Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/minegiBLeNzb6j4MSug8Z4tRgUc.roa
File: minegiBLeNzb6j4MSug8Z4tRgUc.roa (raw, json)
Hash identifier: zWmij9r1LsekcNQ1kLjmMsP9loAZqzYjRIjYznQg8jY=
Subject key identifier: 9A:29:DE:82:20:4B:78:DC:DB:EA:3E:0C:4A:E8:3C:67:8B:51:81:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A130211E5B90071D44A6CA2E8493D9D58C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/minegiBLeNzb6j4MSug8Z4tRgUc.roa
Signing time: Mon 12 Oct 2026 12:40:39 +0000
ROA not before: Mon 12 Oct 2026 12:40:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202147
IP address blocks: 5.83.137.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.118.165.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:21:1e:5b:90:07:1d:44:a6:ca:2e:84:93:d9:d5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 12 12:40:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a29de82204b78dcdbea3e0c4ae83c678b518147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:f0:0e:35:bf:bc:28:f5:b9:dc:1c:0f:02:
97:0e:d8:ba:71:13:6c:39:27:b0:b7:18:52:af:62:
87:b4:a5:8a:a4:0e:1e:d0:07:59:ca:b1:80:c1:25:
a5:e5:ec:79:a9:a5:43:3e:80:38:d2:69:59:7c:b0:
d6:83:cd:91:99:b0:45:1a:3f:8a:77:4a:80:6a:83:
40:e9:81:58:34:ae:9c:0a:c5:ab:8e:40:e2:09:d2:
45:5c:e5:67:4c:55:8e:20:92:94:8b:ab:7d:e2:7b:
35:06:64:ea:27:23:8b:5b:79:f1:36:83:02:2c:58:
77:81:85:e4:cc:70:95:9a:fe:3c:6d:02:27:fc:27:
fc:f1:be:18:2a:dc:de:fa:de:b8:af:d7:3c:02:f9:
1d:a9:7e:0b:9c:da:39:b5:65:4c:57:4a:58:ac:c0:
43:96:16:5b:c6:5f:1b:c8:2f:a6:c9:0f:93:34:da:
22:a3:00:45:3d:a9:ae:f1:21:28:62:30:1e:c3:cd:
0b:6f:fd:dc:40:da:b2:b7:6e:87:ef:ad:c2:ff:3d:
ef:86:80:7d:0f:81:47:94:d9:7c:c7:e5:fc:a6:65:
55:f0:f2:48:c8:4d:78:05:47:c0:2b:ee:f2:70:92:
17:f6:7e:e1:e2:0d:86:bf:6e:32:8d:43:36:46:35:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:DE:82:20:4B:78:DC:DB:EA:3E:0C:4A:E8:3C:67:8B:51:81:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/minegiBLeNzb6j4MSug8Z4tRgUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.137.0/24
77.90.36.0/24
85.93.1.0/24
85.118.165.0/24
94.249.205.0/24
95.215.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f0:82:98:6c:c4:07:8f:1f:f1:4d:10:b3:d3:53:38:76:61:
56:c3:be:d6:4e:74:4e:23:7a:49:8b:49:f7:11:e8:1e:8c:3b:
3a:66:d9:fa:28:a3:ff:77:bd:d0:b7:c5:18:9d:ff:be:3d:e2:
22:16:a6:57:d4:5d:e1:2a:f0:5a:da:92:8c:cf:55:7c:2f:79:
a2:22:bc:d5:70:34:d9:5e:c3:ca:3e:c0:5b:2d:b8:e7:8c:8e:
49:1e:02:41:27:cd:2b:fc:27:0a:11:22:02:1a:96:9f:2a:22:
b7:03:6f:94:5b:3b:ab:0d:21:fd:51:9c:e5:56:ff:93:6f:ef:
37:c6:6a:32:56:df:8b:b8:28:98:ae:a8:08:a4:75:99:58:b6:
09:dc:f1:18:35:01:75:00:5a:72:28:8c:3d:32:f0:92:ec:2a:
a4:bd:16:3f:b1:95:d3:82:2f:f4:d2:82:23:67:c4:36:a6:33:
e9:3c:b8:24:07:e1:47:ea:3e:82:26:68:aa:09:a0:ad:a3:c0:
d4:60:50:48:0f:86:74:64:e1:e2:91:8f:47:5f:e5:e5:96:5b:
38:8d:04:9d:19:b3:00:2e:bb:a2:e2:22:df:f6:c0:6c:c7:96:
ed:4d:72:19:5b:82:fe:d2:db:dc:d3:62:ce:5a:10:4a:ed:83:
14:b7:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:36 2026 by rpki-client