Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2oVnZT2e1kZj-leZ_kQ5Gn1IBUU.roa
File: 2oVnZT2e1kZj-leZ_kQ5Gn1IBUU.roa (raw, json)
Hash identifier: EwgV+nipdKf7Xap3+BDNNq8Q449+TQM4xe0DI8cn7jk=
Subject key identifier: DA:85:67:65:3D:9E:D6:46:63:FA:57:99:FE:44:39:1A:7D:48:05:45
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A08F282630A85317E6748FC892709375F6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2oVnZT2e1kZj-leZ_kQ5Gn1IBUU.roa
Signing time: Fri 11 Sep 2026 06:29:28 +0000
ROA not before: Fri 11 Sep 2026 06:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.217.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:28:26:30:a8:53:17:e6:74:8f:c8:92:70:93:75:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 11 06:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da8567653d9ed64663fa5799fe44391a7d480545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:f9:4d:87:49:6f:78:a9:59:21:62:3e:24:
f9:03:9a:78:66:da:b1:19:6e:e7:a1:43:40:93:69:
12:b9:3c:42:33:f6:69:e9:44:e2:e7:51:59:63:31:
36:69:5d:07:ee:21:9c:63:2b:11:15:1d:c5:d2:c8:
c9:d9:bc:b7:a7:82:08:79:f9:dc:ac:f8:af:3e:9c:
5c:80:e5:c9:77:2e:f6:45:d1:7c:d2:60:9b:92:ed:
60:85:c0:c3:92:5f:25:0f:2a:fe:ac:a9:16:1e:18:
60:20:f2:57:26:17:6a:c9:ae:c6:19:79:dc:4c:ce:
e8:54:4c:d1:6e:a1:d3:8e:4d:42:a8:7f:ba:e6:a6:
6d:ec:8f:07:a2:35:91:ef:ad:0e:0d:b5:02:14:b9:
10:7f:08:cb:1a:ac:69:95:f2:f1:86:fb:b3:6b:27:
01:26:c1:f4:ab:f5:00:86:45:2b:f1:1a:ed:6c:ea:
c8:f5:8a:59:2b:d2:bf:8c:9b:3a:ab:44:9d:fc:f0:
d1:31:66:94:3f:ab:cb:97:e7:57:05:9e:ea:f7:11:
4d:d7:4a:e3:8f:00:9d:ae:f8:7c:6e:dd:2c:f8:90:
48:01:13:da:32:99:40:9a:93:2a:01:7a:5a:a9:b0:
c0:73:9f:f3:f1:bd:af:0c:9a:32:e8:5d:68:50:74:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:67:65:3D:9E:D6:46:63:FA:57:99:FE:44:39:1A:7D:48:05:45
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2oVnZT2e1kZj-leZ_kQ5Gn1IBUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.174.0/24
5.175.217.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
87.239.129.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.197.0/24
Signature Algorithm: sha256WithRSAEncryption
50:da:c3:87:e1:a8:7a:1f:3c:40:b7:87:1d:52:db:2d:3d:6d:
ed:f3:36:00:9c:42:6e:7b:85:8d:65:d1:c8:10:b3:cf:79:e6:
4c:86:88:e4:2d:f3:ae:68:26:25:76:82:9f:b9:01:40:f3:a6:
87:dd:85:e2:b9:71:e8:15:6d:2f:33:d4:72:68:dc:1c:b1:6a:
99:91:ae:a9:ee:ca:85:3b:7f:5d:d0:17:ad:5e:95:24:39:a3:
29:5a:b7:74:f6:cd:fd:5a:00:f1:be:d3:23:ac:fd:1d:fd:1f:
79:f3:ed:2a:0e:78:a9:86:52:d4:b6:86:f9:43:e8:9a:5b:49:
48:c7:3f:f6:2f:2c:49:ec:67:29:1c:94:87:c1:5f:02:d3:d1:
e4:c7:1c:06:a0:ba:2e:6a:74:8b:ef:65:d2:97:d0:f9:16:c1:
32:38:33:1b:52:e7:e4:41:bf:c1:31:2c:8b:f7:05:33:97:79:
10:60:1a:43:de:bc:90:7c:14:6a:b0:44:4d:87:e5:88:ec:79:
70:ea:1c:ef:c6:2d:53:a4:e6:c3:47:d1:f0:5a:85:f6:fe:f1:
57:4d:e0:6b:2a:0e:24:e9:20:cb:24:b4:9d:bc:71:49:97:fa:
67:be:4f:6e:e7:b2:f3:7d:ca:20:b3:d6:0d:b7:22:9e:7f:be:
cf:3a:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:56 2026 by rpki-client