Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zMx2nvhi_JQ-yyl1SG2otpkUrMg.roa
File: zMx2nvhi_JQ-yyl1SG2otpkUrMg.roa (raw, json)
Hash identifier: G9zIu700NAPkoQbKLe9RnAZfK5PjBDrFxgiX2btbBrE=
Subject key identifier: CC:CC:76:9E:F8:62:FC:94:3E:CB:29:75:48:6D:A8:B6:99:14:AC:C8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FE9FFA14F27670B496CC22AB318269E82
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zMx2nvhi_JQ-yyl1SG2otpkUrMg.roa
Signing time: Mon 10 Aug 2026 04:47:51 +0000
ROA not before: Mon 10 Aug 2026 04:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215828
IP address blocks: 5.231.116.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e9:ff:a1:4f:27:67:0b:49:6c:c2:2a:b3:18:26:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 10 04:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cccc769ef862fc943ecb2975486da8b69914acc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:dc:40:a0:4d:5c:3b:85:f1:74:39:db:ec:
39:fa:82:cd:5f:b1:d9:8f:1f:33:e5:b4:fa:cd:a8:
ba:2e:eb:08:f3:60:03:ae:60:6e:b9:c1:7f:61:d3:
78:a4:3a:fe:72:e4:7d:a8:85:1b:3b:a5:9e:1a:f4:
c9:ea:6b:c3:45:b9:98:e1:96:d8:4e:11:b1:d6:60:
ed:29:58:94:3d:42:71:c5:98:d7:7e:2e:d3:2f:ca:
3d:27:a9:fb:1e:47:b1:0f:45:5b:57:b1:e3:c8:7e:
45:87:e4:e1:ce:a5:4c:f4:8d:d4:3e:64:3b:1d:66:
64:ae:26:3a:8b:07:aa:08:3c:48:a4:11:18:08:7a:
68:72:56:ad:59:95:34:7d:4f:45:04:1b:94:22:7a:
76:30:53:22:a6:03:c8:1d:7c:76:e0:bd:83:2b:b4:
64:04:57:12:9d:99:0f:19:89:95:b5:f4:d3:85:76:
64:71:da:b9:9a:2c:d8:27:2b:e3:ce:58:b1:94:2e:
2f:21:88:ad:c7:09:17:53:77:b0:0a:a1:24:0d:bc:
bf:df:10:b4:cf:d8:3b:8d:9e:03:ad:4b:d0:b9:db:
6c:f9:9c:97:f1:3d:bb:6f:f8:c4:e1:d1:ea:e0:7b:
b2:46:a2:90:f6:19:ad:98:a4:de:57:c8:ba:34:bc:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:76:9E:F8:62:FC:94:3E:CB:29:75:48:6D:A8:B6:99:14:AC:C8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zMx2nvhi_JQ-yyl1SG2otpkUrMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.116.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ac:02:83:4c:21:7a:a4:44:6a:79:ac:f3:aa:89:eb:9b:24:
9f:a3:af:df:86:1b:c8:49:ee:43:36:f7:35:88:a8:94:72:2b:
d9:cc:70:c5:83:82:0f:23:9c:23:82:4f:8c:c0:d8:d8:4a:18:
21:e8:ab:de:ab:c5:6b:bd:12:2c:eb:50:86:31:3e:0b:e3:fc:
f4:8e:b9:a4:3f:63:cc:49:81:21:19:a6:60:20:6c:c0:33:1b:
7f:7b:87:dc:28:00:fd:25:b3:7c:a0:ff:1c:44:3e:0a:e8:ca:
09:00:94:30:1e:fe:81:9b:f7:42:5a:be:9f:f0:f6:e6:62:4b:
ba:10:a2:bc:e9:bc:01:83:45:d2:e8:7b:2f:98:73:a6:41:91:
bb:b7:24:e2:27:e4:1a:89:7b:b0:32:cb:4f:55:e0:25:e9:dd:
5b:aa:21:62:1d:7e:34:a5:09:43:b4:33:bf:74:2b:6d:45:ff:
fe:81:78:4a:15:15:83:55:bd:26:07:7a:02:35:bf:8c:60:86:
2e:30:fa:8d:11:52:1f:c1:a9:b3:a2:2b:75:d9:34:be:46:61:
50:14:d1:99:d7:d9:26:aa:88:05:bf:e5:7e:22:cd:58:f3:ac:
80:b1:05:9e:d8:ef:50:e6:45:da:2e:43:e1:69:91:48:6b:07:
f4:b5:3b:51
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/p/6FPJ2cLSWzCKrMYJp6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODEwMDQ0NzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2NjNzY5ZWY4NjJmYzk0M2VjYjI5NzU0ODZkYThiNjk5MTRhY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ncQKBNXDuF8XQ52+w5+oLNX7HZ
jx8z5bT6zai6LusI82ADrmBuucF/YdN4pDr+cuR9qIUbO6WeGvTJ6mvDRbmY4ZbY
ThGx1mDtKViUPUJxxZjXfi7TL8o9J6n7HkexD0VbV7HjyH5Fh+ThzqVM9I3UPmQ7
HWZkriY6iweqCDxIpBEYCHpoclatWZU0fU9FBBuUInp2MFMipgPIHXx24L2DK7Rk
BFcSnZkPGYmVtfTThXZkcdq5mizYJyvjzlixlC4vIYitxwkXU3ewCqEkDby/3xC0
z9g7jZ4DrUvQudts+ZyX8T27b/jE4dHq4HuyRqKQ9hmtmKTeV8i6NLyc8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMzMdp74YvyUPsspdUhtqLaZFKzIMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvek14Mm52aGlfSlEteXlsMVNHMm90cGtVck1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABed0AwQA
TVoZAwQAXvmKMA0GCSqGSIb3DQEBCwUAA4IBAQBZrAKDTCF6pERqeazzqonrmySf
o6/fhhvISe5DNvc1iKiUcivZzHDFg4IPI5wjgk+MwNjYShgh6Kveq8VrvRIs61CG
MT4L4/z0jrmkP2PMSYEhGaZgIGzAMxt/e4fcKAD9JbN8oP8cRD4K6MoJAJQwHv6B
m/dCWr6f8PbmYku6EKK86bwBg0XS6HsvmHOmQZG7tyTiJ+QaiXuwMstPVeAl6d1b
qiFiHX40pQlDtDO/dCttRf/+gXhKFRWDVb0mB3oCNb+MYIYuMPqNEVIfwamzoit1
2TS+RmFQFNGZ19kmqogFv+V+Is1Y86yAsQWe2O9Q5kXaLkPhaZFIawf0tTtR
-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:25 2026 by rpki-client