Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e4uybMELldBIObMu-vZP_Su7os0.roa
File: e4uybMELldBIObMu-vZP_Su7os0.roa (raw, json)
Hash identifier: TQHCCBuL9UMg18BzKPeGWDy59NpeJvsVJVHcIZTsmzQ=
Subject key identifier: 7B:8B:B2:6C:C1:0B:95:D0:48:39:B3:2E:FA:F6:4F:FD:2B:BB:A2:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E842219D36D9DB7C5CB8BEDD36A9234C5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e4uybMELldBIObMu-vZP_Su7os0.roa
Signing time: Mon 01 Jun 2026 17:01:27 +0000
ROA not before: Mon 01 Jun 2026 17:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:22:19:d3:6d:9d:b7:c5:cb:8b:ed:d3:6a:92:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 1 17:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b8bb26cc10b95d04839b32efaf64ffd2bbba2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:ca:f5:4e:ee:39:ca:35:cb:bf:f0:d0:5b:
c3:f2:76:97:3f:7b:c8:2f:e7:f8:09:29:29:42:cf:
6a:83:df:b6:1e:31:7f:e7:9f:7f:93:ef:ad:29:aa:
92:05:1d:af:b1:d6:77:d8:5f:7d:d3:3c:9e:7b:ce:
7d:b8:26:2c:11:e4:0d:be:aa:67:4c:4f:9a:c9:40:
ae:93:04:10:23:60:c4:b3:f1:f6:1f:1e:96:9d:45:
ae:23:8f:dd:48:90:85:a6:ab:22:5f:51:7d:96:ea:
cf:21:f3:ea:04:35:52:bf:2e:d1:de:e4:88:58:8a:
ee:11:e5:c2:04:39:7d:e1:a2:b9:78:57:28:cf:bf:
1f:92:be:dc:93:78:9d:27:1a:87:48:20:41:eb:26:
c0:16:5f:69:0e:0e:1a:0e:01:3e:dd:4d:ee:02:9d:
88:0d:1b:b5:37:54:63:05:9e:3c:8d:9c:1b:14:89:
71:22:de:12:2a:14:a8:04:0f:c8:00:d4:46:32:7f:
8b:7c:cf:21:12:f6:90:98:02:4c:d4:8e:cb:3b:7b:
30:74:a5:bc:1f:8b:19:ff:ac:0a:b7:b7:84:6a:0a:
52:9e:d7:c8:24:4d:7d:5f:2e:0b:c7:26:1e:cc:40:
7e:f5:ac:a7:ba:aa:88:ee:f0:20:7f:91:15:7c:fd:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:B2:6C:C1:0B:95:D0:48:39:B3:2E:FA:F6:4F:FD:2B:BB:A2:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e4uybMELldBIObMu-vZP_Su7os0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.231.107.0/24
89.106.74.0/24
Signature Algorithm: sha256WithRSAEncryption
00:27:8f:1e:30:3a:da:6a:23:53:4a:51:fd:44:b9:89:75:f5:
4a:2a:63:e4:57:10:be:f9:28:8d:07:dd:5d:39:2c:e7:2e:4a:
b3:9e:fa:d5:86:29:30:93:ac:6f:3e:69:fa:dc:9e:49:76:1a:
1a:93:1d:37:46:db:e2:a1:0c:54:81:7e:77:09:0e:e1:ac:3e:
4b:16:f8:72:e6:c4:cc:84:eb:8f:de:d5:91:ea:43:9e:87:75:
3e:6d:a0:c1:b7:d5:1a:e1:fe:b6:f0:91:54:25:8f:e9:88:7f:
3a:ce:6f:ca:7d:a7:e9:d1:e9:12:fe:1b:6f:c4:42:28:76:61:
df:f6:7f:7c:65:90:6b:37:75:ef:d4:e6:8f:80:d4:02:ad:87:
c8:f5:ae:db:08:ed:6a:19:1f:0e:72:2c:2f:b1:0e:1f:c8:4b:
a0:36:4e:c5:e2:22:d2:22:71:97:f8:88:5c:e5:41:fd:53:03:
4b:86:99:8b:1e:b2:e7:d5:c3:ed:63:1a:5c:15:e7:89:c4:8c:
fb:08:67:95:80:f0:bd:81:e8:4c:1c:b7:6e:07:96:89:4e:85:
34:42:0b:24:3a:a5:eb:de:7e:83:dc:d2:88:26:61:ff:7c:2e:
92:d7:e5:69:c7:62:a3:53:ac:1f:03:73:16:fa:97:7e:ed:7d:
9e:6c:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client