Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wyTHN6FvHyXh26ARQEYkVFvzsas.roa
File: wyTHN6FvHyXh26ARQEYkVFvzsas.roa (raw, json)
Hash identifier: FQ4U1jN5wJSyQ+OAYQLlKoyCeng+iRWRn0TEVQlowik=
Subject key identifier: C3:24:C7:37:A1:6F:1F:25:E1:DB:A0:11:40:46:24:54:5B:F3:B1:AB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A157824BAEE6EACEB85364853CF2C01C5B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wyTHN6FvHyXh26ARQEYkVFvzsas.roa
Signing time: Tue 20 Oct 2026 04:11:59 +0000
ROA not before: Tue 20 Oct 2026 04:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213495
IP address blocks: 5.175.183.0/24 maxlen: 24
5.175.188.0/24 maxlen: 24
5.175.234.0/24 maxlen: 24
5.231.56.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:82:4b:ae:e6:ea:ce:b8:53:64:85:3c:f2:c0:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 20 04:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c324c737a16f1f25e1dba011404624545bf3b1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:53:7a:5b:e5:1c:a9:ef:de:af:fc:10:4c:
c9:ea:19:25:40:15:90:6b:80:cf:1e:59:da:81:74:
bd:9a:7a:9c:75:23:32:21:73:26:43:df:c4:41:3e:
4b:28:6c:3a:22:2d:e7:e9:5b:ec:6b:0f:81:9b:33:
3f:78:37:4d:8b:d9:ca:95:46:b0:cd:a2:9a:35:08:
51:c4:73:81:94:8a:d3:81:0c:93:64:f4:ae:47:a7:
9c:31:4a:8c:45:bd:f6:64:c9:8b:b6:96:32:cc:dd:
1a:4d:1b:46:01:15:70:51:0e:f8:e3:05:53:1a:ba:
c9:07:d3:da:c3:83:83:a1:4a:2f:f4:65:57:f2:7c:
cd:35:18:98:a7:a5:22:90:b1:35:a9:23:3b:2d:52:
c3:17:e9:30:fa:de:e5:bf:16:21:43:7b:f2:56:49:
5f:94:6f:db:04:00:ff:53:3a:15:83:19:3e:db:e3:
75:d0:61:13:9f:40:a0:16:02:02:5b:36:57:c3:60:
96:e2:67:2e:96:5e:d2:f7:1b:b3:04:8c:ad:f4:8f:
b9:be:b5:01:1b:4c:c2:81:44:01:76:24:36:3c:36:
04:44:26:d1:2f:74:d4:9a:07:a4:e0:94:c3:e7:c0:
6f:08:06:2c:6a:af:f0:f7:69:8d:6d:b8:78:c8:6c:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:C7:37:A1:6F:1F:25:E1:DB:A0:11:40:46:24:54:5B:F3:B1:AB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wyTHN6FvHyXh26ARQEYkVFvzsas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.183.0/24
5.175.188.0/24
5.175.234.0/24
5.231.56.0/24
5.231.106.0/24
77.90.40.0/24
85.93.31.0/24
89.144.47.0/24
94.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
02:15:1b:e4:84:b1:04:a0:9c:69:4b:2f:29:a1:7d:62:4d:45:
ac:e2:28:15:55:74:55:56:da:f6:95:6b:34:83:a0:3e:0e:8d:
b9:36:05:81:55:16:07:65:a9:57:1c:54:65:99:ea:cf:5c:90:
44:1f:f2:d6:21:1b:34:59:43:22:9f:af:f6:aa:ef:aa:99:eb:
d5:79:96:15:ab:55:8f:77:92:f3:ea:d4:ff:b1:48:27:13:2d:
f3:2e:7a:33:6b:db:d0:f0:28:6b:7a:35:31:8b:d6:d2:aa:a6:
d0:20:20:3f:52:ee:28:0d:32:df:85:69:c2:f2:a3:23:66:8d:
f2:2d:c1:57:d2:bb:6e:0e:50:d2:7b:0c:67:84:19:e3:2a:c8:
55:6c:73:96:a1:03:4f:cb:a0:b6:0c:85:61:9b:3c:18:45:23:
8d:18:f0:91:df:0b:33:b5:ce:71:86:57:57:cd:7c:73:16:96:
1b:43:b7:9a:df:be:b2:15:c6:85:25:3d:c2:06:c4:78:51:9e:
a9:69:9e:8a:62:a8:4e:26:44:81:d9:f9:3c:ef:b6:6b:bc:aa:
a2:89:63:9a:90:c1:27:9c:d0:1e:44:d5:68:d2:56:b7:d4:4e:
52:1e:09:6d:fd:62:1a:61:2d:71:8d:5c:f1:82:b5:15:26:06:
82:97:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:09 2026 by rpki-client