Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XmSdVHDyBuz_wnxqRbJ3QqckNy8.roa
File: XmSdVHDyBuz_wnxqRbJ3QqckNy8.roa (raw, json)
Hash identifier: a6g9dMjjCZ8XjnecVCKL9ap9E98X0wyrLDe+JidGlSE=
Subject key identifier: 5E:64:9D:54:70:F2:06:EC:FF:C2:7C:6A:45:B2:77:42:A7:24:37:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1330886EE7869B4C5A4B29E94E7A2D90D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XmSdVHDyBuz_wnxqRbJ3QqckNy8.roa
Signing time: Tue 13 Oct 2026 02:12:39 +0000
ROA not before: Tue 13 Oct 2026 02:12:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.83.149.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:08:86:ee:78:69:b4:c5:a4:b2:9e:94:e7:a2:d9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 02:12:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e649d5470f206ecffc27c6a45b27742a724372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:c2:bd:82:e6:ab:60:3f:3b:b7:05:ae:a3:
71:e1:4d:29:00:9f:e2:95:55:aa:65:fa:42:b0:ee:
bd:9a:63:7b:6d:6e:5a:b3:2c:a5:5d:75:eb:dd:a7:
2e:8e:18:be:67:b1:9e:be:e0:d9:b5:f9:0d:97:20:
a9:a4:7c:25:0d:4a:11:07:2b:3e:dd:6a:a2:46:d1:
ce:9d:5a:8e:fb:3b:66:d8:ce:ca:31:1e:a5:46:bb:
a4:83:43:db:b9:b5:2e:bf:1f:d5:0b:1d:47:be:c9:
12:e9:94:24:6c:1a:fd:a1:35:ae:e3:75:aa:94:e8:
cc:2c:6b:11:45:54:e8:8e:8e:be:55:78:58:78:2a:
19:fc:70:f6:9b:9f:36:78:67:7a:b8:eb:4a:b8:35:
82:ec:5f:37:bf:ad:b2:19:44:68:6c:fe:0e:bc:e3:
74:3c:8c:fa:74:c8:57:43:18:78:29:14:60:3f:4e:
ff:07:d8:d3:82:c0:83:d9:24:81:ca:86:75:5d:4d:
9e:b5:25:eb:17:b4:b0:3f:25:3b:bb:e3:f1:f3:b0:
55:1c:df:ef:74:3f:14:e7:0b:2e:d1:a5:18:c6:c3:
fd:e6:d1:3f:04:fc:32:d6:1c:0e:dd:37:ca:90:b7:
c4:56:16:9b:84:6e:db:3f:39:13:ad:3c:cf:df:f5:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:64:9D:54:70:F2:06:EC:FF:C2:7C:6A:45:B2:77:42:A7:24:37:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XmSdVHDyBuz_wnxqRbJ3QqckNy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
89.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
17:33:ad:7c:2e:c3:82:e9:62:d8:0a:68:74:d6:81:e6:14:be:
ae:c3:1c:07:95:67:da:55:2f:13:be:ab:e4:c8:fc:19:a6:c0:
cd:90:18:e4:8c:0c:f5:e9:11:52:e0:a7:e9:3b:e8:74:aa:5f:
e6:f0:59:a7:80:8a:d2:4a:de:36:b3:ab:1a:4d:0e:47:f2:0c:
b1:41:3b:db:5d:7f:bf:3e:ad:8e:90:d9:5d:b8:fc:de:6c:d7:
d7:e0:d9:a1:94:38:f0:a2:ca:67:c8:6f:fa:1f:13:e8:9f:b5:
06:a5:60:65:f4:5a:15:ca:ae:1d:78:83:2d:80:42:d6:4e:e4:
37:64:09:65:47:9f:6b:91:ed:d7:f7:25:c2:ff:35:a4:df:b4:
01:19:6d:79:49:ff:f3:55:0d:ce:c1:65:1f:c3:2f:30:5c:e1:
0d:94:5f:bd:57:00:68:65:7b:66:54:90:fa:3a:8c:71:57:28:
a7:97:7c:3e:be:bb:07:1d:b3:2b:42:02:79:c3:0e:88:a2:f2:
33:79:95:1b:0a:4a:32:2b:fb:99:ba:d4:8b:61:fb:52:87:6d:
bd:eb:04:34:48:43:82:fc:94:07:20:e6:8e:72:42:e0:a0:ae:
38:f5:b5:fd:24:6c:e0:d8:a7:71:40:66:79:19:09:6f:7f:b4:
91:20:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:13 2026 by rpki-client