Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IbbvYQbIF_gKyNQg6J3g0g4qqII.roa
File: IbbvYQbIF_gKyNQg6J3g0g4qqII.roa (raw, json)
Hash identifier: ZCw21F3DTIV92ovtZj88x1DKXcmDmw5N6P/GoelKBpI=
Subject key identifier: 21:B6:EF:61:06:C8:17:F8:0A:C8:D4:20:E8:9D:E0:D2:0E:2A:A8:82
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A033EDF7A1C963DA71B6DF761DB3AC0680
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IbbvYQbIF_gKyNQg6J3g0g4qqII.roa
Signing time: Mon 24 Aug 2026 13:20:28 +0000
ROA not before: Mon 24 Aug 2026 13:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399515
IP address blocks: 5.83.155.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:ed:f7:a1:c9:63:da:71:b6:df:76:1d:b3:ac:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 13:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21b6ef6106c817f80ac8d420e89de0d20e2aa882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:2f:62:db:49:bb:5b:cf:7a:93:72:c4:64:
ce:21:68:8f:52:ab:88:34:b9:78:aa:89:68:dd:42:
74:c7:3a:ca:f3:fa:e0:19:eb:b2:a9:57:92:1a:5d:
70:a4:cb:10:f7:d4:25:02:be:45:42:68:c5:8c:6f:
07:19:6d:3f:1a:cc:e6:29:e5:20:70:cc:bb:b5:3e:
57:84:42:91:3c:38:ab:4e:90:7b:d2:97:b8:21:6d:
f5:f9:dc:10:a4:3b:01:f4:ce:16:35:21:1b:90:3e:
a2:6c:e8:f4:3f:66:fa:39:ca:c3:a0:63:4b:7f:24:
8b:e7:16:11:18:11:63:ef:53:1f:cc:35:19:a0:a5:
b1:7b:f0:7f:4f:54:b3:85:ad:64:ae:25:a2:42:fa:
75:9c:06:48:b4:b7:a2:8f:12:0f:b9:80:9e:d7:ad:
42:e1:b9:7a:2a:0f:a0:0f:57:51:58:72:93:bd:99:
82:aa:bc:47:df:8e:45:93:44:8e:c7:aa:f8:38:2a:
f3:56:66:4c:0d:9e:8d:66:d1:cb:ae:8b:fe:9f:18:
7a:fc:48:24:d8:ee:7e:89:c1:e9:94:0b:cc:14:0d:
2e:3f:c6:4c:19:89:6b:66:40:dc:53:58:e4:42:b7:
14:3b:56:4c:17:75:b6:21:41:09:73:37:3f:47:1e:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:EF:61:06:C8:17:F8:0A:C8:D4:20:E8:9D:E0:D2:0E:2A:A8:82
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IbbvYQbIF_gKyNQg6J3g0g4qqII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.155.0/24
5.175.204.0/24
Signature Algorithm: sha256WithRSAEncryption
65:55:d5:40:19:4e:0a:50:e2:0d:87:89:23:97:7a:b2:f5:75:
4b:58:48:9d:a1:21:b3:2c:63:de:1f:19:af:5a:64:a8:b9:08:
0f:0b:aa:88:23:9b:f4:51:f2:f6:36:c5:f9:2f:be:bc:82:24:
9d:fe:a7:89:e1:59:d5:4c:79:eb:ae:78:94:3b:51:f0:13:6c:
da:1a:7d:61:47:4d:30:5b:d0:16:6b:1e:82:87:26:0b:3c:9f:
07:0f:38:49:57:16:4f:1b:b8:4e:a3:55:7f:d0:5d:f0:8e:de:
53:78:ec:41:84:d1:c8:fc:30:21:dc:80:55:99:fb:27:cc:f1:
c5:5c:0b:fb:22:3f:7a:3c:c1:1d:73:44:e0:16:7a:e5:90:72:
38:e6:08:d3:e3:e5:74:a5:ae:d5:1d:13:c4:96:8e:fc:ad:93:
9b:93:3f:92:92:98:61:58:6c:ae:11:7e:b9:b6:6d:82:23:88:
2e:a1:0b:e3:99:cc:f7:cb:fe:ff:df:32:b3:de:c6:2e:bc:f5:
b5:4c:df:c2:9e:c9:ea:06:d5:66:e8:06:5f:e5:06:aa:e7:9c:
73:ca:bb:c9:03:6c:e3:d5:e5:f0:81:9f:96:51:aa:8a:e6:ee:
49:18:d5:59:37:9b:7f:96:76:f3:03:b1:2e:c4:b4:62:70:cd:
82:77:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:40 2026 by rpki-client