Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b-Em4io5EnMdsFaUIC382vgmGWE.roa
File: b-Em4io5EnMdsFaUIC382vgmGWE.roa (raw, json)
Hash identifier: pYeHb6SrNeN59WNUMBESF6sr1uJWe1OEaVtc0R3eGm0=
Subject key identifier: 6F:E1:26:E2:2A:39:12:73:1D:B0:56:94:20:2D:FC:DA:F8:26:19:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1164ADB45C4AEC1DA89AE544F4A5551EA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b-Em4io5EnMdsFaUIC382vgmGWE.roa
Signing time: Wed 07 Oct 2026 12:16:06 +0000
ROA not before: Wed 07 Oct 2026 12:16:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.64.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.249.174.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:4a:db:45:c4:ae:c1:da:89:ae:54:4f:4a:55:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 7 12:16:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fe126e22a3912731db05694202dfcdaf8261961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:d0:17:c1:62:f7:b3:c7:8f:6d:46:e4:7d:
c3:5c:94:99:3f:6d:61:a9:80:8f:ae:41:63:b4:c4:
33:32:09:a0:84:8f:9b:15:ee:3e:21:75:b0:e5:78:
cb:2d:f0:c8:9c:77:e9:04:9c:34:38:c6:55:7a:5f:
e1:7b:fa:ef:c3:5b:e3:df:68:42:9e:22:b0:d0:cf:
cb:f3:75:8f:a8:7d:e4:be:d9:a1:7b:6c:77:12:61:
ed:40:3e:76:d0:0f:9a:e7:c4:4b:d0:77:9c:1c:ca:
80:f7:87:c7:a2:a0:ef:9b:25:80:27:ba:68:8f:91:
6b:dd:01:12:67:22:53:e1:a2:06:86:7b:b0:eb:9a:
56:1f:e8:a7:8f:ec:df:1b:a4:2f:a5:3d:99:9a:e0:
b5:3b:58:3b:44:df:f2:4e:36:8d:3c:66:fc:90:f2:
d3:5b:1f:da:fa:ce:8f:6d:6a:d0:ef:3f:eb:95:17:
e6:e3:79:6d:ff:9b:a8:57:c1:83:af:fe:b4:e9:ef:
0c:01:87:9b:96:ec:83:d6:91:dc:f7:c5:39:d1:c1:
ee:a7:43:79:e3:e4:e4:2b:36:2c:c1:da:a7:b5:1c:
1c:85:33:25:36:59:82:9c:cc:63:14:ae:e6:07:5d:
7b:67:9a:a5:63:53:f5:bb:83:48:5c:9b:5c:ae:a5:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E1:26:E2:2A:39:12:73:1D:B0:56:94:20:2D:FC:DA:F8:26:19:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b-Em4io5EnMdsFaUIC382vgmGWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.175.220.0/24
5.231.26.0/24
5.231.253.0/24
77.90.3.0/24
77.90.28.0/24
85.93.23.0/24
89.106.64.0/24
89.106.76.0/24
89.144.33.0/24
89.144.42.0/24
94.103.170.0/24
94.103.172.0/23
94.249.174.0/24
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
de:6f:cf:e4:ad:25:5c:3b:17:68:35:75:a4:ea:30:c0:74:40:
c1:38:e9:a6:3a:a6:25:01:3d:f7:91:8c:c9:b5:2f:d0:36:7a:
74:6f:2a:61:42:91:61:62:c3:c3:68:86:8c:f1:c3:2a:7e:60:
d0:29:cc:65:5f:6e:bf:ef:d9:bf:8a:6f:e6:64:89:55:35:e5:
86:d0:f7:ba:aa:e7:30:09:20:4f:ad:8e:57:69:38:f9:7a:a0:
92:74:73:99:4b:57:07:0f:e6:99:4e:50:54:51:03:92:95:b8:
cb:31:18:39:cb:87:a5:04:45:f7:b8:30:e5:80:04:4c:63:b4:
50:7f:10:39:42:74:eb:8c:d4:78:9d:94:18:e4:39:9d:0e:46:
2d:88:61:50:02:bf:19:18:88:80:b7:5d:06:63:68:65:c1:e2:
eb:57:08:35:e2:cc:08:a4:67:85:86:d3:68:48:3b:08:38:8b:
b9:0b:0a:66:d7:a1:4d:ff:7a:ec:8d:34:be:fd:32:5d:4a:0a:
5c:99:02:ec:89:e4:7d:2f:68:98:e6:79:f8:d5:e8:af:64:36:
27:90:c6:a2:98:2a:03:4e:2e:7d:ba:cc:75:09:fa:a5:48:f8:
a6:75:38:c4:64:4b:06:68:92:8b:45:95:46:dd:c3:e3:03:53:
0b:87:a1:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAaEWSttFxK7B2omuVE9KVVHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDA3MTIxNjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmUxMjZlMjJhMzkxMjczMWRiMDU2OTQyMDJkZmNkYWY4MjYxOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoXQF8Fi97PHj21G5H3DXJSZP21h
qYCPrkFjtMQzMgmghI+bFe4+IXWw5XjLLfDInHfpBJw0OMZVel/he/rvw1vj32hC
niKw0M/L83WPqH3kvtmhe2x3EmHtQD520A+a58RL0HecHMqA94fHoqDvmyWAJ7po
j5Fr3QESZyJT4aIGhnuw65pWH+inj+zfG6QvpT2ZmuC1O1g7RN/yTjaNPGb8kPLT
Wx/a+s6PbWrQ7z/rlRfm43lt/5uoV8GDr/606e8MAYebluyD1pHc98U50cHup0N5
4+TkKzYswdqntRwchTMlNlmCnMxjFK7mB117Z5qlY1P1u4NIXJtcrqXqtwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFG/hJuIqORJzHbBWlCAt/Nr4JhlhMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYi1FbTRpbzVFbk1kc0ZhVUlDMzgydmdtR1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQABVORAwQA
Ba/cAwQABecaAwQABef9AwQATVoDAwQATVocAwQAVV0XAwQAWWpAAwQAWWpMAwQA
WZAhAwQAWZAqAwQAXmeqAwQBXmesAwQAXvmuAwQAuQ2fMA0GCSqGSIb3DQEBCwUA
A4IBAQDeb8/krSVcOxdoNXWk6jDAdEDBOOmmOqYlAT33kYzJtS/QNnp0byphQpFh
YsPDaIaM8cMqfmDQKcxlX26/79m/im/mZIlVNeWG0Pe6qucwCSBPrY5XaTj5eqCS
dHOZS1cHD+aZTlBUUQOSlbjLMRg5y4elBEX3uDDlgARMY7RQfxA5QnTrjNR4nZQY
5DmdDkYtiGFQAr8ZGIiAt10GY2hlweLrVwg14swIpGeFhtNoSDsIOIu5Cwpm16FN
/3rsjTS+/TJdSgpcmQLsieR9L2iY5nn41eivZDYnkMaimCoDTi59usx1CfqlSPim
dTjEZEsGaJKLRZVG3cPjA1MLh6Gi
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:18 2026 by rpki-client