Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/otq5H6-rZ6UR4y5Xp4x2Iowz5tU.roa
File: otq5H6-rZ6UR4y5Xp4x2Iowz5tU.roa (raw, json)
Hash identifier: t8JWcig2jq1wrAw4VJaVXGHjIvOFGgHNQ+qCVI088Hs=
Subject key identifier: A2:DA:B9:1F:AF:AB:67:A5:11:E3:2E:57:A7:8C:76:22:8C:33:E6:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A03323A42E0346A961B4F9961207749DE7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/otq5H6-rZ6UR4y5Xp4x2Iowz5tU.roa
Signing time: Mon 24 Aug 2026 09:39:28 +0000
ROA not before: Mon 24 Aug 2026 09:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
77.90.63.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
217.69.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:23:a4:2e:03:46:a9:61:b4:f9:96:12:07:74:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 09:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2dab91fafab67a511e32e57a78c76228c33e6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:68:26:bc:71:64:8f:bd:52:21:5c:ad:57:
27:2d:a9:ef:78:37:4c:f8:f9:e8:cc:4b:4c:be:b7:
2d:98:3c:98:c3:70:56:2f:2d:43:9b:60:82:03:fd:
28:8a:ff:55:ba:9c:ee:6e:89:79:5c:66:78:b6:45:
bf:0d:37:0b:df:ed:64:fb:cf:23:25:d8:51:d3:78:
13:2f:11:29:69:c9:a1:d3:89:f3:95:23:23:0d:b4:
b3:9c:97:b0:2e:fe:0b:d9:2e:d1:1e:55:b2:db:b3:
e6:f0:5f:59:4c:8b:d7:d3:cf:57:e1:46:fd:fe:1b:
9c:0b:9b:35:d9:7b:f6:ae:01:6a:36:58:04:04:2a:
91:94:9e:ed:7e:67:3f:ac:ee:e1:32:6f:07:10:2b:
20:d4:12:1e:a3:39:c9:d0:cb:40:de:4e:cc:d2:f3:
2c:de:50:95:1f:a0:06:b4:4c:4e:6b:88:61:b8:45:
cb:54:5f:d6:aa:3b:c9:0a:15:40:46:8b:86:17:15:
57:d6:d4:84:5d:5d:55:2a:47:59:25:d6:73:17:e6:
55:55:c4:5b:e7:0a:ee:0d:d9:72:ff:2d:68:e1:b2:
c0:aa:eb:8c:29:27:40:7a:93:14:80:1f:0d:81:78:
da:45:cd:94:41:04:30:44:52:23:e9:bb:44:d3:24:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DA:B9:1F:AF:AB:67:A5:11:E3:2E:57:A7:8C:76:22:8C:33:E6:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/otq5H6-rZ6UR4y5Xp4x2Iowz5tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.117.0-5.231.119.255
5.231.123.0/24
77.90.15.0/24
77.90.52.0/24
77.90.60.0/23
77.90.63.0/24
94.249.184.0/24
94.249.186.0-94.249.188.255
94.249.195.0/24
94.249.198.0/24
185.129.84.0/22
217.69.167.0/24
Signature Algorithm: sha256WithRSAEncryption
84:49:9f:11:8e:21:e9:f2:30:db:3a:ee:73:93:72:40:29:eb:
23:1f:93:e4:a4:69:b7:2a:54:0d:b4:a8:b9:1f:f1:3c:00:61:
54:9c:2d:f9:c9:87:17:fe:5f:e5:b2:32:82:e5:f6:d3:fe:5b:
e9:03:5d:6c:ff:c1:f8:9d:60:b9:31:32:1a:a6:db:da:6a:4b:
79:b1:1a:b2:76:5d:ec:fa:6e:3e:ec:b3:74:cf:2c:15:0d:c6:
3e:10:ea:3d:fc:c9:69:44:55:0e:31:51:8a:82:43:ba:5a:e1:
e3:c6:39:8a:01:8e:3f:9e:86:92:f1:72:49:3e:83:e7:b5:06:
b4:3e:83:e1:fa:ea:2e:74:d7:31:2c:45:73:1c:d6:b3:cc:43:
d6:50:d3:dc:28:54:ba:7a:84:9d:1a:d9:44:d9:e4:96:18:8b:
db:5c:77:91:b7:a0:43:a4:ad:f8:5a:2f:f5:81:ee:c9:7d:23:
9e:d1:e0:98:9e:f7:18:13:b0:82:eb:98:3d:88:f7:ef:28:a8:
76:57:9a:1d:6d:63:21:f7:5b:77:68:73:2a:d8:27:68:7a:e9:
6e:c2:cd:14:77:b7:3b:4f:63:ea:a1:c2:23:74:2e:b0:32:2e:
18:9a:d3:7a:9b:e0:72:a8:e8:b9:6a:e2:f7:ff:8e:71:ad:21:
b2:2d:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:56 2026 by rpki-client