Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OxMrLBkhji6Hss7c84haccHT_7c.roa
File: OxMrLBkhji6Hss7c84haccHT_7c.roa (raw, json)
Hash identifier: 6TR83SO14ULaOM/HYVkH0mwTl23fumyKEqeojY5E3To=
Subject key identifier: 3B:13:2B:2C:19:21:8E:2E:87:B2:CE:DC:F3:88:5A:71:C1:D3:FF:B7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D6C037BD3F8A839CC13DA0C591AEBE0DA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OxMrLBkhji6Hss7c84haccHT_7c.roa
Signing time: Wed 08 Apr 2026 07:34:20 +0000
ROA not before: Wed 08 Apr 2026 07:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 04:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:03:7b:d3:f8:a8:39:cc:13:da:0c:59:1a:eb:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 8 07:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b132b2c19218e2e87b2cedcf3885a71c1d3ffb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:29:e9:9c:b0:77:d5:1f:ac:d6:0c:9c:7e:
61:08:5e:5b:0e:80:47:b5:07:70:e9:46:07:7f:f2:
32:a5:eb:ea:17:62:b7:57:9e:84:f9:b1:31:6a:0d:
61:65:f7:9d:81:43:bf:f6:bc:0e:69:21:f4:e9:99:
b1:3e:4d:63:3e:40:81:ee:f1:70:54:0b:06:d1:32:
de:f4:0c:60:ad:d8:78:d7:80:c9:aa:05:8e:4e:ec:
bc:c8:5e:bc:4c:2b:d5:2b:22:a5:d7:69:d2:b1:64:
5f:67:73:47:b1:03:45:dd:8a:a8:41:20:f6:5a:7a:
6a:ea:29:65:34:18:04:be:8d:be:1b:c8:ab:fc:d5:
4a:ce:cc:8a:5a:35:82:1c:30:37:40:67:9e:1c:0e:
7b:fb:57:4c:cd:c2:b5:98:ac:df:0e:88:d0:b4:4f:
48:f7:80:3d:4e:24:0d:9f:a6:39:7e:97:33:d7:c0:
19:9f:a0:72:c6:ab:3d:64:e6:8a:76:85:d2:55:e0:
4d:04:16:5d:72:29:24:61:7d:71:53:9c:22:6d:9e:
25:8a:12:3e:01:60:68:f6:64:e2:9c:58:83:dd:17:
47:13:a3:04:10:4e:c6:d4:92:0b:22:a0:76:e1:da:
3a:bb:07:84:98:ca:0b:79:01:ec:17:32:a7:a1:76:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:2B:2C:19:21:8E:2E:87:B2:CE:DC:F3:88:5A:71:C1:D3:FF:B7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OxMrLBkhji6Hss7c84haccHT_7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.175.221.0/24
87.239.131.0/24
89.106.73.0/24
89.106.75.0/24
89.106.82.0/24
94.249.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0c:d8:51:0c:0d:1e:7d:39:5e:0f:66:a8:1e:4d:7e:27:c7:
d5:6e:fc:49:23:18:e6:d6:ed:27:63:e8:87:68:38:13:83:f1:
fa:cb:e5:a8:df:c6:36:e7:bd:07:ff:c1:8c:5a:b6:04:75:05:
49:97:08:e2:e7:b1:f8:0a:74:64:c6:eb:21:1f:0b:70:85:44:
be:1d:fb:b0:8b:2b:36:a9:80:5a:84:0b:38:c2:2a:b5:93:ae:
29:91:ca:92:ba:ee:26:c0:b4:3d:91:7d:17:1a:5e:9b:e2:92:
bb:3b:9b:21:09:4e:f8:fc:d8:64:6c:01:01:89:78:72:42:5c:
2e:05:68:9c:1f:24:eb:ef:e6:61:6d:80:d2:05:9b:e2:a2:7c:
2a:9c:2b:d9:3a:bd:30:13:07:54:9e:1d:b5:3d:10:1f:0d:12:
82:76:7d:c8:af:20:a5:73:eb:15:3e:90:d5:06:6b:dc:9c:60:
c1:4d:3f:6c:67:65:62:69:7c:6e:b2:ec:0c:64:c2:35:d9:d1:
54:8d:98:4e:ac:c6:f5:d0:d9:82:f1:39:04:78:5c:5a:b9:5a:
d2:bc:8c:a3:f2:52:14:bb:8c:a8:bc:a3:ce:ae:88:b7:8b:fc:
fd:e6:d7:a0:1b:6a:eb:8b:43:03:a2:f6:7d:41:c9:40:86:c7:
76:51:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 13:53:58 2026 by rpki-client