Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bVjLECzhC4ET_0qz4I9-Io2RgrU.roa
File: bVjLECzhC4ET_0qz4I9-Io2RgrU.roa (raw, json)
Hash identifier: uoVcARsxOwnGFk1I31lxhCGO25BvY502w8efSSuXEYs=
Subject key identifier: 6D:58:CB:10:2C:E1:0B:81:13:FF:4A:B3:E0:8F:7E:22:8D:91:82:B5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FD107E877F4C28B8A341CDC01B116F66A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bVjLECzhC4ET_0qz4I9-Io2RgrU.roa
Signing time: Wed 05 Aug 2026 08:26:24 +0000
ROA not before: Wed 05 Aug 2026 08:26:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.230.125.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.44.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
89.144.15.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:07:e8:77:f4:c2:8b:8a:34:1c:dc:01:b1:16:f6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 08:26:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d58cb102ce10b8113ff4ab3e08f7e228d9182b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:dc:ae:90:27:cf:b2:e1:c3:50:27:57:29:
ff:fb:e1:48:9f:9d:f5:27:7b:99:8d:f0:2f:23:61:
4c:27:51:8c:2c:76:d5:0a:11:fe:ed:e0:ba:18:3a:
c6:f0:f0:d2:dd:2e:eb:6f:fd:2d:91:b1:78:2f:90:
4c:8a:9e:af:af:f0:28:64:67:c8:45:05:fe:4c:4f:
28:d4:29:24:de:74:cc:92:13:75:ac:89:78:96:78:
8d:be:32:db:c5:e5:a5:6b:c3:d0:d1:86:84:be:d2:
7c:ff:5c:0f:6e:92:2c:db:86:11:37:13:14:7e:02:
a8:13:1d:97:aa:d2:eb:de:72:16:f5:d5:22:ed:23:
47:6f:91:71:3c:ec:69:4d:24:72:64:47:fb:43:3a:
b6:c5:1d:f8:60:1e:2b:24:62:10:6a:41:b5:78:b9:
9c:15:af:97:da:27:15:81:01:97:6d:04:73:1f:43:
7d:9c:d1:76:3e:73:f2:6c:23:e9:dc:62:54:aa:93:
77:e3:8b:b9:b5:2c:3e:3f:f5:ec:c2:d5:1d:81:d1:
3e:79:30:86:5b:9c:6f:15:c3:1d:79:04:e0:34:38:
80:4f:82:24:e1:4b:cc:d6:2b:f3:dc:4d:37:2b:de:
98:e0:98:e8:b4:bb:ee:2a:20:ea:7d:2c:8c:2f:06:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:CB:10:2C:E1:0B:81:13:FF:4A:B3:E0:8F:7E:22:8D:91:82:B5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bVjLECzhC4ET_0qz4I9-Io2RgrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.230.125.0/24
5.231.29.0/24
5.231.44.0/24
5.231.204.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
89.144.15.0/24
185.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e2:cd:6a:76:3f:fd:ee:2a:32:5f:ba:6c:e0:36:17:a7:c1:
fe:0f:c7:0d:63:9e:ff:3f:42:72:22:4c:77:b7:30:e4:1c:77:
d7:fe:22:b8:79:18:4d:04:40:c9:c7:65:e1:56:01:95:e8:b3:
47:24:68:17:e4:d9:64:81:31:31:9e:1f:3b:e5:f5:91:58:3d:
d0:a0:d9:cb:09:a2:96:20:75:5d:01:17:2a:2b:ec:cf:e5:48:
fe:fe:95:c6:43:9f:76:10:a9:6a:d5:c8:e1:95:d9:73:08:64:
c1:f5:17:86:53:3e:1f:0c:13:53:30:18:2f:91:07:17:79:4a:
8b:de:86:d1:1c:da:4c:4e:5c:6a:ff:b4:d1:49:cd:c2:07:14:
1b:e2:d4:59:f1:e4:0a:76:07:61:d1:e2:41:24:f0:64:44:75:
0b:d7:a3:e0:93:92:25:23:bb:5e:cb:1a:72:da:1f:27:d2:cf:
93:6e:fc:58:b5:07:e5:28:99:fe:42:74:a6:1a:9d:95:33:36:
41:b7:94:ed:4f:fe:d8:02:e6:5f:e9:83:26:a8:fa:60:94:96:
f2:37:c5:3d:af:0b:b8:55:fd:fb:89:b3:df:8f:ec:f4:22:42:
fc:09:d5:07:f1:a0:c5:45:9c:a5:14:f6:7e:d6:fe:11:d9:08:
ff:fd:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:44 2026 by rpki-client