Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZD4Te5j1X-Tox6mDf5eS1oY0eJc.roa
File: ZD4Te5j1X-Tox6mDf5eS1oY0eJc.roa (raw, json)
Hash identifier: EC/VpWkczSGiDaT00KKLDEmfuSoUCeqw/snMa3B/b2w=
Subject key identifier: 64:3E:13:7B:98:F5:5F:E4:E8:C7:A9:83:7F:97:92:D6:86:34:78:97
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FD0CBF89156004AF4D991E1B1286F8D05
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZD4Te5j1X-Tox6mDf5eS1oY0eJc.roa
Signing time: Wed 05 Aug 2026 07:20:55 +0000
ROA not before: Wed 05 Aug 2026 07:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.217.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:cb:f8:91:56:00:4a:f4:d9:91:e1:b1:28:6f:8d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 07:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=643e137b98f55fe4e8c7a9837f9792d686347897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:0e:04:cb:31:ba:c4:20:b8:a5:b6:b3:f1:
97:00:0d:4b:9a:1b:2e:4c:53:83:c9:6f:01:76:7a:
03:14:a9:fc:e5:db:2a:c7:76:3b:7e:f2:e4:b3:6f:
d6:0c:0d:a4:90:e7:3d:8b:ce:06:f2:3d:31:f5:69:
65:a3:98:b8:ca:1a:29:15:f3:7e:f5:02:38:0a:74:
2f:8c:97:9a:79:d0:d7:a4:c4:13:f3:7e:83:68:2b:
4f:b1:44:ee:b3:cd:47:ce:27:2e:3c:0b:b1:e6:3c:
d3:fb:26:1a:63:34:74:6a:53:f6:ad:99:f5:fb:fd:
97:a8:aa:56:16:71:67:83:cc:db:7b:4b:89:b5:81:
a0:94:85:ff:9b:2e:aa:cb:c4:a9:ac:42:a0:e1:92:
d9:71:fa:80:1c:90:a7:6b:c5:72:b0:cc:17:ad:c9:
6d:a6:cc:b2:0f:4b:8b:c3:fc:ad:1f:46:2a:6d:5f:
80:f2:3d:a0:5e:cf:fa:a5:65:81:e6:3e:aa:0d:05:
f2:0a:f0:f6:75:12:56:53:71:3a:71:01:0e:bd:3e:
e7:27:1c:6a:6d:b0:52:1e:68:1c:e6:92:c6:10:c9:
82:b8:58:24:26:63:7c:69:a1:63:67:21:72:36:66:
a1:08:39:59:de:cf:b9:75:98:24:31:53:dc:72:21:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3E:13:7B:98:F5:5F:E4:E8:C7:A9:83:7F:97:92:D6:86:34:78:97
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZD4Te5j1X-Tox6mDf5eS1oY0eJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.174.0/24
5.175.217.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
87.239.129.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.197.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2d:0c:86:b5:ca:5d:0c:e1:57:d5:d9:0a:2c:01:3f:1f:79:
44:bf:55:08:3c:ae:70:df:a5:77:e1:12:5a:98:38:28:ec:be:
85:0d:04:d8:73:6e:36:f5:b1:cc:93:fc:32:e0:6f:45:b9:d2:
d4:34:3e:18:41:c8:8c:d0:a3:af:dc:bb:e4:63:11:e3:66:55:
bf:40:82:a3:69:5e:80:4b:99:5f:e6:9d:0c:ea:0d:bf:34:8d:
1a:20:4d:41:63:1c:6f:41:78:58:5b:79:ec:6a:eb:28:2b:9b:
4e:61:04:cf:8d:27:cb:a7:9f:97:23:dc:ab:4f:3f:50:48:2e:
ff:f6:df:30:e1:e9:b7:01:64:88:e4:f0:99:69:82:28:70:d1:
57:a6:52:c6:25:03:c9:c3:f7:29:28:a2:43:7c:6f:95:9c:65:
33:b9:a1:1c:dd:bc:d8:45:8a:f0:5e:9b:27:67:6f:90:cd:09:
6b:4a:7e:c1:81:91:3d:ab:a9:ae:0b:eb:da:dd:65:b1:26:fd:
92:dd:bf:ba:1b:58:53:61:ca:c2:91:d9:ba:d0:54:89:e4:d7:
52:c5:4d:0b:dc:70:aa:4d:c9:90:af:e2:e4:6f:32:9a:6c:9e:
fc:de:e5:d4:c4:25:2f:cb:21:37:72:34:01:e9:64:bb:27:86:
87:93:2a:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZ/Qy/iRVgBK9NmR4bEob40FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODA1MDcyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDNlMTM3Yjk4ZjU1ZmU0ZThjN2E5ODM3Zjk3OTJkNjg2MzQ3ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSoOBMsxusQguKW2s/GXAA1Lmhsu
TFODyW8BdnoDFKn85dsqx3Y7fvLks2/WDA2kkOc9i84G8j0x9Wllo5i4yhopFfN+
9QI4CnQvjJeaedDXpMQT836DaCtPsUTus81HzicuPAux5jzT+yYaYzR0alP2rZn1
+/2XqKpWFnFng8zbe0uJtYGglIX/my6qy8SprEKg4ZLZcfqAHJCna8VysMwXrclt
psyyD0uLw/ytH0YqbV+A8j2gXs/6pWWB5j6qDQXyCvD2dRJWU3E6cQEOvT7nJxxq
bbBSHmgc5pLGEMmCuFgkJmN8aaFjZyFyNmahCDlZ3s+5dZgkMVPcciEL+QIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFGQ+E3uY9V/k6Mepg3+XktaGNHiXMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWkQ0VGU1ajFYLVRveDZtRGY1ZVMxb1kwZUpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQABVOOAwQA
BVOWAwQABa+uAwQABa/ZAwQABecZAwQABedSAwQABedgAwQATVonAwQAV++BAwQA
XmenAwQAXvmWAwQAXvmZAwQAXvnFMA0GCSqGSIb3DQEBCwUAA4IBAQBRLQyGtcpd
DOFX1dkKLAE/H3lEv1UIPK5w36V34RJamDgo7L6FDQTYc2429bHMk/wy4G9FudLU
ND4YQciM0KOv3LvkYxHjZlW/QIKjaV6AS5lf5p0M6g2/NI0aIE1BYxxvQXhYW3ns
ausoK5tOYQTPjSfLp5+XI9yrTz9QSC7/9t8w4em3AWSI5PCZaYIocNFXplLGJQPJ
w/cpKKJDfG+VnGUzuaEc3bzYRYrwXpsnZ2+QzQlrSn7BgZE9q6muC+va3WWxJv2S
3b+6G1hTYcrCkdm60FSJ5NdSxU0L3HCqTcmQr+LkbzKabJ783uXUxCUvyyE3cjQB
6WS7J4aHkyr0
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:33 2026 by rpki-client