Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L70TYLrSFbJg2Glv8CExAC6mM2M.roa
File: L70TYLrSFbJg2Glv8CExAC6mM2M.roa (raw, json)
Hash identifier: h53u3+an1XrL15mhakck2XlzpJ7fRFGRCBCmLJiadUA=
Subject key identifier: 2F:BD:13:60:BA:D2:15:B2:60:D8:69:6F:F0:21:31:00:2E:A6:33:63
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FE76E46F7B71D77FE26FB0C459E338571
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L70TYLrSFbJg2Glv8CExAC6mM2M.roa
Signing time: Sun 09 Aug 2026 16:49:51 +0000
ROA not before: Sun 09 Aug 2026 16:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 23:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:6e:46:f7:b7:1d:77:fe:26:fb:0c:45:9e:33:85:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 9 16:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fbd1360bad215b260d8696ff02131002ea63363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:f5:13:d0:4f:ef:2d:8c:cf:d1:88:ea:27:
45:54:a3:68:00:74:04:40:70:68:f9:69:3d:09:53:
da:da:0f:fe:5b:15:2b:11:aa:67:5a:b6:af:0e:ab:
2a:1c:9c:7d:a0:07:23:ff:ca:3b:57:e6:7f:97:29:
89:67:35:df:68:8e:2f:aa:0a:b1:51:c5:10:37:b4:
12:20:c2:ea:f2:53:0c:5f:99:a0:cb:f9:47:8b:6f:
0d:d8:9e:0f:c9:f1:1d:1f:fe:63:37:a4:65:fb:ad:
25:9c:f8:39:c7:6b:45:15:98:04:a8:98:08:3b:74:
1c:e1:cc:a8:46:9b:56:fe:d1:9e:37:ba:c9:58:7a:
7e:c0:d7:e6:04:d2:e5:c0:43:fc:9f:8f:e6:98:02:
0d:16:ef:97:30:08:a8:28:b1:9d:c5:1a:05:50:dc:
bc:d8:06:84:b8:6a:e0:9f:18:77:d0:3b:14:74:b3:
29:aa:3e:0d:00:d8:fc:00:09:7e:96:bd:e3:77:ed:
a0:95:7a:c3:fb:e2:81:97:9c:1e:13:26:03:54:29:
62:ea:10:61:3b:13:ab:57:cb:94:c9:5b:7c:e9:f1:
81:ee:ef:c7:c5:d5:ee:57:4e:a2:f5:c8:f7:75:c2:
cd:c6:8b:84:c6:a2:18:de:8e:20:19:09:f1:69:30:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:13:60:BA:D2:15:B2:60:D8:69:6F:F0:21:31:00:2E:A6:33:63
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L70TYLrSFbJg2Glv8CExAC6mM2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.212.0/24
5.231.110.0/24
5.231.124.0/24
5.231.241.0/24
89.106.87.0/24
89.144.40.0/24
94.249.158.0/24
94.249.181.0/24
94.249.183.0/24
94.249.226.0/24
94.249.238.0/24
94.249.243.0/24
178.18.149.0/24
178.18.152.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3c:c7:74:b0:c7:29:58:49:a2:71:ac:e5:1a:d7:02:44:a9:
e0:7d:17:d9:77:9f:2e:7f:cb:c9:77:db:98:06:d2:a4:a1:91:
d1:56:e5:eb:61:56:f8:bb:13:76:2f:0d:dc:50:7b:37:a5:55:
32:14:d5:00:f4:d1:ec:38:f6:55:c8:9a:03:31:c3:dd:f5:b6:
3e:5b:08:bd:5c:40:39:65:1c:cc:6a:1b:f4:5b:11:dc:6b:93:
84:a3:ee:2e:14:8b:3f:35:22:6c:f1:99:29:70:6a:cb:a1:f4:
62:ff:b7:ee:17:07:aa:10:0b:21:b8:fa:5a:2d:e7:6e:4b:5a:
7b:f6:31:8d:b5:0f:0c:c6:7b:4c:03:e6:d1:d5:49:c9:f0:1d:
cd:21:a0:14:8f:7f:c4:e8:f4:55:a0:95:aa:39:2a:59:61:7f:
53:01:d4:86:e4:78:79:55:f0:19:00:3c:c3:39:24:c7:33:10:
8d:96:8f:41:17:86:2b:1b:4a:e2:99:74:a5:95:2e:59:56:06:
0f:19:8e:eb:97:5d:99:98:b2:ac:09:a4:3a:81:2a:6d:02:a9:
59:cd:d7:9b:68:f1:e1:33:c2:f5:99:86:eb:de:06:6c:68:b0:
fb:68:e7:3f:c4:f8:9e:18:d3:e9:35:08:d0:90:a4:7d:c0:5e:
84:1c:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:22:29 2026 by rpki-client