Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jwBJUdFQvvfBt0wMHqMHealVFSA.roa
File: jwBJUdFQvvfBt0wMHqMHealVFSA.roa (raw, json)
Hash identifier: otEIKA5vfLwU80m7p2wc0pqW4A8+62vtauVGP4LlUgw=
Subject key identifier: 8F:00:49:51:D1:50:BE:F7:C1:B7:4C:0C:1E:A3:07:79:A9:55:15:20
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F74CB67389BB4C4A1C5775F3EE78EBCF8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jwBJUdFQvvfBt0wMHqMHealVFSA.roa
Signing time: Sat 18 Jul 2026 10:35:15 +0000
ROA not before: Sat 18 Jul 2026 10:35:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
5.231.45.0/24 maxlen: 24
5.231.59.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
85.93.9.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:cb:67:38:9b:b4:c4:a1:c5:77:5f:3e:e7:8e:bc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 18 10:35:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f004951d150bef7c1b74c0c1ea30779a9551520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:58:52:a7:aa:9c:02:1d:b7:93:3c:92:7f:
e8:8d:4a:62:05:91:b8:5a:b3:3e:4b:7c:f0:6b:69:
71:b8:85:6d:bc:e6:d3:48:1b:3f:cc:13:f6:91:e2:
b0:ce:2b:3c:1c:f3:48:a6:12:53:d9:ee:81:65:70:
3c:92:2f:67:f4:4e:33:51:66:db:0e:b6:5c:44:f9:
5d:66:9a:77:d5:25:c9:e5:26:9d:4d:87:5a:a7:ed:
b7:9d:cf:14:0a:88:3a:3c:9a:8b:43:15:88:d5:4e:
95:1b:d0:2f:70:83:99:96:0f:31:54:7a:de:ed:52:
86:15:75:a2:7b:47:39:88:29:97:b0:df:a7:8c:13:
de:07:af:e8:58:a1:b4:44:05:51:6f:d7:f7:b0:29:
72:99:6c:72:ec:51:84:32:c3:66:9b:93:00:cd:8d:
b3:c6:bc:00:ff:bf:d5:f8:e0:e4:51:20:95:e9:3c:
9d:2d:6b:8c:da:32:ea:0d:14:e0:94:55:86:1c:5b:
8e:f3:ab:64:f3:8a:8c:65:34:9a:82:7b:d3:b0:10:
7c:d4:1d:cf:77:f1:7b:42:b8:77:68:e5:27:6b:f6:
67:ee:2e:23:70:89:a0:cc:72:9f:ce:c6:87:b0:13:
7d:83:18:6d:c4:58:b6:7a:f6:78:41:12:9e:b0:84:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:49:51:D1:50:BE:F7:C1:B7:4C:0C:1E:A3:07:79:A9:55:15:20
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jwBJUdFQvvfBt0wMHqMHealVFSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.231.28.0/24
5.231.45.0/24
5.231.59.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
85.93.9.0/24
89.144.8.0/24
89.144.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:1c:5f:12:81:54:bf:0a:df:3c:7d:d4:4b:d6:f1:c0:8a:
66:8a:9f:40:7d:37:a3:77:24:14:f6:26:51:12:2d:67:46:04:
5a:c2:63:87:fd:68:8e:76:cd:ac:28:c5:f6:d8:86:28:cc:7b:
73:3a:91:27:c2:ad:94:2f:aa:73:8d:84:71:75:b9:4a:f0:70:
d0:87:58:5b:91:cd:36:74:e7:68:6d:88:55:d8:00:61:55:97:
a8:7f:ab:ca:08:c3:aa:a7:fa:6c:37:55:ec:e5:28:f1:22:f3:
52:41:ad:03:82:25:c4:9b:01:a7:3b:72:18:fd:ea:92:b8:11:
7b:39:f3:2f:14:e8:49:29:1d:8b:92:45:7e:e0:53:14:05:1b:
22:42:70:9a:4a:40:86:66:d2:b5:4f:b8:55:2e:08:fb:95:d9:
0e:b4:c1:97:ef:5b:32:2b:fb:0f:39:a1:3f:9d:6b:b5:ac:09:
11:09:ef:a6:77:28:a8:97:e2:f4:eb:bc:19:12:47:b7:73:61:
4c:e9:e0:2b:12:da:56:c7:49:f2:cb:2a:07:d3:87:df:6d:d2:
06:4d:ad:86:52:b5:75:f7:98:4b:5c:62:80:7a:2e:99:40:a0:
04:57:43:f8:e3:13:f0:a9:17:ee:bd:84:36:bb:df:ca:33:c2:
14:f7:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client