Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kppynRnEDABXKqxqj5jBM0eWcZY.roa
File: kppynRnEDABXKqxqj5jBM0eWcZY.roa (raw, json)
Hash identifier: tupttPOUJ34UeYuk2uSw3l3PP/7vqBCR+hst9xdGds8=
Subject key identifier: 92:9A:72:9D:19:C4:0C:00:57:2A:AC:6A:8F:98:C1:33:47:96:71:96
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A152543E6B31E0E153DA15E4A87BF37CCB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kppynRnEDABXKqxqj5jBM0eWcZY.roa
Signing time: Mon 19 Oct 2026 04:03:35 +0000
ROA not before: Mon 19 Oct 2026 04:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.175.226.0/24 maxlen: 24
5.175.227.0/24 maxlen: 24
5.230.49.0/24 maxlen: 24
5.230.153.0/24 maxlen: 24
5.231.64.0/24 maxlen: 24
5.231.88.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.255.0/24 maxlen: 24
85.118.166.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
94.249.154.0/24 maxlen: 24
94.249.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:54:3e:6b:31:e0:e1:53:da:15:e4:a8:7b:f3:7c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 04:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=929a729d19c40c00572aac6a8f98c13347967196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:09:2b:d5:2b:28:c3:a1:98:b1:9b:22:7b:
15:02:47:ec:96:59:cb:b4:e2:bb:6f:24:49:f2:e0:
dd:c6:9b:c2:c1:30:67:56:da:a1:37:9e:b3:8f:d9:
7a:a6:d8:d8:fd:2b:53:26:13:94:6c:49:c7:fb:6e:
cf:74:ae:d5:50:fc:a5:6c:43:00:a8:ec:ac:78:92:
0e:72:6b:0a:f2:34:e0:a9:c3:0c:aa:65:8c:eb:cd:
18:c4:9b:fa:e0:72:80:63:0e:20:18:74:c0:59:d4:
d2:e7:37:39:1a:48:79:9f:13:46:e2:e0:8e:49:99:
0d:81:21:6a:81:ff:63:47:b6:ba:ab:7c:b2:32:f8:
38:ac:93:dd:2c:05:10:8f:75:fd:e9:ae:51:72:8f:
ad:b3:7e:38:d2:8f:13:f0:8b:a6:da:a5:b1:ee:29:
5e:7d:36:e4:9d:c2:e5:4b:ca:e5:b9:69:03:0b:1d:
7f:c2:2b:78:5f:91:59:25:35:17:35:f5:57:cb:b2:
76:e5:71:3a:cf:7e:8b:37:04:e2:0a:8f:ec:2d:64:
4d:8c:34:6e:89:35:98:6c:95:fb:ae:89:fb:2b:c2:
ca:f9:fc:f2:e4:ab:ae:f6:87:ca:39:18:99:16:8c:
f0:c9:1b:64:65:68:0f:10:c5:4d:e1:a7:b3:8d:91:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:72:9D:19:C4:0C:00:57:2A:AC:6A:8F:98:C1:33:47:96:71:96
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kppynRnEDABXKqxqj5jBM0eWcZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.175.226.0/23
5.230.49.0/24
5.230.153.0/24
5.231.64.0/24
5.231.88.0/24
5.231.207.0/24
5.231.255.0/24
85.118.166.0/24
89.106.95.0/24
94.249.154.0/24
94.249.171.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:94:40:fe:e6:e8:b6:f4:96:f0:30:50:19:3e:fb:61:2b:
89:f1:66:b6:6f:8b:98:73:03:e3:97:f8:c7:60:b9:b5:7b:64:
80:66:92:09:47:ca:f2:c4:f1:c9:99:3e:75:06:f4:a4:d8:7d:
36:8a:30:86:88:bd:fb:01:64:cc:16:c3:36:87:72:4c:2f:14:
30:f0:3c:e4:2d:11:44:5d:f4:4d:85:90:df:eb:48:7d:4f:b7:
4c:53:19:58:fb:e0:4f:5e:e2:f8:8c:9c:78:ee:a7:73:2d:cd:
98:ff:fa:3d:f7:52:88:55:1f:39:f1:d8:db:a6:1a:dd:4b:48:
45:ce:e7:ec:70:d1:27:fc:86:2f:9e:b4:1c:e9:36:93:7d:7a:
70:83:9b:69:96:01:28:82:26:05:ec:cd:75:11:20:c4:9f:a6:
c5:72:ca:f5:5a:a4:02:fc:b2:8f:e5:41:e2:6e:4c:43:8a:d6:
04:bd:e9:3b:93:ad:69:70:dd:b0:a5:24:44:0e:ae:0f:20:46:
e0:33:60:58:f5:6c:8c:fc:48:a8:1d:b7:9e:8e:62:d0:60:06:
10:95:f1:22:a5:32:6b:c5:d1:0c:c5:56:55:04:0a:f3:d4:88:
c3:d0:73:5a:9e:00:b3:fb:6a:9f:37:fd:39:62:78:89:70:d6:
30:2f:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:58:17 2026 by rpki-client