Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bDpR4VWXheMfAJvwlNz30F0UYaY.roa
File: bDpR4VWXheMfAJvwlNz30F0UYaY.roa (raw, json)
Hash identifier: PHfhys5Q30S2cxwhPFDwpCiCWx9sxPLg031vNdF4KUE=
Subject key identifier: 6C:3A:51:E1:55:97:85:E3:1F:00:9B:F0:94:DC:F7:D0:5D:14:61:A6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FD5D41A3A5B9D2944CB7DEFAD1922A927
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bDpR4VWXheMfAJvwlNz30F0UYaY.roa
Signing time: Thu 06 Aug 2026 06:47:55 +0000
ROA not before: Thu 06 Aug 2026 06:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198364
IP address blocks: 5.175.137.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:d4:1a:3a:5b:9d:29:44:cb:7d:ef:ad:19:22:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 6 06:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c3a51e1559785e31f009bf094dcf7d05d1461a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:c3:f0:8e:9b:a5:95:50:20:b0:cf:38:75:
3f:71:d6:e5:77:52:10:27:37:5c:3d:2c:fb:d8:f2:
d3:41:0e:d8:ec:29:94:cd:bc:74:01:c5:eb:e2:e0:
a0:bc:7d:1a:29:a8:75:07:f3:54:7c:e4:d2:d5:f3:
a3:5d:e3:5f:bd:34:1e:a7:1e:a0:99:67:80:df:80:
c5:ee:2e:ff:a1:6f:85:14:ea:7b:ba:e6:0f:57:25:
79:2f:19:ed:07:fe:4d:ea:a6:79:41:08:f2:09:78:
0c:2c:c2:8b:13:be:a1:4b:c8:e3:2a:ef:09:25:4e:
0e:c4:3e:8e:66:0f:98:30:ed:ef:1b:b5:ee:6f:d0:
a7:8a:f9:08:14:b3:73:5f:41:7f:65:5a:30:10:3a:
5f:6e:6d:66:c3:41:cc:ec:1e:bc:bb:01:f0:ef:8e:
4a:31:ea:cd:f8:1d:36:bf:ae:a2:cc:52:99:13:5c:
1b:12:d7:33:ba:bd:b0:d4:39:c0:23:80:fe:49:9d:
11:c3:c9:4a:6b:ae:6b:76:de:e3:4e:e8:94:b1:c2:
f5:f7:8f:a0:dc:bf:f5:b8:06:b5:4a:7f:fd:57:85:
c0:0c:92:39:2e:d6:e1:1b:b0:3d:cc:e1:05:33:a8:
82:27:99:a3:92:42:49:cc:49:bf:e3:7c:b6:59:06:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3A:51:E1:55:97:85:E3:1F:00:9B:F0:94:DC:F7:D0:5D:14:61:A6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bDpR4VWXheMfAJvwlNz30F0UYaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.137.0/24
5.175.224.0/24
89.106.72.0/24
94.249.227.0/24
Signature Algorithm: sha256WithRSAEncryption
83:12:ae:3b:6d:75:17:4b:49:88:6a:13:3a:f6:14:0d:bb:83:
1d:f5:4f:a9:c5:0b:c1:3e:d9:c7:cd:42:93:a6:93:a9:63:7d:
20:b5:5b:30:3a:9a:a7:b0:95:4c:a3:8b:3e:b5:1b:62:0f:69:
e0:33:4b:b2:e4:54:16:02:c0:cd:94:46:0d:ab:28:db:48:98:
b3:1f:7e:67:26:c1:74:49:f1:4f:3c:38:88:82:e4:9c:34:a0:
d6:43:4b:36:c0:98:3a:0c:42:a7:09:0f:ac:c8:b3:e5:50:0c:
ee:7a:74:94:c8:eb:c2:25:f3:5c:32:f4:f8:19:d8:20:36:8f:
1e:71:f1:8e:21:e7:de:e7:0d:15:1d:9c:81:b6:4f:db:62:7f:
a6:2f:6d:ef:37:a0:37:92:14:f7:57:5b:57:4b:1d:e2:4a:82:
e8:b7:63:04:18:07:8f:2e:9c:08:4c:9c:cb:10:c1:55:30:f3:
5c:51:d5:09:ea:2b:0d:52:8e:66:82:36:65:37:55:27:32:e1:
b9:23:e0:1b:b8:80:f0:59:55:14:ae:b0:62:10:3e:6d:aa:2a:
7f:5d:51:45:74:71:23:54:96:d2:71:88:39:4b:5d:0e:d3:2d:
cb:2d:f9:e9:f5:ca:f7:86:ad:d0:84:ac:45:27:4e:55:26:2a:
14:21:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:43 2026 by rpki-client