Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6wdm15FlSxMiUGcXD2T309vtg0s.roa
File: 6wdm15FlSxMiUGcXD2T309vtg0s.roa (raw, json)
Hash identifier: gxczR+NZ+J7igluiSQX8OixcWfMJ00S1L2M+VcRwZno=
Subject key identifier: EB:07:66:D7:91:65:4B:13:22:50:67:17:0F:64:F7:D3:DB:ED:83:4B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A19FCB52086C7A55B50D33D834A7A0498D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6wdm15FlSxMiUGcXD2T309vtg0s.roa
Signing time: Tue 03 Nov 2026 05:04:24 +0000
ROA not before: Tue 03 Nov 2026 05:04:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.83.146.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
5.175.128.0/24 maxlen: 24
5.175.132.0/24 maxlen: 24
5.175.185.0/24 maxlen: 24
5.175.186.0/24 maxlen: 24
5.175.248.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.118.163.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
185.47.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:cb:52:08:6c:7a:55:b5:0d:33:d8:34:a7:a0:49:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 05:04:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb0766d791654b13225067170f64f7d3dbed834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:75:3a:3b:f6:70:80:f3:31:60:10:bc:4e:
5e:d6:dc:c7:03:ca:12:94:d7:a6:a9:7e:c3:0e:d5:
89:4c:1d:2e:1b:c2:9b:34:13:7a:e8:68:7b:b9:6f:
a5:80:1c:ce:ae:a4:a2:e3:fc:a2:9e:92:9a:9a:bc:
ba:eb:a0:32:2f:7a:c7:d5:92:e2:2a:46:cc:ab:3e:
6e:a0:23:4f:19:74:a3:48:99:37:c0:f0:3c:eb:d8:
fd:26:11:48:d5:b1:34:3d:63:ae:56:cb:0d:12:8c:
8f:1a:b9:3d:f7:7e:c0:d9:b1:f1:99:b7:ea:d8:48:
e6:2e:3d:f1:56:a7:2e:97:f0:62:5c:db:61:fd:14:
c9:17:56:20:e7:69:8d:64:74:31:3d:0c:14:36:7b:
a8:11:dc:72:92:0f:f7:1f:cc:de:3a:21:a1:e3:78:
dc:d2:a3:05:0d:54:bc:21:3f:cf:ab:22:a9:73:20:
04:a9:d9:77:fb:04:85:68:ad:c0:33:06:73:ce:1a:
21:d7:a2:e5:89:29:ba:f6:75:e8:f4:ae:a9:36:db:
42:f1:c4:39:ee:41:ed:7f:46:08:20:3a:22:60:83:
7c:61:df:db:0d:41:e1:4b:11:f8:32:40:11:2c:8a:
a2:a6:c3:15:fe:c1:ba:cf:2e:67:b7:c9:5b:6c:4c:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:66:D7:91:65:4B:13:22:50:67:17:0F:64:F7:D3:DB:ED:83:4B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6wdm15FlSxMiUGcXD2T309vtg0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
5.83.148.0/24
5.175.128.0/24
5.175.132.0/24
5.175.185.0-5.175.186.255
5.175.248.0/24
5.231.94.0/24
77.90.33.0/24
85.118.163.0/24
87.239.131.0/24
89.106.89.0/24
89.144.3.0/24
89.144.49.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
94.249.247.0/24
185.47.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b2:32:f1:b4:ff:df:5e:5d:38:6d:01:43:33:d3:b2:33:15:
38:e2:d9:ec:35:08:fd:47:df:b0:68:9f:9c:e4:7b:94:0a:87:
e4:db:26:bb:ff:13:41:6d:0f:82:71:5b:ef:fc:7e:e7:b6:b2:
b2:ec:cc:97:eb:8c:6e:5e:bc:d1:9b:46:a7:94:08:44:cb:26:
16:c0:09:79:f0:30:6b:ef:b1:d3:1b:19:08:8a:77:e5:6f:76:
6e:5c:98:a3:bd:a3:64:5d:6b:3c:34:86:68:c4:a5:ba:70:74:
fc:4d:52:95:16:ea:a3:34:36:45:c2:55:29:2f:c2:2c:53:0e:
2b:0f:39:94:05:e8:f5:0a:18:46:af:53:80:0a:a2:90:da:14:
9d:c5:60:91:52:82:50:6a:90:c0:d7:7c:f3:1f:05:cb:e2:f0:
40:d6:70:52:51:be:79:d5:95:5d:a9:8e:20:1a:ad:52:7b:6f:
e7:1a:d0:cf:8c:07:b7:3e:83:ca:01:7a:ea:c8:7d:81:94:33:
b1:6f:3e:85:24:09:2f:73:76:2a:5f:ce:14:db:74:ee:7a:8f:
7b:12:d0:f4:02:88:b1:fa:d1:da:1c:fa:bb:27:3c:5e:0d:4c:
e7:0a:3e:62:47:f2:f3:80:13:c9:fd:ce:b1:8a:9e:b9:56:2a:
db:19:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:41:31 2026 by rpki-client