Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dY3N5Kr5k-JVyuOHGHBT_oDUJd4.roa
File: dY3N5Kr5k-JVyuOHGHBT_oDUJd4.roa (raw, json)
Hash identifier: pdFAG5w5BrYlq0y/kWzO0TfJ08HWdcZp+hVjf6ys/08=
Subject key identifier: 75:8D:CD:E4:AA:F9:93:E2:55:CA:E3:87:18:70:53:FE:80:D4:25:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D78A9B4559EC51F69983F1285E58E09E6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dY3N5Kr5k-JVyuOHGHBT_oDUJd4.roa
Signing time: Fri 10 Apr 2026 18:31:20 +0000
ROA not before: Fri 10 Apr 2026 18:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
77.90.63.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 04:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:a9:b4:55:9e:c5:1f:69:98:3f:12:85:e5:8e:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 10 18:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=758dcde4aaf993e255cae387187053fe80d425de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:97:b7:87:63:21:65:8a:13:4a:ef:92:ab:
2a:7b:8b:eb:a9:67:4e:80:bf:5a:e4:55:50:dc:b3:
33:cc:94:ce:07:eb:de:4b:cc:5c:ea:e2:ac:6d:d9:
c8:06:ee:fc:dd:3c:09:52:f4:50:b9:51:83:72:21:
08:d7:92:8b:e3:10:97:f3:84:c1:b3:11:c6:1c:2d:
27:fb:31:77:e1:9d:04:98:87:ee:21:26:cb:1c:db:
a5:7f:34:e4:68:35:17:65:03:26:b6:b6:a9:9c:f1:
bd:5f:af:90:32:ec:9f:a1:dc:3a:15:0e:f3:64:f8:
d2:c7:ac:ef:d4:db:8d:ec:3b:db:8e:0d:91:01:f4:
eb:75:74:7d:8f:e3:4a:82:0a:df:f7:a1:3a:ff:c8:
18:1a:5c:64:47:6b:d3:6b:ba:8e:01:20:f6:a5:cc:
db:97:61:34:65:cc:16:a7:71:ba:8c:ca:1d:a4:ce:
a2:b2:ff:c3:2c:04:4c:aa:1f:b7:32:de:75:12:2b:
f3:63:32:18:b8:af:3f:4e:f8:c3:c2:85:a3:48:7f:
98:31:f2:53:d9:df:f2:97:e3:18:08:3d:cc:e0:23:
da:df:3e:c5:71:94:47:41:37:9e:3e:0e:da:9d:7c:
af:52:cc:63:48:ec:7f:95:d3:e1:2b:99:b8:b7:a0:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:CD:E4:AA:F9:93:E2:55:CA:E3:87:18:70:53:FE:80:D4:25:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dY3N5Kr5k-JVyuOHGHBT_oDUJd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.118.0/23
77.90.15.0/24
77.90.52.0/24
77.90.60.0/23
77.90.63.0/24
185.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
26:f5:52:8c:62:a2:ed:5f:7f:b1:7b:f0:a4:d6:7e:4c:1e:90:
8c:06:86:8b:97:b3:2d:36:19:20:3b:fc:59:15:d2:fe:c3:43:
89:c3:b4:e6:38:47:25:f4:01:26:b4:1b:9d:71:a1:c4:cc:23:
9b:db:00:9e:d6:ee:2e:03:e2:18:13:ab:95:02:0c:5d:06:da:
ce:81:e4:8f:68:14:49:f7:df:7f:77:e7:66:df:03:95:73:0b:
0b:b1:ff:90:3a:8b:b3:6f:dc:17:29:56:fb:27:29:d1:47:2d:
e8:ce:8d:28:ba:1b:cb:71:c4:79:af:b8:88:9f:3c:25:98:78:
49:62:c5:2f:c2:d1:c2:30:9e:a3:7a:02:5a:03:c7:d8:3d:c1:
fd:f7:da:a0:ff:d6:3c:00:0b:c6:93:52:0e:59:a9:2d:f3:5a:
aa:3c:63:47:19:af:12:97:e6:c9:df:8e:b8:d9:21:cf:c2:ef:
48:3f:ae:0e:0b:84:48:7b:57:5c:df:f4:f1:aa:1a:23:c1:b3:
d5:86:e7:c9:c7:00:79:8d:68:64:b5:20:7a:7e:82:37:29:6b:
a5:67:e0:8e:1b:c9:d1:ee:33:3e:21:d5:0a:ce:e3:09:72:00:
62:1a:73:9e:34:ac:cd:79:f8:1f:4a:8d:6d:22:36:e6:9b:f0:
c8:95:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 13:54:55 2026 by rpki-client