Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RYwGh9poRxDYfb0C93jur2i9eMs.roa
File: RYwGh9poRxDYfb0C93jur2i9eMs.roa (raw, json)
Hash identifier: ms8vEb8lB/rcy/kId3qniTo/tmhAiF7abB/Ep17WhnI=
Subject key identifier: 45:8C:06:87:DA:68:47:10:D8:7D:BD:02:F7:78:EE:AF:68:BD:78:CB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A156717CA0B5D36A901F3032B01D4C5A55
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RYwGh9poRxDYfb0C93jur2i9eMs.roa
Signing time: Mon 19 Oct 2026 23:14:00 +0000
ROA not before: Mon 19 Oct 2026 23:14:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.83.146.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
5.175.128.0/24 maxlen: 24
5.175.132.0/24 maxlen: 24
5.175.185.0/24 maxlen: 24
5.175.186.0/24 maxlen: 24
5.175.248.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.118.163.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
185.47.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:71:7c:a0:b5:d3:6a:90:1f:30:32:b0:1d:4c:5a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 23:14:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=458c0687da684710d87dbd02f778eeaf68bd78cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:e4:27:3e:2d:97:f9:9c:e3:2f:30:e1:2e:
95:b0:11:a8:1a:1d:ec:f9:7f:f3:c1:37:20:52:1c:
2b:38:e4:39:b4:65:c0:bc:c4:bb:77:56:fc:d4:c7:
a6:a6:6c:36:4b:80:05:b4:8c:c8:f2:9f:d5:fd:03:
11:1a:6b:f7:54:4e:64:f2:03:aa:e7:6e:47:c2:91:
95:46:34:c9:7c:b9:bb:98:00:e1:e1:87:e4:bb:44:
21:4f:0d:10:de:84:51:b6:b8:3a:8c:00:a0:c8:9e:
a8:c8:17:b9:7f:f4:38:30:9b:cf:cc:60:f4:92:67:
08:b8:79:d9:53:19:a5:dd:fd:00:53:ec:16:7d:f3:
1b:35:7b:43:15:73:25:81:b7:d5:d7:9e:c7:7a:61:
ed:c8:b3:8d:14:ec:5c:97:dd:16:7d:03:b9:39:06:
59:d7:b8:21:d9:a3:b2:91:6b:5b:21:8c:48:69:48:
a1:af:b9:21:92:bb:7a:63:f4:fa:b2:a8:29:46:bd:
4b:fa:67:9d:d7:91:13:74:90:9f:97:85:a3:ad:ae:
6c:02:d6:ab:42:e7:d9:23:8d:28:5f:9d:8c:58:1d:
43:31:a9:f6:b2:3b:f7:fe:fb:3d:af:e8:3a:8e:91:
c6:cc:36:f7:a7:49:ac:46:58:7e:dd:8e:ce:9c:6f:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:06:87:DA:68:47:10:D8:7D:BD:02:F7:78:EE:AF:68:BD:78:CB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RYwGh9poRxDYfb0C93jur2i9eMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
5.83.148.0/24
5.175.128.0/24
5.175.132.0/24
5.175.185.0-5.175.186.255
5.175.248.0/24
5.231.94.0/24
77.90.33.0/24
85.118.163.0/24
87.239.131.0/24
89.106.77.0/24
89.106.82.0/24
89.106.89.0/24
89.144.3.0/24
89.144.49.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
94.249.247.0/24
185.47.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f3:45:82:58:48:8d:a9:1f:7e:7f:2b:b8:ae:31:5c:17:b8:
e9:c9:92:e3:1c:6b:67:25:12:8e:1f:e4:23:3b:2e:92:8c:7b:
48:1e:c0:98:78:80:e6:9a:33:a4:e9:8e:94:2d:4e:dc:18:6d:
0a:cd:cb:33:68:7e:12:05:ea:c5:e9:16:43:43:65:58:d2:e6:
69:b0:c3:ea:1b:d1:dc:bc:d1:a0:e8:e4:2b:85:d6:aa:04:84:
e5:61:fc:5c:d3:85:4d:92:b3:5c:5a:66:ba:25:08:a0:1a:29:
47:9e:52:b8:2d:4d:d4:4a:36:9d:db:e6:28:ef:75:bd:30:2a:
66:f6:43:97:f5:86:05:e5:71:67:e3:9a:6d:5d:52:41:49:b6:
9d:55:4d:33:85:64:51:f8:9f:bc:52:20:30:db:ea:cf:bc:de:
36:64:b9:26:64:97:7b:1f:84:71:19:24:75:8d:e0:1e:e2:8e:
bc:2e:a8:cf:8e:30:13:0f:df:18:c7:2e:e6:49:eb:8d:5c:8a:
b3:d2:60:08:62:af:a0:a2:ce:a6:22:2d:f7:89:af:ac:91:b1:
cf:07:60:eb:c5:14:54:55:25:54:94:39:e7:19:d9:9d:6f:b2:
2c:6e:d1:98:f5:a3:3a:31:4f:ac:bb:90:15:78:75:15:54:32:
d7:e8:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:27 2026 by rpki-client