Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tmgHBz9iQ1z0S4jHtPUV0fWAS4s.roa
File: tmgHBz9iQ1z0S4jHtPUV0fWAS4s.roa (raw, json)
Hash identifier: oQJrKPvPK/DDCFa2be3bkDd/cLF/qsscsYPYZnGubpE=
Subject key identifier: B6:68:07:07:3F:62:43:5C:F4:4B:88:C7:B4:F5:15:D1:F5:80:4B:8B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0EFF0E8C10B94FFE20188E04A9F3BF538
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tmgHBz9iQ1z0S4jHtPUV0fWAS4s.roa
Signing time: Wed 30 Sep 2026 01:32:17 +0000
ROA not before: Wed 30 Sep 2026 01:32:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
77.90.61.0/24 maxlen: 24
77.90.63.0/24 maxlen: 24
85.93.2.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.178.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
185.129.84.0/22 maxlen: 22
217.69.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:f0:e8:c1:0b:94:ff:e2:01:88:e0:4a:9f:3b:f5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 30 01:32:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b66807073f62435cf44b88c7b4f515d1f5804b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:82:48:df:8b:92:ea:2b:d7:34:2a:68:04:
85:b7:77:9d:9d:1c:50:66:35:eb:8d:49:24:cb:41:
95:ad:ef:33:9b:24:36:10:7b:07:d6:0d:08:c0:5d:
3c:0d:25:f2:d1:50:bb:2f:83:f2:ab:65:62:fa:dd:
f5:45:3e:3f:7b:14:9d:76:2e:00:d3:64:aa:0a:b0:
3f:c6:50:8e:7e:13:1c:70:bd:1e:bf:7a:69:7e:24:
a4:f1:8e:b5:a7:eb:cc:28:4a:69:9b:3b:ce:f9:0b:
6d:2b:dd:0d:08:c5:54:53:ba:75:04:44:b3:4f:55:
17:1b:dc:50:ba:da:5f:ae:e7:7c:da:b6:b6:d9:a1:
d0:14:27:f6:fc:3a:0b:c9:d1:46:6b:29:4b:d6:94:
c9:a0:e1:0c:83:a3:87:42:01:29:48:c7:c8:db:0e:
35:79:08:ad:2a:5b:1a:0a:4e:75:85:f6:ec:03:a5:
bc:b8:2b:6a:d2:55:c2:52:29:7c:f7:ec:93:df:62:
27:19:5b:f6:2c:3e:de:0a:10:cf:98:7e:4c:ae:f2:
a2:77:7c:ba:8f:bb:86:dd:61:02:c0:79:1d:ed:c3:
65:6b:55:d3:a7:ec:8a:ea:7e:fa:f1:ca:bf:3b:ca:
3a:28:8f:20:2a:e4:d4:9d:25:9a:4c:6c:d2:42:d9:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:07:07:3F:62:43:5C:F4:4B:88:C7:B4:F5:15:D1:F5:80:4B:8B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tmgHBz9iQ1z0S4jHtPUV0fWAS4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.117.0-5.231.119.255
5.231.123.0/24
77.90.15.0/24
77.90.52.0/24
77.90.60.0/23
77.90.63.0/24
85.93.2.0/24
94.249.177.0-94.249.179.255
94.249.184.0/24
94.249.186.0-94.249.189.255
94.249.195.0/24
94.249.198.0/24
185.129.84.0/22
217.69.167.0/24
Signature Algorithm: sha256WithRSAEncryption
51:37:b5:23:2c:96:d2:04:5c:f6:8e:aa:3e:e8:9f:3b:bd:06:
be:98:fa:41:c1:7a:04:ba:93:a8:20:3a:54:9d:52:23:bb:c7:
98:7c:9c:ee:c5:79:9a:18:63:40:da:ac:d0:53:59:09:22:b8:
4c:ad:4b:bf:3e:53:e3:94:72:58:36:79:8e:e3:5f:7f:1d:b5:
b9:80:bc:36:3f:2e:86:4c:34:1e:83:c8:fa:5f:a8:f6:a7:c4:
bb:44:b8:e8:78:0c:10:63:5a:ed:3c:f6:06:26:53:c9:3b:0c:
87:37:4c:21:34:33:1e:68:ec:9f:64:cf:d6:11:10:04:f1:7b:
2e:5d:f5:22:62:3b:b6:4c:ce:1f:96:c9:06:4d:27:86:ef:d2:
3f:e1:e3:0a:66:b4:b7:2d:25:10:ef:c8:17:b3:84:3f:47:a3:
50:3f:2e:f4:c6:d8:c0:38:4a:a4:27:9a:5a:1c:57:41:67:66:
ce:a3:d2:9a:4c:1a:43:2c:7c:39:f7:1b:1e:29:ae:a6:ce:14:
b1:c1:d3:e9:36:29:ed:f8:bc:b7:13:94:d5:6b:21:b9:47:f5:
ca:c5:04:ed:1d:a5:97:e9:44:72:71:4c:9c:2c:5a:4d:f9:ce:
b3:f8:e4:59:1d:01:eb:9a:7e:3e:f1:60:51:33:0a:5f:6c:9a:
e6:48:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:35 2026 by rpki-client