Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zfJUQJ9Manvf9iZa004bnIKd5WE.roa
File: zfJUQJ9Manvf9iZa004bnIKd5WE.roa (raw, json)
Hash identifier: W1hZYXm2RXYj7iI5niTz88XQHOqPREpnJGaLdtnIQBI=
Subject key identifier: CD:F2:54:40:9F:4C:6A:7B:DF:F6:26:5A:D3:4E:1B:9C:82:9D:E5:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F788BCB82A44467103288EE7A72569990
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zfJUQJ9Manvf9iZa004bnIKd5WE.roa
Signing time: Sun 19 Jul 2026 04:04:15 +0000
ROA not before: Sun 19 Jul 2026 04:04:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:78:8b:cb:82:a4:44:67:10:32:88:ee:7a:72:56:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 19 04:04:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf254409f4c6a7bdff6265ad34e1b9c829de561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:2e:a9:42:1c:12:33:47:80:8e:95:ea:b9:
ab:d5:a5:e9:f2:d4:60:5e:ee:c7:2c:22:75:72:fa:
3f:ac:5d:8f:f8:57:55:fa:7b:4e:7e:59:e8:dc:de:
67:79:dd:bb:a4:9b:21:1f:f9:c7:72:ea:04:f5:39:
28:04:f0:a1:d7:ed:73:f2:31:e5:3d:f4:3b:2e:e7:
b9:6d:bd:7b:8c:31:2c:bd:60:3a:a9:48:76:21:99:
bf:d4:4f:44:0c:3b:df:c1:8a:db:ce:e2:87:ec:25:
ad:72:fb:e9:04:29:b2:cd:99:c3:ad:2b:60:cc:f7:
8b:57:c1:48:5a:99:f6:42:0f:b3:3b:85:97:92:b3:
d9:2c:5c:f3:fc:b5:8a:0c:9c:e1:f6:69:9e:24:0f:
6d:7a:cc:2e:e6:b2:c0:31:21:2f:74:08:b0:f8:58:
ed:63:c3:96:b9:ed:35:f4:92:e9:60:05:32:59:78:
ca:94:ce:8a:2d:ab:69:66:75:d3:12:a5:79:3c:59:
7e:ee:1a:ce:35:35:eb:47:67:77:44:81:2b:0d:b3:
13:1a:ef:64:98:9f:9e:b0:06:1f:ff:36:cc:1b:e9:
63:23:69:c0:df:f6:74:ec:d2:a7:99:83:31:fa:10:
f6:ce:4a:61:3f:58:9f:59:4f:12:b2:b4:6c:e8:2e:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F2:54:40:9F:4C:6A:7B:DF:F6:26:5A:D3:4E:1B:9C:82:9D:E5:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zfJUQJ9Manvf9iZa004bnIKd5WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.175.203.0/24
5.175.221.0/24
87.239.131.0/24
89.106.75.0-89.106.77.255
89.106.82.0/24
94.249.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:48:64:a3:dc:33:c6:f9:df:fe:aa:78:36:7f:00:f4:98:3f:
0c:7d:ee:84:d7:77:c3:ea:98:c3:39:c4:ab:1d:bb:f8:05:2a:
d1:52:3c:57:4e:7e:a3:86:7f:90:7b:9c:87:99:29:e5:9e:b3:
4c:9e:20:f7:3f:aa:e9:ae:e6:3b:89:f5:75:1c:b9:61:1e:01:
a6:08:54:d3:a3:53:7e:d7:4b:74:4a:8c:93:39:04:64:4e:dc:
38:14:d8:39:b0:79:04:ec:85:a6:bc:2b:f3:26:6e:d8:be:2e:
dc:36:1c:3b:5a:46:e8:8c:82:fc:65:e3:a2:b7:7b:ea:e8:b7:
ba:7c:8c:27:09:e0:8a:d7:3c:d1:12:3f:75:29:a3:af:85:35:
2f:82:01:11:94:cf:5c:a4:60:98:45:4b:e0:e9:f2:c3:07:6c:
6e:d4:7f:5e:59:f4:0b:6f:1a:17:ca:57:f4:c5:df:20:a0:8f:
7b:a6:a9:b7:37:7a:35:ef:34:79:4e:f4:90:07:1d:33:19:90:
40:23:0c:cf:aa:88:c8:c9:86:c1:a8:ce:f7:0d:55:42:06:1d:
34:19:f8:1f:3a:d1:7a:01:2c:b7:ad:c8:ba:c9:be:53:b0:4b:
38:5f:4d:c7:90:62:70:c0:4a:d3:be:a7:7a:08:22:95:03:41:
05:db:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client