Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UiolkjPzUeOcu2DZWn7p3NnL91k.roa
File: UiolkjPzUeOcu2DZWn7p3NnL91k.roa (raw, json)
Hash identifier: MCjgNfnVQ6fGw7opQvg6H6GTg6grsLQIHhlQcUngsao=
Subject key identifier: 52:2A:25:92:33:F3:51:E3:9C:BB:60:D9:5A:7E:E9:DC:D9:CB:F7:59
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A019067472388C633FE1C816C10A4008DE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UiolkjPzUeOcu2DZWn7p3NnL91k.roa
Signing time: Wed 19 Aug 2026 07:57:28 +0000
ROA not before: Wed 19 Aug 2026 07:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.136.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:06:74:72:38:8c:63:3f:e1:c8:16:c1:0a:40:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 19 07:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=522a259233f351e39cbb60d95a7ee9dcd9cbf759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:ee:69:57:f4:ba:51:89:b4:31:44:cb:14:
42:91:ea:d0:00:39:42:18:95:b2:fb:5e:49:77:ef:
57:46:60:1f:64:99:0a:f7:56:45:db:e6:1b:57:29:
6b:b2:31:4f:0b:f3:59:ec:ae:22:4c:f8:b0:d1:49:
47:08:ed:43:b0:97:e7:c6:89:9a:f8:c2:77:fd:f8:
aa:98:8e:96:1a:ae:af:c7:0d:7b:41:3a:2e:b5:de:
49:4f:1d:d5:99:58:c5:cf:d4:bc:c2:0f:56:ee:b9:
0d:80:df:6e:e8:d0:79:f1:7e:98:2b:c5:02:04:1c:
88:a4:75:35:cc:e8:d1:58:0f:d1:0e:7f:36:44:59:
e3:41:4e:ee:0f:27:4f:91:a1:8c:40:ea:c3:1e:7c:
5c:5a:fc:6d:37:ca:cc:75:7b:5a:00:75:24:4f:3b:
dc:d8:f0:b2:4c:ff:cf:91:dd:a0:0b:ae:c9:62:28:
f0:0e:55:b8:15:15:f5:78:b6:84:64:ae:bf:c4:10:
d9:1e:b4:98:fb:26:78:3e:cb:e6:8f:1a:ca:cc:a6:
27:45:3f:b1:db:0a:8b:f6:a2:d9:60:ea:20:c1:86:
f4:57:ae:1e:fc:21:4d:6d:e6:9b:d1:12:52:f9:c6:
92:7e:3b:f2:06:92:e8:a9:bd:8e:1b:7f:72:0c:8b:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:25:92:33:F3:51:E3:9C:BB:60:D9:5A:7E:E9:DC:D9:CB:F7:59
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UiolkjPzUeOcu2DZWn7p3NnL91k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.136.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:85:c6:53:34:53:c9:21:60:64:a9:4e:b3:85:89:4f:ed:0d:
92:bc:48:1e:75:89:36:9b:ed:ed:c7:9a:cf:bf:08:4b:df:97:
ad:c2:0a:29:c0:f0:1c:fc:3c:02:36:be:53:d5:4b:31:b8:ed:
e6:cd:8d:ba:90:41:16:42:25:32:f4:a2:ce:93:cd:05:f8:b5:
31:59:81:75:8e:50:ba:ce:7c:c4:bb:64:c6:5b:d9:f5:6a:ec:
ca:7e:57:48:7a:54:cd:40:5d:6e:64:a9:8b:50:bb:05:34:47:
17:99:50:9e:36:43:68:94:1d:1d:90:a4:a5:75:0b:98:d3:13:
d2:6c:a9:45:3d:12:00:fa:c6:18:37:0b:de:ec:33:ec:50:c3:
1c:2a:51:a1:a9:8d:87:a2:20:41:3c:46:b5:2b:9a:36:39:80:
d3:2b:e2:04:29:17:d4:fe:1c:b2:5b:86:fb:68:f8:d4:35:20:
01:b4:b0:a2:b4:c5:9f:0b:c2:e8:8e:f3:f2:64:66:5e:b5:e7:
03:d5:bb:6b:c8:9d:1e:60:8b:a8:9d:b8:da:51:29:22:01:cc:
9f:80:65:d9:98:68:6f:06:f7:1e:02:52:b6:25:1f:68:38:f2:
93:17:06:f5:c3:60:5d:c9:b7:46:c6:d7:b7:29:0f:53:8c:2c:
8a:2a:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:48 2026 by rpki-client