Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6htCtpE5_C66exeBy_p9UrkMWkY.roa
File: 6htCtpE5_C66exeBy_p9UrkMWkY.roa (raw, json)
Hash identifier: /dBueIHaPRib7bKMlwHVb+GrzO8RvU2lJOgXtEXkwUY=
Subject key identifier: EA:1B:42:B6:91:39:FC:2E:BA:7B:17:81:CB:FA:7D:52:B9:0C:5A:46
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CA63799CB9982E6DB079B3F788F0F77E2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6htCtpE5_C66exeBy_p9UrkMWkY.roa
Signing time: Sat 28 Feb 2026 21:46:27 +0000
ROA not before: Sat 28 Feb 2026 21:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47585
IP address blocks: 5.83.131.0/24 maxlen: 24
5.175.136.0/24 maxlen: 24
89.144.10.0/24 maxlen: 24
89.144.20.0/24 maxlen: 24
2a02:2fc0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a6:37:99:cb:99:82:e6:db:07:9b:3f:78:8f:0f:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 28 21:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1b42b69139fc2eba7b1781cbfa7d52b90c5a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:ac:f6:a5:47:8c:00:53:c3:70:ac:c4:9f:
69:60:b7:b3:e1:91:75:99:2e:f0:10:50:72:4e:7a:
32:87:3a:87:c1:ff:ec:74:78:4b:94:46:bd:66:38:
4c:ff:30:06:99:56:fe:ff:8e:6b:92:4b:df:aa:13:
aa:9d:1f:2f:dd:11:bf:0d:37:a4:df:b2:af:1b:d8:
52:c3:f5:df:e0:17:2b:98:6a:82:9d:bd:66:8d:5e:
22:55:b1:84:1d:54:1b:d7:dc:47:af:4c:3f:09:af:
5b:75:d5:0f:7e:56:7e:a9:83:67:90:9f:66:01:9e:
07:22:4c:59:d3:5e:80:ff:4c:e5:02:9f:a0:36:99:
b7:61:55:44:0a:aa:7f:83:10:b2:e5:cb:76:7c:b8:
a1:ba:19:0b:e6:5a:6f:02:a7:10:33:09:4a:0e:48:
72:72:be:33:ff:85:c6:e3:ab:98:58:81:da:e1:bb:
fe:8b:a7:be:d2:27:ae:25:ee:b6:e1:ca:16:77:c6:
1d:22:01:29:a2:5b:e7:69:5e:66:df:e4:1b:89:14:
2d:ce:b6:d6:cd:e7:e2:04:20:1c:22:8d:e5:bd:a8:
10:56:57:20:a9:d7:43:a8:83:9f:c1:ad:27:5b:3a:
29:c4:5a:5d:fd:91:d2:b5:27:ae:93:c1:81:73:1e:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:42:B6:91:39:FC:2E:BA:7B:17:81:CB:FA:7D:52:B9:0C:5A:46
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6htCtpE5_C66exeBy_p9UrkMWkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.131.0/24
5.175.136.0/24
89.144.10.0/24
89.144.20.0/24
IPv6:
2a02:2fc0:12::/48
Signature Algorithm: sha256WithRSAEncryption
7d:35:a9:45:c0:6a:bf:92:2a:6f:1b:c5:2e:29:0f:0b:c0:f6:
83:57:b4:3c:5c:b0:ba:2c:85:be:84:7f:25:09:a6:7c:c6:0c:
09:41:c3:8f:2d:8d:e5:d4:1b:1f:25:e2:e0:48:56:e6:a1:6a:
b5:a5:1a:00:44:e9:09:b6:8c:7f:8e:ae:54:ca:1e:88:cd:1e:
56:a8:f3:78:f2:f8:29:a6:d9:6f:7e:46:63:93:7f:2f:d8:80:
1b:57:d8:34:70:c5:9f:b6:79:fe:d8:4a:b3:71:da:79:91:36:
8e:63:b0:3f:d2:1b:7b:8e:c9:5d:91:7e:55:0c:b1:ef:61:3a:
81:bd:96:d8:de:ca:30:41:78:fd:b8:32:23:da:de:94:2e:a6:
45:e7:6d:db:e9:6c:9a:2d:a8:3a:ca:1c:84:8e:8a:59:7a:25:
1f:2b:82:00:f4:2d:37:55:52:76:73:e4:49:d2:70:cd:d6:73:
8f:9e:6b:7f:93:4c:90:6a:b1:e1:b1:b0:ec:ac:cc:f1:20:45:
e3:d0:08:39:76:3d:2a:63:cd:29:78:b2:2a:6a:df:bb:c1:c2:
ea:81:6a:ca:8e:1a:ba:0e:08:ec:18:c5:70:3a:ec:37:c8:7f:
3a:ea:c9:fe:e3:00:d9:44:0e:52:ce:ca:32:5e:1b:6c:05:38:
92:32:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:46 2026 by rpki-client