Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4MruslNI4cc97YAY33MEuY49CyA.roa
File: 4MruslNI4cc97YAY33MEuY49CyA.roa (raw, json)
Hash identifier: W5C2Cuc2sARFuwjy9pe7aERg64hxiQyTlbU5z6lYpc4=
Subject key identifier: E0:CA:EE:B2:53:48:E1:C7:3D:ED:80:18:DF:73:04:B9:8E:3D:0B:20
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CA00D3AD8E3C8D20EDCC81AE599290EC2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4MruslNI4cc97YAY33MEuY49CyA.roa
Signing time: Fri 27 Feb 2026 17:02:27 +0000
ROA not before: Fri 27 Feb 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.151.0/24 maxlen: 24
5.175.194.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:0d:3a:d8:e3:c8:d2:0e:dc:c8:1a:e5:99:29:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0caeeb25348e1c73ded8018df7304b98e3d0b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:58:1d:f8:48:d2:fd:29:0c:61:49:50:fc:
91:e4:4b:42:2e:37:56:ac:67:e6:e4:8c:cf:66:38:
d3:d5:4d:1d:c4:21:32:cf:aa:0c:7f:f5:bd:4c:9d:
ea:85:16:bd:15:e6:98:f3:6b:01:95:2b:d7:70:ed:
ed:87:19:5e:25:7d:38:5a:dc:10:12:73:21:3e:91:
a2:c7:79:be:bb:64:55:31:83:8b:93:6d:ff:21:d2:
2c:09:5b:62:59:20:50:71:f4:d8:d0:49:2b:de:b6:
21:92:98:bd:2e:9d:4b:d0:df:10:7a:c3:a1:76:72:
10:4b:3d:f4:bb:75:db:a3:05:ac:36:50:11:8c:fb:
b5:1b:fb:ca:fb:79:11:c3:0c:39:af:4a:74:29:03:
04:f6:b7:9d:e9:ad:91:95:b1:5f:e9:9c:b7:84:fc:
38:99:18:fe:3b:16:bb:e1:55:f2:45:1c:3e:b7:ca:
34:99:46:44:f8:23:86:a1:1a:3d:98:5b:42:e2:b9:
46:36:cb:d7:73:7b:40:84:cb:3e:e7:a0:45:bd:a5:
20:28:3f:9f:45:3e:c2:b7:5c:2c:43:7b:89:21:85:
19:20:1a:ff:2b:43:58:4d:f6:8d:f7:c5:85:d7:56:
6d:ae:93:f0:be:c4:3e:93:56:3e:cd:04:ac:8c:81:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:EE:B2:53:48:E1:C7:3D:ED:80:18:DF:73:04:B9:8E:3D:0B:20
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4MruslNI4cc97YAY33MEuY49CyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.151.0/24
5.175.194.0/24
5.231.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b5:6d:fc:ce:5f:22:52:26:90:a6:4b:7e:f2:20:53:65:e4:
2d:bd:ca:b2:92:72:e3:e6:1e:b6:99:83:8f:ba:63:f4:f3:4a:
fa:f9:ad:42:8e:c7:4a:4f:d7:90:2b:3c:01:41:c8:c6:54:d3:
c1:ab:4a:95:0d:a6:94:0a:ef:a5:81:35:35:f8:81:5c:3a:20:
29:fa:29:cc:3f:ee:a2:78:ae:0e:49:13:aa:c1:e3:9d:f0:0d:
4a:56:bf:6c:a1:fc:27:70:ec:d2:b5:57:c1:0c:91:21:7f:91:
4b:f5:25:ff:0b:ba:45:de:72:2c:5a:ad:87:17:15:53:18:8b:
1e:8b:eb:0b:a4:6f:43:5b:12:cc:80:d3:a1:a5:55:aa:0e:fe:
23:24:6f:fa:d7:6c:c2:d5:72:41:e8:a5:f7:b3:37:4d:13:3d:
35:ca:3d:16:df:e8:23:2b:c9:e3:6b:9a:49:4d:50:96:5c:71:
9a:62:ba:72:89:69:ba:fe:23:fb:df:64:4d:f9:93:c9:b7:83:
cf:09:48:5d:f2:de:9a:e7:76:0e:11:55:1d:72:e2:a5:17:04:
da:14:29:dd:6b:13:0b:28:63:7f:ca:7a:e4:15:d3:09:5e:94:
40:8d:8d:ab:74:e1:ef:56:73:2a:2f:19:ad:cf:34:b8:55:c0:
1d:95:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:11 2026 by rpki-client