Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rSd8mjaJcIsMAMDMJu1YqPo494Y.roa
File: rSd8mjaJcIsMAMDMJu1YqPo494Y.roa (raw, json)
Hash identifier: HL2cJbFzMASfCaEZ1OcvVP5/tJeW44VFUUqf8pboYF8=
Subject key identifier: AD:27:7C:9A:36:89:70:8B:0C:00:C0:CC:26:ED:58:A8:FA:38:F7:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0DEFCF59707DA38A83A5D78732B034C09
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rSd8mjaJcIsMAMDMJu1YqPo494Y.roa
Signing time: Sat 26 Sep 2026 18:31:54 +0000
ROA not before: Sat 26 Sep 2026 18:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36351
IP address blocks: 5.83.159.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:fc:f5:97:07:da:38:a8:3a:5d:78:73:2b:03:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 26 18:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad277c9a3689708b0c00c0cc26ed58a8fa38f786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:ea:3b:41:f3:81:38:8b:64:d2:f6:31:30:
92:dd:a6:2c:de:00:4c:1e:4c:5d:ee:24:a7:f9:71:
16:50:16:36:49:47:b4:b2:9a:ef:b2:e5:8b:df:81:
a6:59:a6:3f:1c:55:6b:68:49:96:6d:a1:61:5c:73:
ec:3b:a2:67:ba:33:99:8d:cb:4a:a0:5c:2b:c2:b6:
23:a7:d9:a4:3c:1d:28:b8:2b:8d:d9:aa:74:44:f8:
79:8d:5b:36:31:f5:48:f6:95:ff:dd:c6:9b:e4:2a:
51:fd:6e:c3:ee:d0:45:ba:21:5d:62:7e:1f:1f:09:
44:5f:5e:7f:0d:b4:ba:e2:ec:09:fb:aa:be:19:ac:
8d:d5:d5:8e:96:33:ed:d8:41:06:fc:9e:4b:30:b1:
8e:f0:81:4e:47:17:cb:81:3c:b7:69:f2:ed:d9:f5:
0b:fc:4a:88:56:5a:3f:76:7a:84:e7:80:dd:fa:5f:
56:22:78:41:d8:69:06:c6:cb:ee:cf:b0:83:d6:b3:
a1:33:4f:a3:e1:0e:ed:f7:77:b9:6f:e2:5f:a9:2e:
8f:df:9e:60:7a:01:52:e8:50:c8:4e:7b:ce:78:0b:
99:11:37:e6:e1:2d:fb:a7:68:11:9c:4c:26:43:56:
1b:cb:5f:64:a9:55:ad:11:bf:83:6b:7b:b6:f7:0e:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:7C:9A:36:89:70:8B:0C:00:C0:CC:26:ED:58:A8:FA:38:F7:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rSd8mjaJcIsMAMDMJu1YqPo494Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.159.0/24
89.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
de:61:64:59:c3:a4:f1:0f:37:45:2a:5c:0e:f0:4b:cf:eb:ab:
2b:f8:5a:df:a5:86:e7:ff:c2:11:92:d2:60:7c:90:ca:77:e9:
1c:92:91:0b:c9:04:66:95:3c:e9:85:06:b6:1b:d0:c0:c0:83:
56:0f:0b:ac:4b:51:47:e1:7f:f2:54:93:e8:f6:ac:9c:ee:d9:
cb:8a:c7:56:c7:f6:f8:9b:fb:00:ca:c4:c5:f9:b2:3e:95:c0:
fe:d9:b3:3a:f9:28:2c:79:f8:27:bc:b1:6f:50:b9:48:ae:e3:
bd:4e:20:88:53:77:fb:c9:93:f5:0f:52:bd:b6:af:c5:e6:c4:
17:ce:a1:e1:1a:af:3f:b5:87:41:da:5b:3b:ee:71:1b:ca:9f:
f2:98:41:ff:96:a8:fa:32:48:ff:47:5a:c0:ca:45:d2:ad:c8:
05:f4:d0:67:86:d1:37:a5:cf:8c:ce:cc:6f:b8:b1:1f:8f:3a:
0c:97:6b:7d:c5:38:f5:4d:7e:f4:b6:f9:70:bb:f9:52:dc:27:
8f:c1:ba:70:65:55:25:5d:5c:91:8f:09:1e:22:80:76:2b:d7:
d1:a3:f0:78:74:5f:d1:76:5a:71:9e:bf:35:fd:42:14:53:6b:
ae:2f:34:70:c2:3e:66:ff:5e:a9:83:35:f5:44:34:19:0a:15:
eb:27:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:32 2026 by rpki-client