Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M10wA7Cd54r1aqh00sK6XDCCHGk.roa
File: M10wA7Cd54r1aqh00sK6XDCCHGk.roa (raw, json)
Hash identifier: HJbM8gbOGYqH/+T0UVRC68UEi1tkJ/Hdv5YjKEAibhQ=
Subject key identifier: 33:5D:30:03:B0:9D:E7:8A:F5:6A:A8:74:D2:C2:BA:5C:30:82:1C:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0502D7C40E3E479EC56E92727BFC54BB6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M10wA7Cd54r1aqh00sK6XDCCHGk.roa
Signing time: Sun 30 Aug 2026 00:59:13 +0000
ROA not before: Sun 30 Aug 2026 00:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214783
IP address blocks: 5.231.69.0/24 maxlen: 24
89.106.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:2d:7c:40:e3:e4:79:ec:56:e9:27:27:bf:c5:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 30 00:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=335d3003b09de78af56aa874d2c2ba5c30821c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:6f:df:11:1f:f1:70:66:c4:1b:17:47:bc:
2e:2b:d8:28:7a:74:da:28:a7:2b:fa:c3:e0:58:4b:
00:26:f8:55:75:45:ba:5c:14:ce:28:1f:3c:2e:74:
df:b5:e9:15:e6:de:e8:64:8a:23:22:8a:b1:13:bd:
c6:25:33:7b:b9:9e:6c:c4:01:f5:23:8d:7a:80:dd:
85:cf:b5:2c:6c:e1:16:84:1f:5d:63:2b:8b:c0:34:
a8:68:c3:8c:56:a6:54:ae:0f:73:19:89:d4:48:84:
65:4c:fc:27:4b:ce:16:75:ee:06:ed:85:4e:5c:0e:
07:71:02:96:8b:74:3e:e1:98:2f:41:e6:98:cf:06:
95:b0:e9:d2:1e:a5:68:c9:ce:1a:2c:9d:b7:c4:d1:
b1:02:e2:4b:96:b6:cc:c3:63:17:72:32:e2:3f:44:
b4:1f:70:84:e1:0f:c4:98:2c:b2:e2:26:87:6a:eb:
9c:02:f7:f1:c4:bb:45:ad:b1:1b:6b:b9:22:1f:29:
b9:93:02:07:be:a2:bf:47:b4:bb:4f:24:de:0e:93:
0c:81:64:92:59:1d:40:d0:55:ca:61:e2:b0:43:32:
3c:00:34:ca:8d:a4:e7:86:89:4e:45:6f:1b:24:1a:
fc:18:f3:e5:18:15:a2:0b:98:98:fa:67:6f:40:c0:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:30:03:B0:9D:E7:8A:F5:6A:A8:74:D2:C2:BA:5C:30:82:1C:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M10wA7Cd54r1aqh00sK6XDCCHGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.69.0/24
89.106.79.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:9d:95:ef:5b:94:54:a2:80:5a:a2:e1:f0:6c:2f:7e:f0:17:
24:20:73:92:29:7f:6c:e3:c2:45:be:86:29:bc:09:d9:5f:a6:
0d:ca:85:16:ee:fc:f7:89:52:07:6c:94:6e:c4:ab:51:d7:48:
37:79:b7:0d:62:c1:d7:6e:c2:81:55:48:c1:72:e9:60:df:4e:
e3:08:d2:1c:2c:17:b2:2d:25:35:e7:e7:69:db:6c:a2:c6:47:
be:d1:5d:cc:7f:99:1d:4c:36:dd:bd:b7:7a:2e:27:4a:47:ce:
1b:4c:fb:5a:9c:c7:d1:7f:b3:e8:98:36:81:ec:9e:c4:10:98:
a9:4e:10:da:d8:da:39:72:c8:14:a1:f6:1d:84:78:2e:6a:7a:
78:ac:1f:99:28:e9:64:99:ee:83:cb:49:79:68:b9:a4:8b:be:
19:9a:86:e1:23:9e:ee:35:de:88:67:f0:27:1a:19:a9:fe:5e:
35:60:f3:31:11:79:6d:ea:52:57:7c:60:64:b8:c5:6c:a7:5d:
d6:88:f4:0f:b8:f3:ce:84:41:e1:2d:68:07:73:70:fb:f6:e2:
86:70:57:38:20:f9:77:56:eb:7f:67:88:a1:b0:13:09:3b:07:
23:6a:ef:d5:ca:a8:5c:92:7a:e3:b1:58:c4:6b:14:3c:04:a0:
25:76:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:45 2026 by rpki-client