Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ff0S134fexc6uN-wLDI2GUujrkY.roa
File: Ff0S134fexc6uN-wLDI2GUujrkY.roa (raw, json)
Hash identifier: ABU+cks5wHNnw+kvCPyUCDWJBHbRnLxDISQsmV+RiGo=
Subject key identifier: 15:FD:12:D7:7E:1F:7B:17:3A:B8:DF:B0:2C:32:36:19:4B:A3:AE:46
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A18124A951E64B842BC9143412FD07094F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ff0S134fexc6uN-wLDI2GUujrkY.roa
Signing time: Wed 28 Oct 2026 06:13:45 +0000
ROA not before: Wed 28 Oct 2026 06:13:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203516
IP address blocks: 5.83.131.0/24 maxlen: 24
5.83.135.0/24 maxlen: 24
5.175.136.0/24 maxlen: 24
5.175.206.0/24 maxlen: 24
5.230.9.0/24 maxlen: 24
89.144.10.0/24 maxlen: 24
89.144.20.0/24 maxlen: 24
2a02:2fc0:12::/48 maxlen: 48
2a02:2fc0:2b::/48 maxlen: 48
2a02:2fc0:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:24:a9:51:e6:4b:84:2b:c9:14:34:12:fd:07:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 06:13:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15fd12d77e1f7b173ab8dfb02c3236194ba3ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:0a:41:a7:0c:0a:a9:6d:58:7b:64:ae:2e:
14:80:ef:0d:74:7c:0e:73:a6:ff:95:dc:9b:46:f5:
a7:a4:48:1c:d6:10:fa:df:ab:19:f8:c7:8b:7b:2c:
a8:20:67:ac:7c:a5:5c:9a:0c:b3:a3:d6:9d:ad:10:
44:f1:b4:6a:7e:62:82:ca:5e:99:66:fb:dd:85:ef:
c8:cd:a7:de:45:9d:aa:65:f0:ab:3b:17:7c:9e:6e:
bc:1c:95:a6:2e:ab:e4:6e:08:17:29:70:af:28:49:
50:2e:c1:27:56:a8:5a:3b:13:30:69:c9:91:c8:fd:
ec:5b:ba:62:f3:f6:5c:c8:7f:7b:8d:09:e5:07:84:
09:69:7b:e3:bb:88:09:17:37:33:c8:1d:73:84:22:
e6:c2:ea:09:0f:c3:5c:20:64:9a:1c:21:be:2b:13:
a9:13:fc:4e:e7:12:2b:28:a8:95:ab:ef:4d:10:5d:
ad:3f:ae:16:a3:fa:59:7b:a1:46:23:ed:bb:17:9e:
96:45:df:2e:11:b9:96:bd:fa:32:eb:7f:78:a4:cd:
87:e9:aa:c2:b7:3e:8a:b1:42:7e:0c:6e:ba:5b:ce:
87:f8:de:0b:3a:60:46:d1:b9:d1:04:98:09:d7:7d:
d4:9e:d5:98:43:7a:b9:10:5c:a7:77:fb:f1:4b:cf:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:12:D7:7E:1F:7B:17:3A:B8:DF:B0:2C:32:36:19:4B:A3:AE:46
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ff0S134fexc6uN-wLDI2GUujrkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.131.0/24
5.83.135.0/24
5.175.136.0/24
5.175.206.0/24
5.230.9.0/24
89.144.10.0/24
89.144.20.0/24
IPv6:
2a02:2fc0:12::/48
2a02:2fc0:2b::-2a02:2fc0:2c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8d:4f:1d:34:4b:e4:06:a0:9b:32:2b:cd:61:4e:b9:03:25:48:
af:33:9f:a3:17:6f:65:0d:0c:5d:3f:c6:9a:d6:5b:25:ce:78:
8c:4e:53:6d:66:f0:f3:45:a0:67:4b:9c:a0:c9:71:61:ae:ef:
50:f7:4f:0e:f7:99:f0:db:d0:44:35:13:34:c0:00:99:99:3c:
ac:17:93:5a:10:4a:44:5d:8e:64:ee:a7:89:3d:db:0b:16:c2:
21:2d:00:7a:1a:51:ba:4d:0f:32:ed:ab:c2:4c:77:cc:d5:0f:
e3:a4:e5:11:7d:46:f6:7f:c2:29:6b:cf:db:ba:36:26:7e:4f:
6f:47:b9:a9:ae:df:63:fb:b7:32:23:9d:78:db:6e:a8:27:ec:
37:79:f5:3f:af:ea:51:e2:f1:af:ef:9b:0f:fd:5b:0b:5b:7d:
3a:c4:5e:b1:56:a2:3b:b2:24:d4:77:05:ec:65:e2:0a:f4:1e:
ed:cf:eb:b6:21:5e:43:1e:4a:73:98:77:a2:c1:e3:c6:02:e5:
0c:8b:7e:72:75:c2:0c:63:82:73:3b:2a:d9:e2:4d:97:38:2d:
37:82:ae:76:e9:f8:4d:9d:66:74:7c:da:0a:ee:6a:4c:bc:24:
62:32:79:26:bb:73:55:6d:3d:56:56:14:7f:d8:e9:89:85:6f:
7a:e6:5c:8a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAaGBJKlR5kuEK8kUNBL9BwlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDI4MDYxMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWZkMTJkNzdlMWY3YjE3M2FiOGRmYjAyYzMyMzYxOTRiYTNhZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLcKQacMCqltWHtkri4UgO8NdHwO
c6b/ldybRvWnpEgc1hD636sZ+MeLeyyoIGesfKVcmgyzo9adrRBE8bRqfmKCyl6Z
Zvvdhe/IzafeRZ2qZfCrOxd8nm68HJWmLqvkbggXKXCvKElQLsEnVqhaOxMwacmR
yP3sW7pi8/ZcyH97jQnlB4QJaXvju4gJFzczyB1zhCLmwuoJD8NcIGSaHCG+KxOp
E/xO5xIrKKiVq+9NEF2tP64Wo/pZe6FGI+27F56WRd8uEbmWvfoy6394pM2H6arC
tz6KsUJ+DG66W86H+N4LOmBG0bnRBJgJ133UntWYQ3q5EFynd/vxS88mwwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFBX9Etd+H3sXOrjfsCwyNhlLo65GMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRmYwUzEzNGZleGM2dU4td0xESTJHVXVqcmtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAwBAIAATAqAwQABVODAwQA
BVOHAwQABa+IAwQABa/OAwQABeYJAwQAWZAKAwQAWZAUMCMEAgACMB0DBwAqAi/A
ABIwEgMHACoCL8AAKwMHACoCL8AALDANBgkqhkiG9w0BAQsFAAOCAQEAjU8dNEvk
BqCbMivNYU65AyVIrzOfoxdvZQ0MXT/GmtZbJc54jE5TbWbw80WgZ0ucoMlxYa7v
UPdPDveZ8NvQRDUTNMAAmZk8rBeTWhBKRF2OZO6niT3bCxbCIS0AehpRuk0PMu2r
wkx3zNUP46TlEX1G9n/CKWvP27o2Jn5Pb0e5qa7fY/u3MiOdeNtuqCfsN3n1P6/q
UeLxr++bD/1bC1t9OsResVaiO7Ik1HcF7GXiCvQe7c/rtiFeQx5Kc5h3osHjxgLl
DIt+cnXCDGOCczsq2eJNlzgtN4Kudun4TZ1mdHzaCu5qTLwkYjJ5JrtzVW09VlYU
f9jpiYVveuZcig==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:45 2026 by rpki-client