Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xqumHn82I0diRc7xhwearjSluiQ.roa
File: xqumHn82I0diRc7xhwearjSluiQ.roa (raw, json)
Hash identifier: XgJW2hbI6ysjc/4Q6K9K7+sRfkbFcRL6b7wIQITlrek=
Subject key identifier: C6:AB:A6:1E:7F:36:23:47:62:45:CE:F1:87:07:9A:AE:34:A5:BA:24
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CC4955817C1CD53514992C6222B3E6A81
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xqumHn82I0diRc7xhwearjSluiQ.roa
Signing time: Fri 06 Mar 2026 19:17:27 +0000
ROA not before: Fri 06 Mar 2026 19:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213250
IP address blocks: 5.83.132.0/24 maxlen: 24
5.175.166.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:95:58:17:c1:cd:53:51:49:92:c6:22:2b:3e:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 6 19:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6aba61e7f3623476245cef187079aae34a5ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:d9:48:bf:8c:eb:30:17:a9:c1:9e:7b:9e:
40:c1:56:6a:72:68:15:9a:8e:fa:49:29:84:cf:dd:
75:5d:31:5d:6a:00:63:9a:39:7f:41:d1:6d:30:74:
74:ec:93:d4:05:54:39:98:9e:2d:db:54:34:09:62:
81:82:dd:3b:0f:a9:98:f0:18:a9:53:b6:74:84:94:
8b:5b:81:ba:c7:83:47:6f:60:fa:42:f3:78:ec:41:
32:90:38:74:bf:2c:23:32:38:4d:32:24:dd:ab:cb:
bd:fc:51:12:5c:00:38:05:2a:0f:ef:6a:ce:82:55:
ef:76:e0:e3:b1:cd:9e:3d:63:e2:57:71:44:d5:88:
14:5d:ea:20:0b:1c:07:57:e9:fa:1a:9f:6a:e0:72:
52:e3:16:45:ca:48:93:55:df:bf:be:6e:b7:fa:9f:
47:86:13:eb:c1:75:51:cc:ab:b3:42:31:15:e6:c8:
47:fc:a7:24:3d:af:a1:e2:bf:27:e8:0d:8b:44:81:
b6:20:4a:f3:9c:82:f5:41:f8:fb:29:78:f6:3a:78:
be:57:21:95:d8:b5:bc:24:84:18:50:0e:60:08:0a:
cd:3b:ac:0a:1a:4f:2a:b9:8a:59:15:f7:06:0a:d7:
bc:37:84:d2:6c:82:08:5f:49:4b:d0:48:5a:9d:b1:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:A6:1E:7F:36:23:47:62:45:CE:F1:87:07:9A:AE:34:A5:BA:24
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xqumHn82I0diRc7xhwearjSluiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.132.0/24
5.175.166.0/24
5.231.108.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:64:42:76:ea:e4:12:8b:5d:6c:48:21:91:28:75:60:54:94:
b2:2c:37:b8:64:6d:62:94:70:47:f5:a5:88:b7:b8:a3:e5:ce:
ef:72:bc:88:36:ae:c5:f5:c0:a1:28:f7:4b:c8:4e:56:12:2f:
84:2f:af:32:68:88:bc:eb:3b:9b:23:e4:44:2f:23:d6:4e:da:
13:69:b5:79:d7:be:ad:4e:ae:7f:80:af:98:23:68:65:1d:cc:
84:8b:ef:ee:77:a7:c7:c3:d1:ed:e1:71:36:88:a1:a1:b6:27:
ec:9b:c4:cc:2e:f3:bc:ee:ee:d5:59:0a:c1:1c:88:fe:b1:1c:
e5:49:37:19:b4:29:bf:01:f1:31:2a:56:1e:d7:c1:fa:ac:7b:
55:3b:eb:54:24:6d:11:ae:d6:5b:8d:9d:72:3a:42:0b:a9:03:
f1:ab:d3:17:15:c8:3f:12:b9:88:6e:03:9c:70:cd:79:75:33:
d0:1c:7c:08:b0:d2:6b:8f:8a:ea:18:3c:90:b0:8f:00:7d:ae:
57:ac:9e:a4:6f:3a:30:fb:5d:aa:dd:25:86:c6:9d:40:59:89:
1c:b4:12:3e:1d:d6:c4:b5:f0:f3:a6:97:ef:97:0b:cc:bd:ea:
e7:4d:10:76:68:11:a3:88:27:72:b6:23:e9:46:0a:fc:d1:6f:
53:76:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:10:21 2026 by rpki-client