Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rj8HS8CgmJ8xBhu1vCfCeE9EfN4.roa
File: Rj8HS8CgmJ8xBhu1vCfCeE9EfN4.roa (raw, json)
Hash identifier: mJjKdutygIqAuzuKdgNQhld9DeJfG8IAxEIy4N19wrY=
Subject key identifier: 46:3F:07:4B:C0:A0:98:9F:31:06:1B:B5:BC:27:C2:78:4F:44:7C:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A14AC2FBAD494F429BCFAA48706A2B7A89
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rj8HS8CgmJ8xBhu1vCfCeE9EfN4.roa
Signing time: Sat 17 Oct 2026 16:47:34 +0000
ROA not before: Sat 17 Oct 2026 16:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.175.171.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
5.231.45.0/24 maxlen: 24
5.231.59.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
85.93.9.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:c2:fb:ad:49:4f:42:9b:cf:aa:48:70:6a:2b:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 16:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=463f074bc0a0989f31061bb5bc27c2784f447cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:3d:4f:d0:41:39:f7:05:b9:ab:ee:17:33:
4f:f8:04:5a:2f:a0:41:95:60:e1:0f:8d:1f:c0:17:
20:9c:99:01:14:13:f0:22:41:9d:f7:38:b4:99:82:
c6:e7:aa:d9:27:0e:02:94:f4:5c:68:f4:05:dd:ef:
5b:a7:d8:40:5f:e8:f6:f9:46:da:2f:30:4d:9d:80:
d7:ea:cc:a4:69:f9:f8:77:01:01:42:5d:7b:cc:e2:
27:8f:35:c0:3a:59:66:10:5e:ce:29:24:73:9b:9b:
36:79:5b:44:a9:00:6a:ee:8c:1a:2f:5d:4b:7d:c7:
83:12:a4:f8:e5:02:5a:8d:2c:2e:dd:3e:17:ff:22:
33:00:12:bc:af:4c:b5:46:74:7f:02:f1:96:5e:2b:
f9:20:43:6f:88:41:ab:b4:83:c6:d9:be:2b:4d:04:
18:67:29:e7:08:4a:78:54:a8:23:49:c1:7d:4a:e2:
64:b9:d1:c1:d9:2c:02:03:0e:36:e4:0d:eb:48:2b:
6a:ec:f0:0b:1a:46:9e:ca:f7:a5:d0:9d:63:95:b9:
5e:54:d5:6a:6b:29:62:97:59:60:6e:19:b1:a9:79:
83:8e:95:59:c5:6d:60:f9:13:d3:54:70:d4:0c:0d:
19:1b:f2:95:2f:3c:88:ae:84:15:48:4b:44:03:92:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:07:4B:C0:A0:98:9F:31:06:1B:B5:BC:27:C2:78:4F:44:7C:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rj8HS8CgmJ8xBhu1vCfCeE9EfN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.175.171.0/24
5.175.211.0/24
5.231.28.0/24
5.231.45.0/24
5.231.59.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
85.93.9.0/24
89.106.73.0/24
89.144.8.0/24
89.144.53.0/24
94.249.172.0/24
Signature Algorithm: sha256WithRSAEncryption
10:21:d5:6e:03:fe:f3:4d:0f:91:7a:26:0b:b6:31:e6:0c:a5:
90:58:ba:0e:25:6f:46:cc:86:4f:c5:ff:be:3d:1a:95:96:f5:
b0:a9:66:10:40:ba:f9:0a:7d:2f:c4:21:3e:70:6c:1c:29:39:
af:06:58:96:db:76:51:05:3a:e9:7f:4b:ed:2a:78:21:73:bb:
ab:15:ca:ed:2a:e4:9f:dd:9d:81:58:0e:c2:2a:6a:07:6b:52:
ec:68:02:b7:eb:ab:a9:d4:cf:14:29:89:c0:8b:34:0f:7f:60:
10:44:3c:e5:7f:17:31:e1:b0:19:4e:bc:d7:e4:bb:92:9e:df:
fc:6f:f6:64:e1:c4:99:9a:ce:3c:74:37:6d:dd:0e:9e:86:2a:
2f:56:1c:d9:b0:8a:f6:9c:e0:56:ba:87:3e:85:a8:69:cb:7f:
13:6f:e2:9b:40:d0:88:30:82:09:1f:a5:06:42:f1:78:a2:0c:
53:9a:8f:0d:4f:b7:08:ef:6b:43:f2:32:d9:6f:04:62:8c:90:
17:12:0e:39:a5:57:a6:19:bb:40:c2:05:57:e6:ed:35:39:40:
c4:97:0b:fb:e1:c2:57:83:b5:49:61:20:73:94:86:34:59:4d:
2d:89:b4:24:d3:bd:a6:2d:95:a2:ab:6a:77:f8:8d:4c:bb:c3:
84:aa:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:22 2026 by rpki-client