Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E41YbGICNZopiaGSv4NJNGpnhbk.roa
File: E41YbGICNZopiaGSv4NJNGpnhbk.roa (raw, json)
Hash identifier: 5ZK5UvITDieCrBChWiUH4f9dKIratLXRsxf7UH1cJQE=
Subject key identifier: 13:8D:58:6C:62:02:35:9A:29:89:A1:92:BF:83:49:34:6A:67:85:B9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A134F14C8A2BBE3634D14B12564799D018
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E41YbGICNZopiaGSv4NJNGpnhbk.roa
Signing time: Tue 13 Oct 2026 11:06:31 +0000
ROA not before: Tue 13 Oct 2026 11:06:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.175.161.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
2a02:2fc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:f1:4c:8a:2b:be:36:34:d1:4b:12:56:47:99:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 11:06:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138d586c6202359a2989a192bf8349346a6785b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:dd:6f:45:47:d4:46:6a:e8:15:15:60:d8:
84:7c:56:3f:38:5f:4e:76:ba:f7:0d:c3:70:25:45:
c6:c2:28:8d:9e:cd:15:e2:50:8e:fc:1e:2a:8a:a2:
98:be:7f:68:a8:09:7d:c8:ea:8a:42:8e:93:4c:f3:
9c:2d:47:0c:b0:a2:ba:79:09:0c:33:74:2d:bb:f6:
bd:04:2a:8b:09:6b:a2:02:b0:05:e2:53:ff:19:5d:
82:63:bf:db:5d:e7:22:57:a1:3e:d8:6b:83:62:c5:
9a:8d:20:93:58:96:da:b7:c5:84:98:77:f1:68:5a:
11:fa:36:fb:aa:9a:8f:f2:f7:d8:e9:11:49:28:c1:
fb:2f:11:29:a3:de:52:95:df:43:31:69:ec:33:21:
40:4b:80:f5:81:96:0e:63:58:45:24:c7:13:4c:e0:
3b:0d:2b:09:a0:a7:43:26:95:4a:70:13:05:7e:a1:
03:7f:a3:d3:dc:b1:da:81:94:32:98:2f:97:59:d2:
a7:b8:11:72:f5:c3:fc:40:90:5b:6c:a0:7a:7a:bc:
1d:2b:05:c4:ec:e4:ba:a3:d6:f2:d1:68:86:4e:72:
cf:1f:97:7c:bd:ae:3b:41:01:5d:6f:75:4b:12:e8:
6c:0a:83:fc:46:bb:89:1e:cc:d2:7d:4a:3e:ae:3f:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:58:6C:62:02:35:9A:29:89:A1:92:BF:83:49:34:6A:67:85:B9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E41YbGICNZopiaGSv4NJNGpnhbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.161.0/24
5.231.70.0/24
77.90.22.0/24
IPv6:
2a02:2fc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
50:7f:44:0d:2e:12:17:e3:77:c6:69:2d:cb:a3:17:00:7a:31:
ae:bd:6e:19:eb:e8:3d:b9:6d:52:e7:bc:6f:16:89:a2:36:d3:
5f:7c:7c:fd:1e:4e:f9:dd:a9:30:ae:95:8d:57:b6:ab:2f:d6:
e1:d1:3f:c3:44:21:53:46:7c:c1:57:86:89:5c:e4:bf:f6:c7:
e1:04:72:52:ad:05:21:46:4b:28:e7:a5:f4:e0:58:05:a1:b1:
f6:07:67:2b:f9:fc:f2:9b:96:57:66:a1:e7:58:dd:ac:e7:5a:
41:f3:c6:3e:17:ea:c8:0f:ff:34:b3:9e:51:82:b1:81:87:a3:
9d:9b:f8:93:a0:5b:ca:d6:f4:c2:7a:a8:54:87:a5:62:54:52:
9e:66:cc:d9:99:4a:cd:a5:9d:9b:e1:8c:01:8d:87:e1:5a:ef:
16:4c:61:64:40:c6:4e:65:66:40:58:e8:66:43:06:ed:64:13:
81:74:94:36:ef:88:41:c5:08:2d:ea:33:33:55:7a:4e:ed:2c:
a1:dd:8c:4e:ac:77:d0:de:34:85:d7:86:71:f9:5e:46:1d:82:
bb:e3:4b:81:9a:1e:be:fd:e5:bc:4c:64:a3:6a:bb:4a:e5:53:
b0:cc:d1:8e:cb:f0:9a:31:86:cf:10:ff:85:af:27:03:05:00:
d9:bc:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:24 2026 by rpki-client