Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TtNdXRG1bZw4svfxWv5aQa1r5dU.roa
File: TtNdXRG1bZw4svfxWv5aQa1r5dU.roa (raw, json)
Hash identifier: MZpI8rvsRlLNEBPOaQCWwNHxZlVEJADzjcgX2bF1/l8=
Subject key identifier: 4E:D3:5D:5D:11:B5:6D:9C:38:B2:F7:F1:5A:FE:5A:41:AD:6B:E5:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A04596454B83EEB8FCCAF58A3A4D11CD5F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TtNdXRG1bZw4svfxWv5aQa1r5dU.roa
Signing time: Thu 27 Aug 2026 23:37:51 +0000
ROA not before: Thu 27 Aug 2026 23:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201790
IP address blocks: 5.83.151.0/24 maxlen: 24
5.175.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:96:45:4b:83:ee:b8:fc:ca:f5:8a:3a:4d:11:cd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 27 23:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ed35d5d11b56d9c38b2f7f15afe5a41ad6be5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:2f:b9:92:f4:1d:ef:7b:1b:26:0c:81:51:
8a:2c:e3:52:ec:35:f2:24:f4:97:76:3f:dc:e5:69:
29:1b:50:f7:82:6f:67:1a:fb:a3:c3:57:04:b4:67:
7f:d1:25:81:7e:2d:3d:0b:d3:43:d2:68:fb:8d:79:
c4:a6:88:e0:ea:49:02:d1:b1:f2:cc:43:e4:8c:a6:
59:3b:43:bf:41:05:61:5e:02:8b:ae:2a:a0:08:1f:
be:30:c6:8c:4b:13:31:c1:7d:76:8d:d6:24:f4:1f:
1e:52:ae:2a:4e:9f:63:e1:6e:27:10:07:c5:04:13:
8e:1e:44:a6:b6:1a:98:af:30:3e:3a:d5:83:36:fe:
94:6e:33:fa:f1:1f:df:35:bc:aa:e9:b6:c4:50:21:
1d:49:0a:7c:9b:8f:09:31:73:1d:6e:f0:04:20:52:
5a:00:35:3a:86:e7:75:36:55:fd:8a:90:cc:45:78:
7c:b8:0f:16:19:9d:36:7a:ab:ec:2c:41:5f:2b:b8:
be:48:78:22:d1:7c:60:c8:7f:cc:f1:28:9b:bc:04:
ea:5f:5d:84:02:19:6a:70:dc:6f:47:b7:62:d4:54:
db:ef:a9:4a:92:b7:be:fe:47:93:69:0d:d3:07:34:
20:4f:69:ab:83:14:c5:54:ea:c1:0d:f9:11:f9:d9:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:5D:5D:11:B5:6D:9C:38:B2:F7:F1:5A:FE:5A:41:AD:6B:E5:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TtNdXRG1bZw4svfxWv5aQa1r5dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.151.0/24
5.175.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ac:24:a9:ea:85:ec:1e:7b:ad:f2:ec:67:f6:c7:51:c8:52:
de:64:8c:e8:04:67:c2:55:09:8b:b9:e6:45:6a:ac:a0:3c:ba:
d0:74:da:a8:69:eb:92:35:9c:69:04:10:d7:54:be:04:8f:a0:
a4:e3:67:24:13:8f:18:fc:2f:60:39:49:db:e0:1c:06:48:42:
4b:78:4d:ba:46:34:23:8f:2f:ed:1e:38:a5:62:a2:26:67:79:
b9:f0:15:b4:6f:76:a9:7d:1f:8d:d7:4c:c4:d0:e7:bb:2b:8f:
19:66:c0:87:ba:a8:54:46:14:39:c3:76:7b:29:34:70:80:1a:
60:99:5e:60:7b:45:a7:46:9b:20:ef:33:c9:15:f1:41:63:d9:
e5:60:8f:9a:a1:b6:74:dc:a6:f1:bb:4e:99:0b:73:0e:9c:0e:
3b:66:bf:a6:9b:1a:0e:d4:10:86:9f:13:7f:38:59:d6:03:06:
e9:44:32:00:5c:7a:86:f3:a9:e0:f1:8b:03:41:3d:78:bf:8b:
50:23:85:6a:13:67:8e:60:bf:1d:a9:90:66:2d:4d:dc:1f:92:
1b:7e:29:52:43:61:3e:e8:5c:71:3b:18:91:af:b1:ed:a1:75:
0d:bd:7a:ff:3f:70:2a:cb:7f:a1:d6:5b:65:6a:fa:32:94:3c:
8f:82:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:36 2026 by rpki-client