Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oHUWjg1aOkJAJgiqqj9mhh0I45Q.roa
File: oHUWjg1aOkJAJgiqqj9mhh0I45Q.roa (raw, json)
Hash identifier: 7BEsnP81FDeqgBrA275GoqYCtRFYMBA5AbakJKKeGvc=
Subject key identifier: A0:75:16:8E:0D:5A:3A:42:40:26:08:AA:AA:3F:66:86:1D:08:E3:94
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DAB1FE3E64865BF8705DA0B1482170FE7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oHUWjg1aOkJAJgiqqj9mhh0I45Q.roa
Signing time: Mon 20 Apr 2026 13:41:27 +0000
ROA not before: Mon 20 Apr 2026 13:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:1f:e3:e6:48:65:bf:87:05:da:0b:14:82:17:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 20 13:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a075168e0d5a3a42402608aaaa3f66861d08e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:7b:19:95:9d:97:e7:8d:be:59:eb:43:bf:
2e:3b:5f:c6:14:07:07:37:e9:b4:83:6e:87:46:40:
4c:33:6b:86:f8:db:2a:b6:f1:c2:8e:e5:3e:f8:f1:
f1:fd:2c:51:14:d9:6f:40:96:fd:34:71:3e:e1:68:
94:f0:0f:e3:8e:1e:2a:41:48:f0:98:1e:d0:fa:05:
ed:30:68:96:4e:33:4d:b3:ea:2e:2d:9f:28:c3:21:
51:3c:b0:86:c3:61:36:a3:99:e4:be:a4:c4:6d:9b:
e5:54:ad:ae:86:c0:2f:14:8d:df:23:52:e0:01:91:
21:af:bd:e5:d5:dc:25:01:73:86:92:4d:3f:23:9b:
48:9a:60:39:43:8a:13:8e:0d:70:76:d5:27:d6:9e:
b6:8b:94:ed:94:a5:6f:8d:c6:cf:c3:ed:8c:e5:f5:
33:a2:d7:ae:8e:c9:f6:14:dd:65:4f:e9:3d:d4:50:
bf:fb:e2:47:47:f0:f9:ba:c5:b6:f5:17:a5:2a:a3:
e8:68:a2:28:09:29:32:99:2d:40:e1:a3:72:59:d0:
b7:72:4f:2b:b3:ac:1e:ba:1a:c2:28:1f:6e:19:52:
9c:3c:62:11:fd:c5:06:48:8a:a1:b9:b1:67:ff:1c:
55:9c:7f:5e:7e:12:37:4a:92:c8:23:c7:ff:7c:e6:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:16:8E:0D:5A:3A:42:40:26:08:AA:AA:3F:66:86:1D:08:E3:94
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oHUWjg1aOkJAJgiqqj9mhh0I45Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.231.26.0/24
5.231.242.0/24
89.106.71.0/24
94.249.230.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
d6:e6:ae:29:00:d3:8d:6a:2b:df:2c:54:6b:9c:c1:c4:79:e3:
60:83:ba:bf:34:e2:25:d4:1d:b2:58:e2:31:1c:77:3e:c4:ef:
a9:9a:b7:60:bf:0a:da:d6:28:86:a9:70:83:3f:f0:ba:5c:ec:
c3:52:7f:ff:23:9d:8d:1d:38:52:e5:ae:19:f9:2b:94:01:db:
42:ea:c5:e2:7c:32:48:0e:38:08:a4:d8:3e:67:05:2d:e5:d1:
10:96:6c:b8:d7:95:e2:b7:22:bf:52:da:ea:91:68:ac:e0:77:
38:1d:aa:7f:74:69:f4:d7:c4:ea:08:44:46:c6:66:64:1f:9e:
d5:a1:68:33:a7:f9:6b:b9:af:c5:58:20:fd:a1:91:43:8d:3d:
8c:63:f4:d0:40:2e:fa:0b:ab:d2:d2:63:d4:f1:17:30:ed:af:
24:ce:28:44:62:a2:4a:d6:ae:54:c4:4a:6e:6f:d6:28:3d:70:
e4:46:92:fb:c5:b4:53:8e:eb:9b:c7:30:e5:02:a0:55:2a:73:
b6:50:1f:f9:83:87:9e:15:40:8e:bd:78:ae:1b:e9:ca:a7:ea:
9c:16:70:d2:79:d7:08:e3:f9:f4:e5:20:15:8b:be:03:dd:57:
70:32:d8:59:c7:9a:be:58:f1:de:dd:7f:89:32:aa:81:95:51:
90:3e:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:21:50 2026 by rpki-client