Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bRZwlzJbATPeB-wmMcht6DtBsnM.roa
File: bRZwlzJbATPeB-wmMcht6DtBsnM.roa (raw, json)
Hash identifier: yxsDN7rPULMtMeEBKTAgSC8nDOdYrrz+JgWcbXVR4Y0=
Subject key identifier: 6D:16:70:97:32:5B:01:33:DE:07:EC:26:31:C8:6D:E8:3B:41:B2:73
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F2F8F3CE577FA00F091846C2782683C27
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bRZwlzJbATPeB-wmMcht6DtBsnM.roa
Signing time: Sat 04 Jul 2026 23:55:44 +0000
ROA not before: Sat 04 Jul 2026 23:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.175.248.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:8f:3c:e5:77:fa:00:f0:91:84:6c:27:82:68:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 4 23:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d167097325b0133de07ec2631c86de83b41b273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:74:fa:ee:5d:c9:89:f6:49:d6:9d:4b:62:
ce:17:0d:cc:e1:de:5b:ee:7e:22:e3:fc:37:af:a1:
b1:2d:ed:ad:1b:45:52:38:5d:e9:68:25:62:46:e1:
fe:95:05:8d:2a:a4:5e:18:7b:73:a3:a0:a3:e9:37:
2a:83:48:54:80:fd:38:61:fa:f1:e0:fa:a5:8f:60:
6f:24:a8:85:1f:ad:e0:a7:a2:d5:7e:00:1a:74:50:
1e:4d:9f:20:6a:b5:a6:63:bb:c2:6a:72:8c:d5:e7:
9e:cb:4c:3c:b7:a8:37:ab:f5:6c:00:8e:0b:03:fe:
6f:58:9c:07:5b:9b:a6:ec:73:f3:66:f3:f8:11:60:
70:94:08:30:48:15:00:0a:df:83:33:96:fd:08:86:
45:53:06:d8:c9:0f:3c:be:9e:44:ee:92:b2:e4:67:
ce:7c:d3:00:b8:d0:80:dd:a6:38:ff:b5:38:ac:f6:
53:b6:51:3c:87:fc:2f:c5:b4:3f:50:36:2c:7c:75:
b3:c1:e1:7f:72:84:72:27:1e:6c:c8:66:e2:eb:f1:
81:29:8b:d1:f3:5e:87:ad:d6:51:0c:ba:37:fa:1c:
3d:49:a9:ad:e0:9a:13:75:95:a6:30:fb:af:24:5e:
ac:02:82:7d:c7:00:05:ef:bc:3d:e7:86:ec:33:fb:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:70:97:32:5B:01:33:DE:07:EC:26:31:C8:6D:E8:3B:41:B2:73
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bRZwlzJbATPeB-wmMcht6DtBsnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.248.0/24
77.90.33.0/24
89.106.89.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:8c:28:2d:6e:17:8a:3f:9a:4f:22:f7:1c:e7:5b:49:43:02:
dc:f0:ba:81:6b:79:1f:a4:43:ab:2c:9f:37:da:96:3c:61:c1:
05:ed:7c:e0:bd:69:3d:e8:17:2b:ac:dd:24:74:f8:8f:da:aa:
df:d6:cd:80:97:be:4f:eb:55:cc:5d:c9:d2:ed:2c:6c:ca:ec:
17:bf:43:b9:60:7d:28:6e:00:f6:a1:aa:5d:28:93:47:97:a4:
12:04:7f:d0:ef:d6:f9:25:f4:6c:f6:4b:e3:5d:34:a8:c5:c5:
e4:74:ef:dc:86:ae:f2:eb:7e:3e:e0:cd:4b:27:e4:5f:f6:64:
ea:f7:be:79:25:1e:57:0b:8b:4d:8e:58:e9:5e:06:79:c8:3e:
9f:77:b4:3e:60:b5:bf:fe:c5:68:4b:38:d4:0a:44:bc:c0:e4:
c2:5d:40:a5:2d:60:a9:a6:01:3e:ba:dd:f3:6b:64:02:1e:64:
30:c8:fe:fc:74:08:53:25:de:7d:8f:5a:7f:67:48:40:9a:d3:
1f:50:06:74:98:3c:dd:53:48:e7:3f:e0:44:a2:dc:ed:5a:d3:
ec:f9:87:6e:24:87:30:f4:06:3a:1e:e8:d9:21:23:19:51:4b:
45:48:5e:a6:bf:3f:b5:35:0a:fe:b3:d0:7f:e5:9f:4d:54:4d:
bd:cb:d4:b8
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ8vjzzld/oA8JGEbCeCaDwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzA0MjM1NTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDE2NzA5NzMyNWIwMTMzZGUwN2VjMjYzMWM4NmRlODNiNDFiMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR10+u5dyYn2SdadS2LOFw3M4d5b
7n4i4/w3r6GxLe2tG0VSOF3paCViRuH+lQWNKqReGHtzo6Cj6Tcqg0hUgP04Yfrx
4Pqlj2BvJKiFH63gp6LVfgAadFAeTZ8garWmY7vCanKM1eeey0w8t6g3q/VsAI4L
A/5vWJwHW5um7HPzZvP4EWBwlAgwSBUACt+DM5b9CIZFUwbYyQ88vp5E7pKy5GfO
fNMAuNCA3aY4/7U4rPZTtlE8h/wvxbQ/UDYsfHWzweF/coRyJx5syGbi6/GBKYvR
816HrdZRDLo3+hw9Samt4JoTdZWmMPuvJF6sAoJ9xwAF77w954bsM/sAIQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFG0WcJcyWwEz3gfsJjHIbeg7QbJzMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYlJad2x6SmJBVFBlQi13bU1jaHQ2RHRCc25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABa/4AwQA
TVohAwQAWWpZAwQAXvm+AwQAXvnLAwQAXvnvMA0GCSqGSIb3DQEBCwUAA4IBAQDi
jCgtbheKP5pPIvcc51tJQwLc8LqBa3kfpEOrLJ832pY8YcEF7XzgvWk96BcrrN0k
dPiP2qrf1s2Al75P61XMXcnS7SxsyuwXv0O5YH0obgD2oapdKJNHl6QSBH/Q79b5
JfRs9kvjXTSoxcXkdO/chq7y634+4M1LJ+Rf9mTq9755JR5XC4tNjljpXgZ5yD6f
d7Q+YLW//sVoSzjUCkS8wOTCXUClLWCppgE+ut3za2QCHmQwyP78dAhTJd59j1p/
Z0hAmtMfUAZ0mDzdU0jnP+BEotztWtPs+YduJIcw9AY6HujZISMZUUtFSF6mvz+1
NQr+s9B/5Z9NVE29y9S4
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client