Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5bLsEVs8VZOlpeU_Q0ecqV4oT1g.roa
File: 5bLsEVs8VZOlpeU_Q0ecqV4oT1g.roa (raw, json)
Hash identifier: Cl2b75ZcDVDn1KPtm0ZwfpNYOSsvaY4KRoVUBH4RMbI=
Subject key identifier: E5:B2:EC:11:5B:3C:55:93:A5:A5:E5:3F:43:47:9C:A9:5E:28:4F:58
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0AE94E27D46E60A2E38A83FAC0A4215F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5bLsEVs8VZOlpeU_Q0ecqV4oT1g.roa
Signing time: Thu 17 Sep 2026 08:56:27 +0000
ROA not before: Thu 17 Sep 2026 08:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214639
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.178.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.93.10.0/24 maxlen: 24
87.239.135.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
178.18.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:94:e2:7d:46:e6:0a:2e:38:a8:3f:ac:0a:42:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 08:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b2ec115b3c5593a5a5e53f43479ca95e284f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:68:6f:46:29:02:11:52:8e:e6:e5:de:81:
60:fd:09:fc:20:6c:bf:c1:da:47:e7:e2:a7:c7:95:
22:cf:81:38:2e:04:4d:0d:00:b5:7c:5b:67:c4:31:
81:88:85:03:da:d7:e0:ad:70:6f:b3:09:52:72:aa:
09:d1:cc:08:3b:24:06:ab:82:57:7a:a8:65:b2:36:
e4:72:52:3e:91:4e:31:e7:c1:23:d3:ed:19:58:05:
9d:ec:c4:94:a5:95:f6:cc:52:f4:5b:59:40:fb:fa:
c2:06:18:de:f7:7d:5a:e6:2f:f9:59:a5:e5:bf:84:
3d:0e:72:8b:bc:28:95:03:55:b6:b4:d7:dd:61:b3:
18:b5:b4:1d:27:e9:e4:d1:27:8b:a5:7b:88:ee:46:
e1:5a:75:63:6f:e4:0b:b6:07:06:b9:06:6b:fc:8d:
03:43:bf:9b:a5:c4:82:0a:f9:64:c6:28:a7:4e:29:
60:94:1f:c5:2f:1b:75:01:aa:03:18:b0:5d:b2:a8:
3c:8c:bd:9e:cb:49:bc:ae:87:fd:3b:af:b0:95:72:
be:d3:d0:76:54:92:71:bc:9f:f4:b5:4b:71:0a:82:
54:9e:8b:df:a2:4f:ee:42:0e:2f:e1:dc:ba:ed:28:
d9:3d:c6:6b:74:65:f1:c0:26:18:90:96:4c:a9:25:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:EC:11:5B:3C:55:93:A5:A5:E5:3F:43:47:9C:A9:5E:28:4F:58
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5bLsEVs8VZOlpeU_Q0ecqV4oT1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.178.0/24
83.243.86.0/24
85.93.10.0/24
87.239.135.0/24
89.106.86.0/24
89.144.35.0/24
94.249.175.0-94.249.176.255
94.249.225.0/24
178.18.147.0/24
178.18.153.0/24
Signature Algorithm: sha256WithRSAEncryption
85:52:aa:f2:0d:fd:4e:11:21:be:a3:e8:53:5b:40:3b:e7:76:
ac:02:1a:05:e7:db:c0:42:bc:10:9e:7d:b8:fe:5c:c9:12:ab:
be:ce:b8:bb:d4:f8:97:b3:3d:d3:45:18:2d:20:cf:a1:8f:da:
c6:45:f7:6b:50:be:e3:b4:9f:2f:de:4f:3d:1a:0b:cc:84:81:
7d:3d:00:31:be:9c:a9:94:d0:8d:40:45:75:e4:7c:c3:40:cc:
17:4e:dd:b9:b3:bc:5e:0e:e3:17:c4:06:bd:aa:c1:b1:ea:4a:
42:da:f9:73:4e:53:c8:2b:1d:ea:34:63:ce:a6:4c:f2:35:d0:
b8:aa:40:8a:bd:cc:aa:c2:19:fe:17:c2:6b:a9:59:47:92:ff:
be:c0:c8:b1:1b:46:98:bd:60:e7:61:f8:8f:d4:f7:39:6d:95:
11:aa:cf:91:dc:b9:62:59:94:c0:19:ac:5f:46:aa:b2:7d:9f:
3d:3e:13:54:4d:eb:a9:93:dd:97:15:a4:d1:aa:60:b0:83:cf:
58:c8:f5:67:7d:a6:b2:71:80:19:ab:c9:dd:2e:18:08:a3:0d:
5a:9a:09:8f:9a:aa:83:fa:bb:12:92:b1:48:de:f0:56:b1:a5:
1d:00:ff:99:dc:59:7e:d4:7f:a2:91:a7:af:82:83:bd:75:e6:
9b:7c:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:07 2026 by rpki-client