Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gQOgsqcrSXe-J0hzq578TIjK6FQ.roa
File: gQOgsqcrSXe-J0hzq578TIjK6FQ.roa (raw, json)
Hash identifier: VOTmA5PBMQJauEU6JcL+Ouz9tx7KHTsqECr3Vzgsqjg=
Subject key identifier: 81:03:A0:B2:A7:2B:49:77:BE:27:48:73:AB:9E:FC:4C:88:CA:E8:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A102876A9E57339A8B6FAAE96E9E56C696
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gQOgsqcrSXe-J0hzq578TIjK6FQ.roa
Signing time: Sat 03 Oct 2026 16:09:51 +0000
ROA not before: Sat 03 Oct 2026 16:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.252.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:87:6a:9e:57:33:9a:8b:6f:aa:e9:6e:9e:56:c6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 3 16:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8103a0b2a72b4977be274873ab9efc4c88cae854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:88:96:7b:a3:40:e5:1b:0e:a4:6f:75:d1:
83:a9:2a:6f:d8:8a:13:64:8f:3a:36:8f:de:ad:8f:
be:8c:a3:cb:ff:5c:e4:ee:8b:b0:f4:7c:4b:fa:fc:
a3:e7:be:3f:55:72:a3:cc:49:31:1f:87:63:48:b7:
b9:1f:5a:2e:3e:ac:f5:e9:f8:bb:f2:78:42:2b:a8:
a2:18:45:31:bf:e4:b6:74:d4:f5:85:31:9e:55:e5:
36:35:37:c4:4f:81:b8:67:93:c5:bc:f1:8b:d9:c2:
d2:65:e6:85:47:a2:d8:6e:c6:94:50:53:29:3d:be:
19:d8:89:ad:69:35:c0:65:2d:fe:e2:a0:90:e3:70:
6e:d9:f3:35:8e:80:a5:d0:07:b5:49:e7:b3:c1:fa:
60:58:c9:43:bd:0f:cd:71:c0:7b:1f:9a:79:88:30:
3e:03:f4:b1:6e:a1:b1:15:4e:24:14:62:83:11:42:
7e:82:0a:38:b3:f0:0b:d4:6c:7a:18:b2:df:af:c9:
a2:26:b1:a2:52:8b:01:71:53:df:76:d9:99:f7:2b:
47:f3:bd:c4:57:a2:2a:48:a3:7f:bc:34:a1:49:6f:
44:57:b5:72:dd:37:16:c3:14:aa:7d:6d:17:5e:41:
fd:f0:ac:b0:aa:47:83:ff:cc:39:36:60:bb:d5:38:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:A0:B2:A7:2B:49:77:BE:27:48:73:AB:9E:FC:4C:88:CA:E8:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gQOgsqcrSXe-J0hzq578TIjK6FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.175.223.0/24
5.231.107.0/24
5.231.252.0/24
89.106.74.0/24
89.144.46.0/24
94.249.185.0/24
94.249.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:88:73:e8:ed:60:39:32:f3:5d:b5:d2:9c:60:22:03:d1:fb:
f3:47:36:8d:a6:59:3f:2a:b4:60:28:ef:04:16:1f:27:95:a7:
18:b0:56:38:e2:74:5e:76:68:9d:ad:8a:95:c9:30:b4:8b:d2:
ac:fb:f5:40:cf:7d:c5:0c:03:a7:62:74:4b:ba:a4:7e:fb:c7:
08:da:a2:31:41:af:32:4d:7a:cf:58:26:58:1b:9f:3e:42:7d:
77:1a:94:b9:5c:1d:f5:ef:89:ee:88:80:a7:35:3f:ac:50:4a:
78:2b:a8:3b:6d:42:35:de:2a:88:4a:f6:33:18:27:84:42:e4:
39:92:ed:2c:76:a7:04:9b:7a:86:85:4a:0f:8f:f3:66:c4:5f:
ea:65:c1:86:4b:7d:2d:40:b4:01:39:64:27:27:dd:e0:b7:55:
e8:9b:78:e1:da:c4:af:96:8f:a3:07:62:04:f9:af:46:d8:d0:
c3:0c:82:ee:8b:9d:df:a4:eb:ad:01:8c:f7:8c:b0:40:1f:e1:
8a:52:7c:d4:aa:ad:8f:1e:a5:b3:e1:79:8d:43:b5:03:f5:40:
1d:74:25:6b:8f:ad:f0:50:db:b9:48:97:0b:1b:58:6e:97:36:
43:ff:8a:5f:1c:39:1f:40:1e:d7:42:71:3a:62:44:9c:8b:89:
4f:1d:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:09:44 2026 by rpki-client