Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KA0GRhKpdL2L_UknmjGTRl8oEic.roa
File: KA0GRhKpdL2L_UknmjGTRl8oEic.roa (raw, json)
Hash identifier: 1XuESMkq0g7Tvai3Oi1aOowK09cnVV301+gWBtyl3L8=
Subject key identifier: 28:0D:06:46:12:A9:74:BD:8B:FD:49:27:9A:31:93:46:5F:28:12:27
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F221EAC44D7E63F0791AB757620C2C70B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KA0GRhKpdL2L_UknmjGTRl8oEic.roa
Signing time: Thu 02 Jul 2026 09:17:43 +0000
ROA not before: Thu 02 Jul 2026 09:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:1e:ac:44:d7:e6:3f:07:91:ab:75:76:20:c2:c7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 2 09:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=280d064612a974bd8bfd49279a3193465f281227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:92:67:9d:c1:6c:d1:cf:ee:3d:b6:85:ea:
80:1c:e0:35:2e:4d:d7:f5:88:f4:d5:cc:ac:2a:56:
b8:23:86:ef:e3:90:a0:30:cd:55:1c:62:35:22:a5:
03:db:dd:4a:5b:f9:19:30:44:b8:fe:f2:20:83:a4:
81:af:f0:96:b8:73:ec:08:49:e8:85:0b:b4:7a:4a:
1c:a3:72:1c:af:5f:38:e9:22:6b:8d:c8:ff:f7:70:
b6:04:b6:8c:89:d2:d0:e9:1a:69:ce:a9:42:f0:96:
36:bb:2c:13:0b:f7:42:fe:92:be:f5:c6:ff:42:53:
b2:9e:61:5e:a5:b6:d0:0b:66:e9:df:bc:53:51:f3:
8e:62:bc:23:60:9e:eb:a2:79:e3:d1:b0:a3:04:78:
53:83:a2:34:23:26:4e:d8:7b:77:c4:15:5c:d8:67:
de:eb:d4:b9:a4:61:e8:f5:3f:e6:2f:e6:81:f5:49:
12:89:7c:03:f6:8d:ef:a5:e0:30:92:ea:2e:31:2b:
8b:91:a0:f3:84:14:ee:3d:99:e2:2c:80:9c:3e:ce:
5f:39:1d:44:9c:59:fb:79:7d:a1:fc:50:1e:52:77:
c7:1a:fa:62:c3:d1:7d:93:9f:fc:32:b8:4f:35:ab:
a7:2a:ed:ff:e4:8b:c2:79:55:6b:b2:98:02:08:23:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:06:46:12:A9:74:BD:8B:FD:49:27:9A:31:93:46:5F:28:12:27
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KA0GRhKpdL2L_UknmjGTRl8oEic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.231.107.0/24
89.106.74.0/24
Signature Algorithm: sha256WithRSAEncryption
49:58:d8:59:6e:a1:a7:38:ed:3f:5b:9d:2b:ff:87:86:60:9d:
20:82:78:eb:1f:60:9d:c0:cf:69:c1:b1:2b:bf:b4:c4:b6:77:
16:ba:d8:97:51:42:6f:57:9c:78:d1:e0:66:36:19:09:fa:8f:
23:f8:66:41:15:5e:be:e9:fa:fb:c9:77:78:94:ee:37:fc:49:
5d:b3:9e:e1:78:bc:15:0e:79:1b:8b:57:20:fe:b0:d7:cf:9c:
3e:db:96:9b:5c:32:02:06:20:b4:3c:a3:4f:28:b9:67:67:32:
95:fe:1e:0e:36:f6:59:5b:3a:cb:d3:76:5f:80:19:97:23:9c:
91:d2:94:95:bd:8c:1c:f3:63:e0:aa:e2:0a:be:84:69:fc:34:
4a:e3:37:bb:16:af:06:60:a6:20:99:d7:f0:38:5f:bf:c4:61:
c3:cc:f7:bb:7c:31:2c:52:51:e4:42:31:c0:d4:b4:33:50:bf:
f2:cb:bc:7a:e5:60:f7:0c:2c:19:13:f8:31:24:5d:92:62:5a:
ef:54:09:23:15:31:bc:70:92:98:6c:52:40:12:1b:ad:86:20:
66:06:e7:67:e4:59:67:cc:c0:08:aa:c2:70:ec:05:34:ac:e2:
f2:f7:c9:92:74:29:38:bd:d2:32:15:cf:ad:bf:08:7c:32:6e:
44:ae:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client