Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DUhtdTID0IE28tvruAAth3ShNsk.roa
File: DUhtdTID0IE28tvruAAth3ShNsk.roa (raw, json)
Hash identifier: OZrhu2aeYPaENdp8TMo8iBZ7S5RUbmztrogHQ2JqBRs=
Subject key identifier: 0D:48:6D:75:32:03:D0:81:36:F2:DB:EB:B8:00:2D:87:74:A1:36:C9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A185041691AF7476E8B1E095F4EB681AA4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DUhtdTID0IE28tvruAAth3ShNsk.roa
Signing time: Thu 29 Oct 2026 00:16:40 +0000
ROA not before: Thu 29 Oct 2026 00:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36007
IP address blocks: 5.231.76.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:04:16:91:af:74:76:e8:b1:e0:95:f4:eb:68:1a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 29 00:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d486d753203d08136f2dbebb8002d8774a136c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:41:80:e1:e9:51:60:6b:ae:82:05:5f:b5:
94:99:ba:36:2d:fc:c0:05:77:d8:9e:a2:68:7e:7b:
c0:ea:3a:f4:06:37:03:d5:1d:d4:14:9e:8a:ad:51:
4a:83:6c:f7:14:f3:d9:b7:c0:2c:ac:b0:77:ed:62:
ed:af:d2:de:27:0b:6d:11:99:d3:c0:66:56:1d:02:
6a:82:ca:c5:da:2c:36:53:45:f5:e0:d3:50:36:ed:
14:d5:64:52:91:f0:75:7a:3c:c2:1a:e1:10:f3:5b:
80:44:bf:53:f6:16:2f:d2:d8:3a:68:fd:91:8e:60:
93:4a:df:d0:9d:82:f9:01:2b:6f:52:e4:8c:c0:18:
b7:14:29:28:b6:53:15:50:a7:b1:5a:fc:55:4a:b9:
af:f0:bb:41:3f:b3:fe:5e:7f:db:79:ff:8c:c8:90:
05:a4:de:86:33:12:88:50:0f:6b:16:83:0a:61:41:
b0:16:07:d0:d8:1a:3a:f1:9b:61:7b:70:a2:35:3f:
ea:04:43:07:b9:6b:66:56:ea:3f:3c:3e:7e:fc:b0:
d4:2c:09:c4:e8:93:be:38:03:4b:5f:1b:08:0d:27:
1d:45:03:de:b8:87:e4:c2:95:9f:a2:ef:66:58:13:
55:52:11:78:b9:a5:e9:e4:56:39:0f:da:fe:ac:f2:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:48:6D:75:32:03:D0:81:36:F2:DB:EB:B8:00:2D:87:74:A1:36:C9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DUhtdTID0IE28tvruAAth3ShNsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.76.0/24
89.106.90.0/24
89.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a8:92:eb:44:8d:09:df:85:62:70:d3:32:3c:d4:d6:1c:c2:
41:71:64:4c:d2:2f:1c:eb:bf:16:9b:dc:8c:36:3a:7a:bc:06:
18:b7:9b:f4:e1:04:32:24:70:af:7d:91:ed:f8:06:42:f3:23:
e8:59:4e:5b:4d:55:cb:a1:d5:6b:16:ea:03:c5:2f:e7:1b:40:
ba:d2:a9:4e:ea:fa:6c:c6:31:73:82:6e:5f:e8:bb:0c:52:4f:
34:fe:4c:95:f7:bc:4d:4f:f1:ca:92:d4:6f:83:65:5a:6f:74:
d2:fb:33:13:4b:c3:ba:d2:f3:29:f3:d9:81:a4:d8:a0:06:40:
1c:72:b9:68:43:24:66:44:86:43:a1:d8:3d:1e:0a:eb:34:2d:
fe:19:2f:ba:d4:3e:84:40:ea:07:1b:6a:0e:4e:8b:7b:8d:67:
88:88:91:f1:25:a1:a1:52:fa:ae:a5:2a:73:8e:f9:b4:cf:ff:
7d:37:36:83:8e:e6:6d:b4:c0:26:4b:30:1c:ed:c4:19:05:3c:
25:17:e7:27:de:a7:72:74:56:cb:73:e2:00:7c:7b:a5:fd:e1:
6d:b8:ed:0d:ff:d1:e0:10:52:de:08:43:bc:3e:79:47:90:c3:
e7:56:92:bb:52:40:6e:fe:5c:37:b5:d9:6e:7f:25:bd:f4:a1:
83:e3:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:28:10 2026 by rpki-client