Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vJOtzlIyBBBo4r-TmBjQeyf3AGw.roa
File: vJOtzlIyBBBo4r-TmBjQeyf3AGw.roa (raw, json)
Hash identifier: RZCyrjLm0SClWbI/PmhJaNGcM6I0oZyxPjcUCoXnilM=
Subject key identifier: BC:93:AD:CE:52:32:04:10:68:E2:BF:93:98:18:D0:7B:27:F7:00:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A06A99D54D24FA7093A1CFD9CEAA67A79D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vJOtzlIyBBBo4r-TmBjQeyf3AGw.roa
Signing time: Fri 04 Sep 2026 04:07:41 +0000
ROA not before: Fri 04 Sep 2026 04:07:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.231.252.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:99:d5:4d:24:fa:70:93:a1:cf:d9:ce:aa:67:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 4 04:07:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc93adce5232041068e2bf939818d07b27f7006c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ed:b0:9b:0b:50:1b:96:00:77:34:c0:89:e4:
2a:94:2d:f3:df:24:ee:a3:ae:4b:42:c3:fc:c1:52:
7e:0a:06:1a:11:1f:5e:ab:25:fb:c6:da:dc:77:60:
65:9b:5b:8a:e7:bc:e0:8b:53:04:0e:fe:d8:d0:8f:
c7:32:61:5a:95:bd:87:94:ee:6f:ab:67:2a:0d:cc:
db:9f:a0:24:69:e5:36:e9:7b:a1:ef:ac:33:df:93:
8b:ab:9b:e6:57:82:e7:79:5a:8f:fa:2c:f7:05:fb:
74:e1:2b:13:4f:48:c7:a6:b3:ff:8d:7f:6f:c3:ce:
41:21:c5:25:0b:9b:7f:42:c3:11:b7:4c:11:fc:b6:
8b:a8:ba:37:14:68:4a:21:af:a8:bb:42:b9:02:ca:
a6:76:ae:9e:bc:09:81:1e:5f:2c:0f:bd:cf:a0:62:
77:93:42:9c:c9:03:49:3f:2d:30:ef:6b:b9:75:63:
96:22:e4:10:f2:bc:dc:4d:f5:f8:06:a5:a5:4a:3a:
6d:f8:05:50:9f:b2:c4:77:fc:54:05:6e:db:56:5c:
1d:81:1e:32:75:69:1d:f0:84:cf:4b:b6:c3:33:93:
61:9f:31:d0:e7:f9:3c:73:18:1e:55:a3:93:01:18:
f5:b7:fc:f1:9f:79:6c:3d:78:cc:5b:f8:b4:27:60:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:93:AD:CE:52:32:04:10:68:E2:BF:93:98:18:D0:7B:27:F7:00:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vJOtzlIyBBBo4r-TmBjQeyf3AGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.175.223.0/24
5.231.252.0/24
89.106.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:63:34:b4:3f:17:9e:2a:e4:ec:e9:6a:bf:33:ee:d9:d1:f3:
7f:cf:b4:ec:b4:72:f1:6d:06:01:d9:7e:fe:a1:c7:09:18:00:
58:d1:0c:7d:3d:ed:e5:f1:80:79:b6:0f:c0:f7:b5:0e:bf:c4:
79:8b:4d:e0:19:f3:92:80:5a:89:3c:1e:21:2a:fb:d1:f5:d9:
c0:9f:8a:2d:f0:8b:8d:3c:42:b5:8f:b0:fc:ef:01:4a:c7:88:
60:63:5c:49:f4:76:9f:b9:44:ea:31:b0:da:ac:7b:a7:47:62:
76:d9:f5:df:b4:37:46:dd:a8:49:82:8f:ce:a0:48:da:e3:d6:
79:6a:42:ec:8f:f2:2c:7f:a6:5c:4b:5f:b9:5b:62:3f:5e:f4:
d4:67:a8:37:76:6c:2f:e9:29:c7:e8:21:e7:23:46:a2:6b:c7:
f1:79:22:c2:a2:f7:4b:9a:3d:ee:13:d4:7d:58:7d:3f:ad:ac:
71:0d:e4:04:94:67:fc:03:59:43:9d:34:06:ce:88:49:31:c7:
eb:39:04:5f:ee:de:93:e4:f9:3d:da:61:d2:aa:f4:95:77:81:
15:59:e5:01:ff:58:a2:1a:46:e5:a9:6d:dc:68:6c:65:1e:67:
8d:d5:96:6b:58:68:80:0e:70:26:93:6a:9e:fb:0e:65:a1:91:
09:0f:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:51 2026 by rpki-client