Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E-4cAxJUN8PUjGyJBvc2WYL4QkA.roa
File: E-4cAxJUN8PUjGyJBvc2WYL4QkA.roa (raw, json)
Hash identifier: gaUVLSKO42HughmWRCI4z7ldKp7A2V/ASkGQXGRQaDg=
Subject key identifier: 13:EE:1C:03:12:54:37:C3:D4:8C:6C:89:06:F7:36:59:82:F8:42:40
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F5A21AD9AC1E3B0D0AAACC70F77AC4091
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E-4cAxJUN8PUjGyJBvc2WYL4QkA.roa
Signing time: Mon 13 Jul 2026 06:19:44 +0000
ROA not before: Mon 13 Jul 2026 06:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.20.0/23 maxlen: 23
5.231.20.0/24 maxlen: 24
5.231.21.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:21:ad:9a:c1:e3:b0:d0:aa:ac:c7:0f:77:ac:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 13 06:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ee1c03125437c3d48c6c8906f7365982f84240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:7b:3f:20:31:e9:72:f4:0a:e1:fe:29:21:
d8:8b:90:c4:69:58:40:b6:a9:f0:c3:5e:be:ab:d2:
45:58:17:9d:95:3b:53:c9:ca:ee:3a:a5:3f:78:35:
b5:5c:98:dc:ef:fd:50:37:53:7b:3a:b9:a1:5b:0d:
19:1a:c9:4f:69:08:e1:88:82:62:f5:a5:23:78:3e:
4c:bb:f6:5f:64:e2:03:d1:5b:0f:10:93:6e:e4:04:
36:e8:72:27:56:54:4d:74:7d:be:9e:24:af:c5:87:
e5:6d:4f:9f:c1:16:54:02:59:b4:b6:71:7d:ed:d6:
3c:9b:3c:52:fd:19:47:c5:13:ba:5e:16:42:0f:7d:
48:72:f0:4b:2f:31:d1:14:6b:c3:58:1e:71:97:6b:
9a:67:0c:1e:59:98:82:ed:bf:77:35:1c:fc:f6:a4:
c0:99:42:c9:79:f7:c7:b1:38:be:88:80:33:c1:af:
f8:07:1b:a2:35:7e:a6:8e:e8:0b:3d:df:fd:68:66:
c2:fc:cf:57:b5:e8:d7:6b:39:7e:c5:7d:17:74:90:
a2:21:10:85:b8:77:0f:19:d7:b4:06:67:31:e8:23:
95:ae:cb:1f:9a:34:33:12:ba:9c:ba:5c:8d:7f:10:
fe:cc:87:32:65:17:1a:71:6e:4a:13:59:f3:a2:b9:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:1C:03:12:54:37:C3:D4:8C:6C:89:06:F7:36:59:82:F8:42:40
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E-4cAxJUN8PUjGyJBvc2WYL4QkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.20.0/23
5.231.30.0/24
5.231.47.0/24
77.90.37.0/24
89.144.31.0/24
94.103.164.0/24
94.249.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:82:47:68:2b:a9:43:82:0d:65:1b:03:b2:2b:66:b3:62:28:
9f:05:49:9d:be:a5:91:29:3b:61:05:f7:7b:74:49:1b:d4:6a:
1d:88:2b:70:49:ce:f1:6f:d5:2a:56:75:4a:2b:a4:0d:70:d8:
07:33:22:9f:12:0a:8c:18:8a:32:1e:f0:94:30:aa:96:3f:0e:
4c:e8:aa:bd:71:bb:b5:d5:e6:a6:6d:a6:19:25:bc:7d:04:58:
45:7e:87:76:2e:06:8a:d8:59:2c:eb:b3:1c:ff:6e:fd:10:c2:
f2:b5:07:ef:c1:9a:4b:3e:9f:2b:f0:6d:85:d0:69:8a:10:40:
96:76:34:c5:f6:b2:7d:97:43:29:bc:c5:e4:32:e1:92:cf:17:
d3:d0:08:33:1b:ca:20:71:8f:a3:d7:bd:ca:90:ab:cf:d5:2e:
df:a7:dd:74:19:8d:37:36:b8:cc:00:25:1c:07:55:cf:f0:1a:
d2:0c:b1:d9:8a:62:46:e6:a6:d1:e3:62:25:75:e6:a6:60:97:
6e:14:c9:ea:1e:12:f3:84:91:f8:fd:fe:6b:c9:98:11:ea:d1:
33:a6:f7:5d:e4:86:c5:e2:09:5b:34:50:0a:74:45:f1:56:d4:
8e:aa:eb:fe:42:5d:a9:fe:64:f6:8b:33:be:39:d8:e7:6f:34:
2d:4c:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:43 2026 by rpki-client