:60:c7:4d:84:1c:15:46:dd:
aa:a9:7c:be:0a:a9:ec:d3:e6:fe:15:b6:0b:85:64:66:4b:7d:
8c:47:ce:58:9b:b0:d7:d2:64:c0:dd:77:2d:7b:5a:60:8b:81:
3c:23:4e:c3:f1:36:9e:19:d9:5c:66:ad:0c:c8:b6:ce:e3:4e:
d2:71:2e:bc:c6:61:ea:62:b2:d9:c4:52:30:a6:bb:6b:f9:bf:
98:ce:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:03 2026 by rpki-client