Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/o2StDo6rh9w0ofAuUUZsrgSYikw.roa
File: o2StDo6rh9w0ofAuUUZsrgSYikw.roa (raw, json)
Hash identifier: BJoeYgMp0/8G54B9eSomQFVisgmDGkTnMg0WSE9s4l0=
Subject key identifier: A3:64:AD:0E:8E:AB:87:DC:34:A1:F0:2E:51:46:6C:AE:04:98:8A:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E836F93140EC6E1B2B48F8D4B7B4E14D7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/o2StDo6rh9w0ofAuUUZsrgSYikw.roa
Signing time: Mon 01 Jun 2026 13:46:27 +0000
ROA not before: Mon 01 Jun 2026 13:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.83.149.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:6f:93:14:0e:c6:e1:b2:b4:8f:8d:4b:7b:4e:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 1 13:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a364ad0e8eab87dc34a1f02e51466cae04988a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:6c:83:d5:a1:e5:b0:86:31:d4:75:0f:9b:
35:0c:1d:21:67:32:ad:d9:76:8a:1d:b6:ee:13:54:
a1:5a:51:61:69:44:d8:74:1c:4d:c0:ea:9b:69:f0:
94:63:2f:db:eb:82:dc:bd:3d:ad:d8:15:b3:c5:7f:
fb:94:ff:96:57:7d:8f:a4:a0:f7:c0:59:db:15:54:
bd:aa:69:e0:79:de:9f:7f:d8:c1:01:19:e0:2b:1b:
f4:ee:09:7d:1b:d4:c4:d4:5d:62:13:4e:e2:b0:c0:
d2:7f:d8:42:f1:05:f9:98:f3:cf:e9:7d:6a:6e:6c:
c0:15:cd:34:5f:47:6b:e4:70:78:66:03:b5:54:c9:
35:19:0d:2e:10:b7:8b:8c:8a:59:6b:7b:61:b6:e2:
e8:4e:5d:ed:c4:d7:bd:5b:bc:bf:f9:1e:71:05:be:
98:75:6d:3c:65:e0:56:12:e4:a0:fe:78:11:80:93:
cc:00:9a:f2:df:ff:28:37:f2:0a:e1:49:63:87:c5:
e1:cd:f6:71:49:77:b0:3c:40:10:d7:7c:4d:8c:6d:
d7:a7:08:4e:99:78:50:38:70:db:e1:cd:97:62:81:
6c:81:71:36:98:d1:8f:5f:1d:9a:6a:b0:b4:17:0d:
05:b4:fc:99:e4:67:4b:b3:c2:f5:ba:b3:30:0b:15:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:AD:0E:8E:AB:87:DC:34:A1:F0:2E:51:46:6C:AE:04:98:8A:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/o2StDo6rh9w0ofAuUUZsrgSYikw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
89.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f8:b5:23:64:d6:f2:b1:68:71:a0:99:41:da:4c:09:03:1b:
7f:14:ce:fa:38:0a:a1:aa:f3:c5:a5:68:e3:af:7c:26:1f:dc:
3a:64:fd:65:a1:bc:73:88:00:ff:f7:3d:3e:80:2b:1a:6b:e7:
3a:bb:94:f5:87:b4:8f:f6:56:23:80:9e:7e:e7:36:e0:c9:19:
81:4e:32:d0:4d:02:03:df:0c:4f:20:c2:9f:8a:33:ef:11:6c:
fd:90:72:e1:2f:65:ae:7e:e6:71:c0:81:0a:f1:b6:f1:f9:71:
7e:6b:a3:89:44:d9:5d:17:27:0f:c2:b4:2a:03:ec:cd:bb:f0:
32:da:02:09:3a:00:6e:71:d2:4b:8f:26:b6:94:d7:6d:3f:e7:
2c:f5:29:f3:60:f9:27:03:2b:88:53:94:31:ce:f1:c5:0d:81:
08:b4:0b:8e:d1:1b:f5:b4:ca:90:45:11:56:7c:7d:16:74:8c:
86:64:2d:ed:08:e5:f9:df:c0:d9:25:cc:e8:21:df:34:b1:f7:
d8:6f:66:57:cf:4d:5c:0c:90:14:97:c0:de:05:36:ed:0f:20:
2d:3d:6b:57:e1:45:c8:05:17:1a:87:ef:3d:d7:41:82:5c:ea:
34:e6:ef:4c:a5:c3:1d:ed:53:0e:a2:f9:5e:8b:d7:77:3c:bd:
3e:60:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:09 2026 by rpki-client