Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pxCzvCeqb8XkJE4pboUsRNlYdRg.roa
File: pxCzvCeqb8XkJE4pboUsRNlYdRg.roa (raw, json)
Hash identifier: 5hlcTtGLrON2L7T6P5h5q3aCE+myVkqtimM6kICjAl4=
Subject key identifier: A7:10:B3:BC:27:AA:6F:C5:E4:24:4E:29:6E:85:2C:44:D9:58:75:18
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F5ED1EF6530E7A134D051CDB8DBED69A7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pxCzvCeqb8XkJE4pboUsRNlYdRg.roa
Signing time: Tue 14 Jul 2026 04:10:44 +0000
ROA not before: Tue 14 Jul 2026 04:10:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:d1:ef:65:30:e7:a1:34:d0:51:cd:b8:db:ed:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 14 04:10:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a710b3bc27aa6fc5e4244e296e852c44d9587518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:d3:4c:56:11:df:dd:3c:41:f5:53:26:5a:
8e:70:95:61:30:8c:da:e3:30:8b:a0:80:da:11:68:
d0:c0:54:62:e2:82:f0:67:13:89:72:64:cd:51:30:
c1:c5:45:6f:b3:52:a2:63:f4:f7:2f:24:db:ad:ce:
79:ce:cc:63:60:aa:ad:99:59:9d:35:72:2b:3a:57:
eb:a2:da:7c:df:37:7e:1d:ba:11:ad:5b:e4:e8:1c:
ba:ad:32:f4:e7:b5:4e:87:34:b2:9d:51:fd:98:aa:
5c:2b:41:e7:f3:82:22:84:f2:cc:26:c7:30:58:71:
2e:d4:b2:74:b5:92:f9:a8:7e:e7:e4:28:b2:0d:2d:
49:c0:20:b4:03:61:1e:61:47:8c:d9:c6:48:1b:88:
ab:5f:48:73:3b:f0:a6:ad:85:4a:88:67:87:85:cf:
38:58:76:7c:c7:6f:30:9b:85:a6:fb:e6:5c:5b:86:
79:39:cd:44:25:26:fe:73:b2:08:3e:dd:a0:a6:85:
d4:6f:f3:ac:58:e6:2f:5d:70:c3:0b:53:56:d6:ed:
66:a6:55:97:bd:6e:fe:52:b6:9c:e2:08:ea:df:88:
b5:1b:c5:3e:4f:c5:bd:de:93:8b:44:4e:63:bf:59:
fc:a3:9b:3b:9c:c4:0c:46:4e:d7:68:75:68:37:da:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:B3:BC:27:AA:6F:C5:E4:24:4E:29:6E:85:2C:44:D9:58:75:18
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pxCzvCeqb8XkJE4pboUsRNlYdRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.231.26.0/24
5.231.242.0/24
77.90.48.0/24
89.106.71.0/24
94.249.230.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
4c:11:43:e5:b6:da:16:79:fe:20:6e:0e:0e:ac:fb:d5:a3:c1:
11:19:22:1a:18:57:f3:38:8a:ee:7c:83:b9:ca:63:b0:9b:fa:
fd:22:60:29:f9:b2:e4:82:35:3f:48:ff:df:43:9a:3a:be:1c:
0d:4b:fa:3b:95:75:76:34:6c:89:57:36:e3:65:84:a0:bc:8d:
6d:3f:f2:a9:ea:b7:5d:27:45:a7:0a:ed:28:7c:58:28:6e:fa:
97:e8:0b:b2:15:1a:f9:9f:16:5e:68:cd:c9:0f:d0:79:23:46:
b7:c0:49:18:5f:04:42:cd:91:53:10:ca:99:6d:ca:1d:28:ed:
61:9a:e6:f5:8b:4e:6b:51:35:02:20:53:3c:65:2f:2e:8e:87:
03:0c:2d:e0:1e:78:bb:83:af:5a:a6:c8:d4:87:07:58:a1:ad:
96:26:04:a2:ff:79:32:97:eb:19:82:6d:74:14:dd:5b:9e:a0:
c5:4c:af:fe:a7:ba:d0:32:aa:f2:e4:0c:5e:97:dd:08:8f:6d:
31:79:ee:b2:47:6f:c3:d9:6d:17:fe:fd:7f:ae:28:d6:48:e5:
7d:58:df:20:9b:0d:bd:2e:da:a2:b1:ac:71:d7:78:6c:70:8b:
80:f9:53:15:19:09:44:15:2b:fd:cb:af:e9:34:3d:e0:1b:23:
56:e8:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:16 2026 by rpki-client