Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FxVrqAFnF5NwJqqPvo1UTw3tijw.roa
File: FxVrqAFnF5NwJqqPvo1UTw3tijw.roa (raw, json)
Hash identifier: I/WBPRgEa/DYcU8R3KmZmalfH0pZQlc+n5PUqNoUO3c=
Subject key identifier: 17:15:6B:A8:01:67:17:93:70:26:AA:8F:BE:8D:54:4F:0D:ED:8A:3C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E8C4A6A43A385D2EE6A19D8AFB8C0B735
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FxVrqAFnF5NwJqqPvo1UTw3tijw.roa
Signing time: Wed 03 Jun 2026 07:02:27 +0000
ROA not before: Wed 03 Jun 2026 07:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.64.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:4a:6a:43:a3:85:d2:ee:6a:19:d8:af:b8:c0:b7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 3 07:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17156ba8016717937026aa8fbe8d544f0ded8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:1d:24:2b:d4:b8:a5:20:38:1c:a0:c9:cc:
50:fc:f7:d9:34:b7:34:d1:e1:20:33:2a:a5:dc:2b:
9a:49:08:53:86:21:bb:1d:57:dd:df:a8:5a:52:9a:
1d:13:db:84:d4:a7:f7:be:d2:57:f4:e7:50:20:ca:
79:c3:e9:0f:c6:40:e5:c8:78:83:66:56:07:b6:fc:
7f:6c:8e:9c:81:b2:3d:75:61:13:b4:c0:a1:d1:9c:
05:0e:30:d7:65:b6:76:e9:2d:f0:32:f2:76:af:39:
f0:a6:9d:0b:2e:50:42:4b:b3:20:67:d8:b6:8e:10:
91:5a:1c:df:5d:0e:ca:ed:6b:f4:a2:e1:cf:e0:96:
16:25:e6:09:b2:a5:66:6c:fe:17:b5:71:46:77:76:
57:7a:4d:bf:e7:85:67:b9:9e:40:3d:86:de:b7:37:
4c:e7:15:95:a2:e7:f2:a6:3f:54:09:10:07:b7:99:
85:76:4e:b1:47:aa:c2:cb:67:69:3d:8c:db:13:ca:
38:7b:b7:58:48:c9:15:39:24:a7:4f:4f:58:1c:02:
e9:fe:0b:87:35:93:5f:5a:c0:4a:a8:f3:0e:6d:3c:
a2:14:3b:0e:c3:06:42:02:23:12:ae:3c:b3:d2:51:
f6:2b:61:77:b4:3b:af:eb:09:89:ad:4e:8a:d6:6e:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:6B:A8:01:67:17:93:70:26:AA:8F:BE:8D:54:4F:0D:ED:8A:3C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FxVrqAFnF5NwJqqPvo1UTw3tijw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.175.220.0/24
77.90.3.0/24
77.90.28.0/24
85.93.23.0/24
89.106.64.0/24
89.144.33.0/24
89.144.42.0/24
94.103.172.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e0:d6:b1:17:df:19:8e:0a:e2:82:06:e3:a3:9a:82:f1:ac:
93:5f:39:5b:3b:d4:81:5c:c9:7f:0b:e4:ff:44:1c:df:de:2b:
ee:4a:62:f3:10:90:7d:11:6b:1f:4b:2b:c0:ff:7d:00:19:83:
48:75:81:cd:c5:7e:9b:ca:5a:39:33:24:2d:53:ce:ba:12:7f:
ab:10:0c:3b:41:de:9a:9e:68:2f:83:3b:53:89:9b:98:2b:db:
17:93:9d:61:0b:87:42:c1:9a:f5:b8:c9:08:23:44:08:38:3f:
02:fa:fb:06:22:93:41:fd:32:9f:d2:e4:ae:d7:eb:3e:eb:12:
58:f2:1a:36:45:90:ef:0c:16:01:16:66:e0:fb:43:70:eb:7f:
70:56:89:e5:ef:f4:3e:fd:06:3e:d6:0a:57:2f:05:f3:d7:9c:
b4:d3:9a:fd:da:b2:c9:99:59:c1:3e:52:93:c7:b9:78:48:e6:
59:d4:79:dd:1d:52:c5:ff:e0:97:74:ec:f8:b9:51:ba:76:ec:
75:43:66:68:1d:23:d1:d6:2a:60:3b:53:ea:62:95:38:71:d7:
ce:94:7f:69:45:fe:24:16:33:ad:67:e6:c7:3f:5c:73:57:9c:
bc:7c:f9:a0:fb:23:47:a0:61:8d:22:cc:e1:32:ec:c3:c1:50:
b7:52:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:22 2026 by rpki-client