Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SvvaqC9uCmcyEVNmgEuudoTX1Pc.roa
File: SvvaqC9uCmcyEVNmgEuudoTX1Pc.roa (raw, json)
Hash identifier: dsawjJBhdI3LQOYYfJyJ1LnEDMJO2KgkXPrB6Xg4etQ=
Subject key identifier: 4A:FB:DA:A8:2F:6E:0A:67:32:11:53:66:80:4B:AE:76:84:D7:D4:F7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A00B9F0F4FB5708AE0408A5EAC762E49B9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SvvaqC9uCmcyEVNmgEuudoTX1Pc.roa
Signing time: Sun 16 Aug 2026 17:29:28 +0000
ROA not before: Sun 16 Aug 2026 17:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214639
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.178.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.93.10.0/24 maxlen: 24
87.239.135.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
178.18.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:9f:0f:4f:b5:70:8a:e0:40:8a:5e:ac:76:2e:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 16 17:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4afbdaa82f6e0a6732115366804bae7684d7d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:32:0b:5e:51:07:ba:a1:f8:c4:9d:8c:87:
db:33:23:dc:48:31:64:88:21:42:d3:3d:57:42:99:
3c:97:28:2f:3e:b0:3b:8b:8c:85:6f:cc:03:fa:24:
77:a5:0b:f2:6e:4e:90:5c:55:bd:c7:2a:62:87:f7:
9b:8f:5e:b6:b9:5b:c5:77:90:bf:e5:6b:b1:73:23:
62:03:b6:d1:a9:7b:b2:a9:b2:19:26:98:d7:ae:b2:
bd:27:4a:b8:c0:82:12:10:3a:92:3f:24:bc:cf:f7:
bf:d2:b5:a5:6b:51:67:0b:bb:9e:b8:d7:da:6e:d5:
89:35:aa:b6:6b:a8:fc:06:e8:e8:e4:60:d8:aa:19:
dd:ae:2e:fe:1e:b1:b8:55:c6:15:d8:e2:5a:d5:34:
1b:40:b4:e8:fc:92:3b:11:34:b9:5d:fa:ce:d3:81:
6a:d7:24:e9:2b:40:3c:bb:01:b6:ff:9c:77:76:d2:
6d:33:63:3d:fb:8c:ab:67:7b:86:1a:3d:50:3e:e7:
0a:9e:50:0c:f4:07:26:90:bb:ac:07:37:51:49:92:
84:64:dc:5c:b5:0f:5f:a6:64:ef:cf:6d:b0:7b:6c:
cf:92:58:40:11:8d:8d:60:18:82:11:b8:8f:40:20:
c7:de:99:02:44:78:d8:3e:48:a6:c5:eb:30:64:3b:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:DA:A8:2F:6E:0A:67:32:11:53:66:80:4B:AE:76:84:D7:D4:F7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SvvaqC9uCmcyEVNmgEuudoTX1Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.178.0/24
83.243.86.0/24
85.93.10.0/24
87.239.135.0/24
89.106.86.0/24
89.144.35.0/24
94.249.175.0-94.249.176.255
94.249.225.0/24
178.18.147.0/24
178.18.153.0/24
Signature Algorithm: sha256WithRSAEncryption
79:54:ef:b1:ad:51:76:72:6a:89:19:62:18:ee:d3:63:ed:68:
4f:30:29:5e:81:91:82:bc:a1:26:7e:3e:85:59:23:31:e9:0e:
1b:e8:a1:0a:18:3e:70:c2:6a:0c:8b:81:57:b4:af:61:11:93:
71:d9:1b:bb:4d:3a:0e:6e:cb:c4:ab:a5:49:8f:d6:02:dd:48:
65:44:c7:5a:3b:c3:d3:f5:2a:69:1d:70:7d:f0:89:9c:a4:3f:
05:ca:7b:cd:af:3e:5f:fb:01:de:34:f7:60:1c:7e:41:cf:0f:
3d:90:d5:52:0c:56:05:3c:81:b1:bc:0c:24:f3:75:76:6d:7e:
f0:8a:89:40:89:c7:fa:c4:5e:92:75:49:ef:ca:f2:2b:f4:a9:
70:8c:0f:e8:95:79:32:9d:e7:7c:05:d5:7e:56:9e:07:45:43:
50:8e:02:f4:4e:79:41:24:7c:99:25:52:f4:fd:bf:08:92:70:
c7:8e:26:b1:78:04:2d:e4:d8:28:d6:45:d9:f0:29:82:b7:17:
59:b4:5b:d1:ed:3e:07:b3:88:fc:bd:e7:00:2a:70:cd:fc:df:
bc:1b:49:88:6c:bd:92:b6:7d:fa:00:15:67:5c:60:f0:35:16:
1c:28:e8:79:47:d9:35:4f:1d:62:a2:c5:86:88:44:bb:06:5b:
ca:18:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:50 2026 by rpki-client