Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xQO9eMCl3_S7V_s3n6X7ytnGrx8.roa
File: xQO9eMCl3_S7V_s3n6X7ytnGrx8.roa (raw, json)
Hash identifier: hC/CafyL9PcJo+gfnLcQHtH+MWUJ42DXj59Z+1+AGvY=
Subject key identifier: C5:03:BD:78:C0:A5:DF:F4:BB:57:FB:37:9F:A5:FB:CA:D9:C6:AF:1F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A11ED4377FAED1A8D28152A09F7225407C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xQO9eMCl3_S7V_s3n6X7ytnGrx8.roa
Signing time: Fri 09 Oct 2026 04:03:06 +0000
ROA not before: Fri 09 Oct 2026 04:03:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.172.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.229.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.231.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
85.118.164.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d4:37:7f:ae:d1:a8:d2:81:52:a0:9f:72:25:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 9 04:03:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c503bd78c0a5dff4bb57fb379fa5fbcad9c6af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:0d:3c:a2:80:06:ee:ad:36:ba:8c:73:09:
dc:bd:8e:22:c0:41:4b:c7:fe:45:9e:8b:60:d3:0b:
2d:01:bf:99:dc:f1:e5:5d:af:3b:f7:fa:eb:2f:a6:
ab:be:a1:70:ac:ed:15:fd:8a:7b:c0:18:de:5a:07:
e6:b9:b8:c8:b1:ab:48:61:33:45:a9:1b:72:f4:77:
5e:c5:30:24:3b:fd:9f:a8:84:a8:a3:dd:c8:40:17:
79:73:34:d4:7c:a8:46:8d:29:b4:53:1e:23:3e:c3:
e3:c9:82:5c:71:96:d5:e7:1c:d5:0c:fd:2a:29:aa:
47:59:97:3f:96:81:db:e7:03:73:ce:8a:22:ba:ac:
50:14:cc:a0:3e:7d:bd:b0:f7:ee:32:7f:e3:2b:b0:
e0:2e:b8:84:b2:d7:4c:6f:13:40:09:3f:55:19:f9:
d8:39:5b:f0:e1:63:dc:9f:02:9f:77:3e:3f:38:06:
40:20:05:35:4a:e8:5e:a6:87:67:17:57:6e:0e:39:
1b:df:ee:6b:da:e7:32:85:17:6a:f1:47:ea:4f:e3:
a6:c0:06:49:f3:fc:91:1e:7a:b5:a4:05:f9:bc:2f:
35:82:35:24:83:43:bd:d3:38:c2:cf:4f:be:de:e5:
c8:b9:5a:89:5c:3d:df:56:52:bc:eb:68:e9:76:3a:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:BD:78:C0:A5:DF:F4:BB:57:FB:37:9F:A5:FB:CA:D9:C6:AF:1F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xQO9eMCl3_S7V_s3n6X7ytnGrx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.172.0/24
5.175.209.0/24
5.175.212.0/24
5.175.229.0/24
5.231.110.0/24
5.231.115.0/24
5.231.124.0/24
5.231.231.0/24
5.231.241.0/24
85.118.164.0/24
89.106.87.0/24
89.106.90.0/24
89.144.40.0/24
94.249.181.0/24
94.249.226.0/24
94.249.238.0/24
94.249.243.0/24
178.18.149.0/24
178.18.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:ad:53:4f:9f:dc:9a:07:a8:cf:df:25:08:0f:18:52:52:4d:
4d:26:18:cf:79:33:3c:2f:95:d2:96:92:d7:5e:59:f1:48:97:
9f:fd:f5:c6:8c:e3:39:7d:f5:14:b8:87:f2:d9:88:ce:15:35:
65:93:74:5a:23:90:a3:0e:54:d1:35:12:ae:91:df:ab:66:04:
bd:a6:45:bc:4a:0b:6e:28:67:d7:8b:50:90:92:60:85:9f:a5:
7a:be:e1:83:90:49:1f:15:7f:13:ee:02:8e:72:db:1f:a1:4d:
fe:fd:e7:71:cb:97:dd:52:dc:64:9d:e1:3a:ba:c6:35:01:3a:
9b:33:c4:e6:ba:bc:32:09:cb:a6:a5:e6:d2:74:b8:bb:19:13:
1e:5d:de:d4:88:53:07:6b:05:e7:2a:c6:47:62:4a:52:fc:8a:
9c:69:90:a7:b1:bf:84:f5:51:8d:ee:24:75:50:c3:71:d9:a8:
0d:8e:a2:1b:cd:75:2c:cc:f0:c7:2a:b0:12:6e:3c:47:2d:ef:
50:1d:a2:2e:7b:50:5d:c2:d5:54:9e:30:69:34:36:9f:cd:2f:
39:2c:28:fa:26:6d:f3:49:84:45:9b:4f:17:44:9d:ae:96:c0:
a0:74:d0:3d:8e:07:57:53:23:a8:9c:9c:3b:cd:2f:c9:d1:b3:
b4:ed:1a:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:15 2026 by rpki-client