Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_7PgUAEVz7CoC61Yvjf0IdhCz_Q.roa
File: _7PgUAEVz7CoC61Yvjf0IdhCz_Q.roa (raw, json)
Hash identifier: iaL4FhDSlJ7fWYPyM8BTpYUvI57XhPxlyH3bZ/OqRGQ=
Subject key identifier: FF:B3:E0:50:01:15:CF:B0:A8:0B:AD:58:BE:37:F4:21:D8:42:CF:F4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E7768A94858FB92EB143365936B35AFC1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_7PgUAEVz7CoC61Yvjf0IdhCz_Q.roa
Signing time: Sat 30 May 2026 05:43:28 +0000
ROA not before: Sat 30 May 2026 05:43:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150716
IP address blocks: 5.231.76.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
85.118.166.0/24 maxlen: 24
94.249.242.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
185.47.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:77:68:a9:48:58:fb:92:eb:14:33:65:93:6b:35:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 30 05:43:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb3e0500115cfb0a80bad58be37f421d842cff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:1e:72:2c:73:4b:b8:ce:bc:2f:c1:a9:45:
fa:93:e7:96:ec:94:b4:1b:d5:96:ee:c2:73:48:f0:
a1:29:2f:10:50:af:d5:f9:e5:56:e2:2e:2f:33:05:
3c:50:94:16:4c:ed:d1:7d:3c:db:be:f0:8e:e2:af:
14:10:dd:de:98:c3:ba:69:99:3f:74:1f:13:db:16:
f3:5f:58:c2:bb:9c:1d:dd:a9:a4:e6:b5:06:a4:ab:
b6:c9:fc:df:58:50:59:d7:ce:27:0d:a7:79:ae:70:
ae:0d:ad:68:ee:14:cc:94:e4:3a:56:c5:41:91:bd:
54:df:76:6c:8f:35:1c:50:b3:99:1d:92:58:00:7e:
0b:a0:a4:d9:2b:62:c0:16:f8:60:f1:89:80:64:07:
0b:5f:48:79:05:91:b3:2e:bc:ac:13:87:9d:9f:27:
e2:2f:f9:27:ad:e5:bb:4a:60:99:01:df:e8:a9:c6:
07:1f:ef:eb:fa:49:a9:4a:f6:fb:1b:e0:72:38:d7:
f9:51:d1:fb:81:5b:19:37:d3:8a:5e:71:47:f3:1a:
4c:7d:bb:0c:55:18:be:b7:01:7f:ba:7a:84:60:bf:
00:70:2a:59:c2:fe:76:58:3e:a5:76:33:79:f9:83:
65:73:b3:36:bc:e3:60:6c:b3:a1:f8:2b:69:8a:b2:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:E0:50:01:15:CF:B0:A8:0B:AD:58:BE:37:F4:21:D8:42:CF:F4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_7PgUAEVz7CoC61Yvjf0IdhCz_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.76.0/24
77.90.48.0/24
85.118.166.0/24
94.249.242.0/24
178.18.151.0/24
185.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
11:60:23:56:cc:6c:38:cc:5b:45:d2:f8:7c:aa:b7:09:1c:17:
47:ea:00:0a:3e:ad:1e:ce:7c:3a:77:51:1f:ff:d5:7a:c8:da:
5c:7b:02:33:19:b3:52:bb:87:45:34:6b:22:88:df:22:ca:98:
da:8b:b2:bc:ad:70:15:4b:98:29:fe:aa:49:2f:01:09:2b:3e:
e4:68:82:df:52:92:7b:75:8b:c7:12:98:1d:57:d2:ea:12:e6:
31:24:53:3e:82:a8:df:25:57:05:bf:29:11:44:cd:d1:29:e0:
1b:1b:d6:e4:fb:c6:6c:10:6d:be:38:0a:d0:4c:37:86:2d:e8:
6b:7e:20:d4:f1:be:f7:c4:87:d2:ca:9e:e6:60:b8:3f:24:87:
da:6d:cf:d3:cc:c2:fa:c7:0f:67:45:34:0e:96:31:cc:37:e6:
43:ba:a8:a0:fd:4c:1f:d2:3c:5b:5b:31:26:5e:a5:a8:84:f6:
af:21:64:e0:13:f8:1e:c6:18:a8:b7:04:2f:da:03:13:52:5c:
14:49:bf:c9:27:bd:e8:bb:53:e1:b9:9a:1f:94:3a:09:c9:19:
12:f7:eb:c2:1c:fb:15:8f:fa:07:2c:63:c6:b4:c4:41:2b:3e:
a8:77:fc:dd:73:45:67:69:64:b6:fd:60:b9:70:56:cf:d6:7b:
d2:73:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client