Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uZcnrNlkjDmQcRGwMIxna_9-tG8.roa
File: uZcnrNlkjDmQcRGwMIxna_9-tG8.roa (raw, json)
Hash identifier: 5wCoRbfzMjOHciv16YCPWOg/PK6iZcEtkM8C/Uxn9aI=
Subject key identifier: B9:97:27:AC:D9:64:8C:39:90:71:11:B0:30:8C:67:6B:FF:7E:B4:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F1BDB9A7D00F64BEABF1E32486C20FD82
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uZcnrNlkjDmQcRGwMIxna_9-tG8.roa
Signing time: Wed 01 Jul 2026 04:06:44 +0000
ROA not before: Wed 01 Jul 2026 04:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150716
IP address blocks: 5.231.76.0/24 maxlen: 24
85.118.166.0/24 maxlen: 24
94.249.242.0/24 maxlen: 24
185.47.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:db:9a:7d:00:f6:4b:ea:bf:1e:32:48:6c:20:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 1 04:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b99727acd9648c39907111b0308c676bff7eb46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:21:e3:8a:ab:a1:28:95:10:b4:ba:ce:0b:
61:de:71:4c:86:44:8c:82:8c:43:c9:af:c5:54:89:
36:13:9f:74:cf:f8:5b:d6:a1:d4:ab:9c:69:d4:e2:
49:47:3a:f2:f4:2b:e9:04:85:fa:b2:8b:0e:15:a9:
43:89:08:50:3c:c4:f1:7e:9d:79:59:4e:f3:32:44:
11:a4:d9:0b:08:17:ad:95:4b:61:5d:98:f3:fc:82:
fb:93:40:7c:9f:b0:23:f2:84:86:6f:6a:e1:ec:cc:
87:f0:f5:9c:11:d1:d1:61:97:d3:92:2e:4c:d0:a0:
17:f8:3b:2d:76:b0:f3:f9:e7:8e:6a:23:98:e1:d2:
3c:98:63:04:00:2b:ff:31:ae:be:06:8a:00:0e:92:
d9:01:a1:31:e5:ce:d0:29:c5:33:0d:9f:d1:0e:fb:
d0:5f:a2:41:34:09:c4:3b:89:db:74:70:d0:24:bf:
3f:82:ff:d1:d0:87:93:1d:66:c2:24:db:0a:ad:fa:
cb:37:22:87:15:5d:75:5e:77:04:0c:17:86:58:a3:
85:11:a5:8d:86:4d:7b:38:38:69:ff:e9:f3:49:5b:
e2:94:03:63:b0:5c:43:b9:78:0f:82:9d:99:35:8a:
51:2b:2b:19:97:9e:66:66:98:95:cc:92:67:62:05:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:27:AC:D9:64:8C:39:90:71:11:B0:30:8C:67:6B:FF:7E:B4:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uZcnrNlkjDmQcRGwMIxna_9-tG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.76.0/24
85.118.166.0/24
94.249.242.0/24
185.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:4f:71:ed:58:e3:86:f2:95:e6:50:7c:b7:9d:89:51:12:0d:
d7:58:77:38:05:94:86:5d:5a:c1:0d:a1:21:52:04:dd:c7:18:
45:23:45:07:b4:ba:a4:f5:84:62:a6:2e:e9:a9:98:1e:02:71:
44:d2:db:21:a7:69:b5:33:ef:21:92:ff:73:4b:29:43:f9:99:
f0:3c:ce:f2:ee:c1:fa:82:e1:5f:10:b0:0f:0d:34:11:52:df:
13:df:9c:61:0c:d5:41:b0:78:1c:9d:2f:f6:4f:88:13:0e:6b:
1a:3e:7e:27:db:6a:75:e9:e3:61:dc:2a:9e:c7:62:5e:63:4b:
60:12:f4:c3:5b:d9:ad:7c:3d:3a:09:5b:1e:90:1d:56:1e:f4:
cd:83:bc:7c:bb:f7:53:e4:ae:03:b4:09:5f:38:43:6a:b1:82:
7d:88:19:68:8b:cd:5e:a2:32:a5:cb:fa:ed:3b:04:69:02:48:
2b:a1:7e:54:bc:a6:f8:a8:30:bf:34:0c:77:6d:84:98:29:35:
eb:19:4d:55:79:d0:e3:c5:c3:fd:df:00:02:4c:09:e7:06:1e:
18:43:17:e4:9a:51:6f:ea:20:86:22:98:f8:76:fd:5a:a3:fd:
41:c9:e9:8d:5d:d1:73:38:a8:cd:53:dd:ce:a7:19:6d:d3:85:
7d:4c:d7:c1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8b25p9APZL6r8eMkhsIP2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzAxMDQwNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTk3MjdhY2Q5NjQ4YzM5OTA3MTExYjAzMDhjNjc2YmZmN2ViNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHMh44qroSiVELS6zgth3nFMhkSM
goxDya/FVIk2E590z/hb1qHUq5xp1OJJRzry9CvpBIX6sosOFalDiQhQPMTxfp15
WU7zMkQRpNkLCBetlUthXZjz/IL7k0B8n7Aj8oSGb2rh7MyH8PWcEdHRYZfTki5M
0KAX+DstdrDz+eeOaiOY4dI8mGMEACv/Ma6+BooADpLZAaEx5c7QKcUzDZ/RDvvQ
X6JBNAnEO4nbdHDQJL8/gv/R0IeTHWbCJNsKrfrLNyKHFV11XncEDBeGWKOFEaWN
hk17ODhp/+nzSVvilANjsFxDuXgPgp2ZNYpRKysZl55mZpiVzJJnYgWhPQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLmXJ6zZZIw5kHERsDCMZ2v/frRvMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdVpjbnJObGtqRG1RY1JHd01JeG5hXzktdEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABedMAwQA
VXamAwQAXvnyAwQAuS+MMA0GCSqGSIb3DQEBCwUAA4IBAQDNT3HtWOOG8pXmUHy3
nYlREg3XWHc4BZSGXVrBDaEhUgTdxxhFI0UHtLqk9YRipi7pqZgeAnFE0tshp2m1
M+8hkv9zSylD+ZnwPM7y7sH6guFfELAPDTQRUt8T35xhDNVBsHgcnS/2T4gTDmsa
Pn4n22p16eNh3Cqex2JeY0tgEvTDW9mtfD06CVsekB1WHvTNg7x8u/dT5K4DtAlf
OENqsYJ9iBloi81eojKly/rtOwRpAkgroX5UvKb4qDC/NAx3bYSYKTXrGU1VedDj
xcP93wACTAnnBh4YQxfkmlFv6iCGIpj4dv1ao/1ByemNXdFzOKjNU93Opxlt04V9
TNfB
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:24 2026 by rpki-client