Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0eIyaRkpW766LGM3J7EhvOTRbbI.roa
File: 0eIyaRkpW766LGM3J7EhvOTRbbI.roa (raw, json)
Hash identifier: uuYzc2JV6RiITqVjZtAAUrg83UQlVjcswFmG9t+8mzc=
Subject key identifier: D1:E2:32:69:19:29:5B:BE:BA:2C:63:37:27:B1:21:BC:E4:D1:6D:B2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FA1C08105D202F7D53EEDE3C82657F120
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0eIyaRkpW766LGM3J7EhvOTRbbI.roa
Signing time: Mon 27 Jul 2026 04:06:15 +0000
ROA not before: Mon 27 Jul 2026 04:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:c0:81:05:d2:02:f7:d5:3e:ed:e3:c8:26:57:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 27 04:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1e2326919295bbeba2c633727b121bce4d16db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:a7:45:66:36:c4:35:70:d2:44:41:61:b5:
74:93:cb:44:ea:39:bb:2b:91:3e:39:ff:fe:b5:df:
db:a5:d3:dc:30:39:fa:fe:77:b4:06:b5:20:48:50:
ec:9f:e2:ab:63:22:26:9a:ee:22:0f:e3:78:09:96:
42:75:b4:b1:eb:a7:ed:1a:ab:36:4a:ad:83:d0:83:
12:54:da:0e:5f:02:47:c9:96:4c:70:44:10:d8:19:
54:b5:9a:fd:05:4c:f6:fb:73:4a:ae:16:15:09:f2:
d7:07:6a:61:3d:40:03:33:b4:29:70:d0:b4:67:e9:
6c:fd:b6:01:5e:e9:55:ed:dc:56:90:ca:b4:53:fb:
7b:b1:f0:40:45:a3:f7:48:ab:33:4c:05:05:77:b3:
5d:ae:71:42:a5:ba:43:e6:34:64:9e:46:c2:31:e4:
4c:51:76:3f:33:a1:82:f6:20:72:b3:3c:4b:8e:74:
4a:0f:49:44:7f:6b:3b:96:71:7c:57:0c:d1:c2:45:
ab:b5:de:92:0e:f2:2a:27:5d:b9:5c:7f:ad:4d:ee:
93:e3:b0:49:a5:3d:8e:79:97:33:10:43:ff:91:4d:
50:2c:c3:38:48:af:03:e3:ea:7f:94:ff:a0:5b:3b:
37:56:2e:19:93:5b:a0:cb:74:48:5b:af:ef:88:28:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:32:69:19:29:5B:BE:BA:2C:63:37:27:B1:21:BC:E4:D1:6D:B2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0eIyaRkpW766LGM3J7EhvOTRbbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.231.26.0/24
5.231.242.0/24
77.90.48.0/24
89.106.71.0/24
94.249.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b4:74:f2:22:07:c0:eb:4d:15:6e:df:0f:20:f4:8d:a1:28:
06:1c:a8:2d:df:74:3f:22:23:21:63:78:c4:92:1e:c3:f5:11:
34:b4:d8:68:20:a1:19:25:b5:e9:cf:92:55:83:87:2c:73:6f:
a8:5a:ca:c8:07:a7:62:b7:91:c2:f3:89:16:df:d7:d1:e8:0e:
14:52:b3:62:b9:9f:9e:8f:be:b0:c0:56:7b:0a:ab:9b:e8:8a:
f0:9c:c6:3c:de:2f:d5:25:8c:6c:77:f0:ec:12:b9:d7:6f:45:
7e:47:89:3c:2a:e0:aa:56:5a:34:17:f8:ef:03:88:b6:d9:af:
ec:2f:44:38:af:38:cb:14:86:d4:d7:f9:c4:3e:fe:5c:e9:8d:
4b:cb:f7:3b:b3:72:9e:75:ed:ce:d0:79:9a:ed:bc:ce:3b:16:
71:7f:11:70:be:cd:ab:81:5c:82:aa:63:fa:f4:89:45:40:a8:
c0:6b:e1:2a:74:5a:de:8d:44:7d:ee:e7:fa:21:51:b9:ba:13:
58:b3:ce:04:97:c9:a6:9d:f8:6b:dc:d0:20:9f:a8:59:c0:54:
a0:4b:86:c9:57:8d:28:90:33:18:08:dc:60:96:be:0f:9c:b4:
98:4b:cb:79:9d:54:9e:9c:41:26:ef:2b:10:61:bc:e6:75:34:
42:f1:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:15 2026 by rpki-client