Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-fTOuL110vJ3QBiXdXGSmVmFJfM.roa
File: 1-fTOuL110vJ3QBiXdXGSmVmFJfM.roa (raw, json)
Hash identifier: HlfhpW/ZuGyDSzebvEwPa17zqAocc8bxbKRB57EUg2U=
Subject key identifier: F9:F4:CE:B8:BD:75:D2:F2:77:40:18:97:75:71:92:99:59:85:25:F3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CA00D3B85F15D551F62745D1A87F3B577
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-fTOuL110vJ3QBiXdXGSmVmFJfM.roa
Signing time: Fri 27 Feb 2026 17:02:27 +0000
ROA not before: Fri 27 Feb 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.175.186.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
94.249.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:0d:3b:85:f1:5d:55:1f:62:74:5d:1a:87:f3:b5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9f4ceb8bd75d2f27740189775719299598525f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:fe:02:2c:87:ab:a1:16:df:09:6c:3f:ac:
61:86:9c:44:3d:a0:0e:e4:71:8c:0c:46:fa:25:0e:
23:a4:4e:85:2e:d4:fd:5d:b4:6c:48:db:30:d8:5c:
06:a9:c3:df:fd:c8:ed:39:eb:6c:c8:2c:90:6f:21:
53:c0:a4:10:91:6c:4a:48:c6:a0:da:21:5c:51:1d:
dd:2f:30:19:45:c2:91:84:03:30:08:0c:92:d4:79:
fa:eb:08:ee:50:a6:44:e9:d5:bc:98:e6:1b:fc:ba:
6f:cf:e9:94:07:88:2d:37:00:fa:20:46:03:1a:fa:
35:4f:0e:4c:ea:06:d0:d5:da:31:6c:08:e9:30:21:
e8:ac:e0:2e:1a:05:88:77:a1:77:fe:91:cc:1c:8f:
b4:b3:a6:fc:8e:b4:47:48:54:23:87:8f:2b:1d:6a:
3a:9f:d6:fc:97:39:b1:f8:16:8c:c1:e4:85:ec:c7:
07:a2:f7:fd:7b:ef:74:f6:42:4c:5a:19:3a:18:12:
72:5a:a4:aa:db:1e:c2:5d:0a:af:d5:11:2e:10:98:
bd:2f:ca:68:26:58:17:3e:08:ef:ac:ce:9c:d8:16:
f0:de:17:3e:10:a0:38:f4:f9:20:e9:20:a1:47:b3:
dc:6e:e6:79:66:82:ca:79:45:c2:7f:bd:a0:5d:35:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:CE:B8:BD:75:D2:F2:77:40:18:97:75:71:92:99:59:85:25:F3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-fTOuL110vJ3QBiXdXGSmVmFJfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.186.0/24
77.90.33.0/24
85.93.5.0/24
89.106.89.0/24
94.249.239.0-94.249.240.255
Signature Algorithm: sha256WithRSAEncryption
d8:a6:52:9b:f0:15:c8:78:fa:15:a0:b0:cd:c8:c5:05:6c:10:
89:74:18:b1:26:d2:72:25:00:76:0f:23:2d:00:af:d7:5b:ea:
f7:d1:92:1c:5d:60:10:89:8b:4e:c4:22:5c:55:65:25:85:e8:
de:6e:68:33:f5:b9:3f:48:dc:eb:62:50:2b:79:61:d6:98:24:
c6:28:fe:19:5a:2f:cf:d9:8e:e6:60:79:57:e1:09:25:77:ec:
f3:26:8e:2c:65:cc:ef:2b:7a:c0:d5:9f:49:57:d0:5c:f2:2f:
50:e6:9d:da:26:28:cf:51:07:08:b4:82:b0:21:8f:f2:2c:7b:
64:c8:26:22:86:bd:c8:d9:91:ee:6b:18:46:68:9a:ab:69:ca:
1b:da:bb:e2:c4:15:a9:dc:7c:e9:bf:e3:93:1a:71:75:de:62:
6c:b7:a6:50:09:59:2e:80:ae:b8:83:e7:7a:75:e6:f0:cd:33:
89:d6:9f:28:69:cc:cb:db:bf:63:d0:d5:ee:cf:a1:a9:fa:ee:
5a:2c:61:81:50:bd:1d:36:54:c1:31:b5:7d:c6:72:f1:13:c7:
d0:51:6e:f3:85:d6:c2:68:f8:c3:f3:a9:6d:f3:2a:95:cb:dd:
a1:fc:6e:1a:5a:e2:26:44:86:c8:4c:3f:82:0b:ec:d0:28:fa:
d0:ca:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:33 2026 by rpki-client