Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/o1M99EUjtM21DfSc2J713Ct7WWg.roa
File: o1M99EUjtM21DfSc2J713Ct7WWg.roa (raw, json)
Hash identifier: 8E3ZhfJwCE/P55e9iL9O1H7u3rcps8g/OysuNo3Cpk4=
Subject key identifier: A3:53:3D:F4:45:23:B4:CD:B5:0D:F4:9C:D8:9E:F5:DC:2B:7B:59:68
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EA83C165D5A99D84AABE247D86CEDE18D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/o1M99EUjtM21DfSc2J713Ct7WWg.roa
Signing time: Mon 08 Jun 2026 17:16:10 +0000
ROA not before: Mon 08 Jun 2026 17:16:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202147
IP address blocks: 5.83.137.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.118.165.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:3c:16:5d:5a:99:d8:4a:ab:e2:47:d8:6c:ed:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 8 17:16:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3533df44523b4cdb50df49cd89ef5dc2b7b5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:8e:01:80:5d:b1:47:c5:40:7b:5e:25:8d:
c4:c5:31:56:67:14:6b:9d:9d:01:61:b6:91:dc:9f:
ed:d6:05:7c:9c:21:be:83:53:82:a1:98:d1:c9:41:
bc:18:1d:1c:46:ab:b7:da:34:19:47:06:50:91:02:
4e:16:2a:4c:a0:fe:87:02:4f:b3:0f:dc:2e:91:78:
ab:7d:bc:de:68:05:d6:dc:9c:ce:21:78:01:99:31:
a7:f4:62:b1:84:5e:0e:01:ba:25:5a:05:39:80:a6:
8f:44:7a:ac:a3:1a:33:08:0d:c5:e0:e5:71:c1:f6:
5d:8d:30:a4:30:7d:ad:36:62:f3:ed:c4:f4:ac:65:
b9:7f:58:d2:1a:05:2f:5e:22:c4:b1:42:cd:6f:64:
51:5b:b7:5b:48:2e:12:4e:7d:da:6b:c0:bf:56:11:
04:1b:cb:d5:63:16:37:5b:a6:aa:5f:88:da:67:6a:
28:2b:35:76:6d:1d:1d:99:79:ac:04:8c:ae:7e:b3:
60:45:ba:82:42:cc:ca:80:b0:19:56:e1:cc:b5:9c:
4e:03:a3:f6:0a:fe:d0:16:af:20:e0:85:9a:43:61:
86:5c:3c:ce:f6:04:7f:0d:0e:42:b7:e0:4b:1b:56:
2e:fc:01:94:5e:ab:7f:3b:c5:8f:bb:72:d0:98:17:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:3D:F4:45:23:B4:CD:B5:0D:F4:9C:D8:9E:F5:DC:2B:7B:59:68
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/o1M99EUjtM21DfSc2J713Ct7WWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.137.0/24
77.90.36.0/24
85.93.1.0/24
85.118.165.0/24
94.249.205.0/24
95.215.33.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:94:b6:b1:6e:c7:4f:bc:05:f1:a7:5a:08:c9:48:03:52:20:
7d:f0:2a:9d:1c:94:28:c5:68:2b:f1:a0:86:8d:89:40:3a:0b:
5f:9a:23:2c:ea:3b:02:9a:4a:2d:a4:63:77:f8:04:70:bb:9f:
77:e5:9e:47:30:37:e6:af:0e:98:dd:61:16:cb:1f:8a:ba:8f:
0e:a2:83:8b:46:29:94:4c:77:5a:33:fe:3b:ee:65:66:2a:cc:
6b:2c:d9:d9:cd:15:46:30:4a:52:f6:b7:36:03:7d:e3:66:c1:
f5:8e:48:c6:84:78:cc:b3:43:0e:96:5c:7a:31:4c:38:ab:e6:
52:98:61:db:09:c6:55:71:24:b5:00:1f:13:fe:d6:a3:49:d7:
e3:ad:c0:4a:3f:28:09:2d:41:6b:38:ba:97:1b:9d:3a:bc:2a:
5e:f4:b6:09:a3:22:b0:d0:3f:64:b1:da:80:cc:93:40:2f:32:
77:cd:8a:08:40:34:73:28:2d:13:6c:42:61:b0:a6:fd:32:92:
4e:19:49:c1:d0:d1:c7:e5:c8:b7:26:22:dc:12:77:f1:d4:7d:
b9:d7:80:59:fd:cd:09:1f:50:48:9a:7a:ff:4e:96:3c:4e:29:
2b:d5:67:3b:26:2e:bc:66:e1:16:6d:95:01:17:4d:0e:61:27:
ac:63:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 12:11:47 2026 by rpki-client