Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hdm2vk2ksbNaw6oOfz3bNvnu5UU.roa
File: hdm2vk2ksbNaw6oOfz3bNvnu5UU.roa (raw, json)
Hash identifier: l+xNH/T21K3Fd8icoQ1r+QKXwiZme+gqoUBym4hnZU0=
Subject key identifier: 85:D9:B6:BE:4D:A4:B1:B3:5A:C3:AA:0E:7F:3D:DB:36:F9:EE:E5:45
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E837E394E72DB2FCF2CC74A293CCEF54E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hdm2vk2ksbNaw6oOfz3bNvnu5UU.roa
Signing time: Mon 01 Jun 2026 14:02:28 +0000
ROA not before: Mon 01 Jun 2026 14:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:7e:39:4e:72:db:2f:cf:2c:c7:4a:29:3c:ce:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 1 14:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85d9b6be4da4b1b35ac3aa0e7f3ddb36f9eee545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:fe:28:7d:80:99:b7:ba:a3:22:b5:08:ce:
67:53:c1:d0:6c:d5:bd:68:05:87:44:85:ae:d3:7d:
44:55:b9:0c:4d:d9:62:9a:85:7b:9b:96:db:27:ec:
36:d0:5e:38:70:95:05:0a:d3:bd:94:38:61:fb:31:
0e:4f:33:bb:72:5b:25:c1:59:1c:59:48:b1:52:25:
1e:7d:b3:8f:0f:9a:76:20:c2:ba:84:8e:2b:00:1d:
93:89:95:33:20:a1:f9:99:39:59:a3:d3:76:db:e7:
3b:ee:e5:df:99:51:7e:68:67:b8:73:4c:3d:2b:f0:
ff:09:5e:b1:3d:95:cc:b5:1e:34:a0:39:16:c5:c3:
d9:47:a5:f8:dd:ea:00:07:ae:e5:c5:03:42:7c:20:
42:14:68:fe:12:46:3b:c8:2f:50:c4:bc:ef:6b:a5:
b6:fb:ce:a0:cb:8c:af:28:66:eb:97:7e:80:97:d0:
d0:0a:4c:2b:cd:0c:07:d1:6c:e5:92:e9:1e:be:83:
3d:90:97:9a:c8:30:3e:63:e0:86:d0:11:91:84:2e:
f7:ad:6a:c7:11:e5:2e:c6:48:df:ba:6e:e4:a7:75:
a4:79:3f:31:38:01:21:80:a0:4d:4f:bc:19:72:c9:
fb:12:9a:be:cf:2a:f0:fa:d0:ee:0f:d6:12:2e:cc:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:B6:BE:4D:A4:B1:B3:5A:C3:AA:0E:7F:3D:DB:36:F9:EE:E5:45
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hdm2vk2ksbNaw6oOfz3bNvnu5UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.175.221.0/24
87.239.131.0/24
89.106.73.0/24
89.106.75.0/24
89.106.77.0/24
89.106.82.0/24
94.249.247.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:bf:7b:8e:8b:7c:af:5a:46:59:92:f3:87:07:3a:15:d8:fe:
db:1b:b8:d8:ac:30:d3:aa:d9:4d:52:92:26:ef:6c:9e:38:00:
8e:96:4d:28:e9:ec:41:5f:3a:31:2d:71:29:0f:31:42:c1:e4:
62:07:8d:41:1b:9a:9c:fd:e5:26:e5:88:1a:4c:bc:3e:48:40:
96:d0:83:68:97:38:85:79:94:2a:8e:1f:5f:94:3d:e1:af:b2:
39:18:a2:14:2c:43:a4:3e:0a:99:ff:f9:0d:d5:98:8c:a9:e5:
82:fd:b4:27:b5:c4:5b:ae:e4:9b:e7:5a:e8:0f:08:93:d8:b3:
d2:df:3f:82:ab:6a:d7:81:8b:88:72:58:20:19:e5:41:c0:02:
0d:98:89:d7:fa:cf:f0:0e:1b:91:3d:9a:de:ae:a4:e1:ea:81:
3d:de:6f:17:d3:d0:73:eb:1f:4f:36:32:7c:31:17:5f:7a:14:
22:cc:c9:8b:02:fb:ff:31:82:94:cf:4e:ce:7f:d1:df:e9:ab:
cb:f5:38:16:3c:50:3f:29:74:06:ec:71:1a:0f:a6:d4:bc:92:
2a:03:06:e4:2c:af:8e:d2:42:f9:1b:06:68:be:ba:e9:85:50:
20:b1:e5:dd:5b:3a:26:40:d9:07:84:c6:99:ed:3c:8a:8c:ed:
ba:0e:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:21 2026 by rpki-client