Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KFrixVFWVYeGVFOfy2dqnkmRbA4.roa
File: KFrixVFWVYeGVFOfy2dqnkmRbA4.roa (raw, json)
Hash identifier: D34xP5m0W7jJ2U4pnGNDiQ2KmperTL0QNcVzTfOM088=
Subject key identifier: 28:5A:E2:C5:51:56:55:87:86:54:53:9F:CB:67:6A:9E:49:91:6C:0E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D68C25A8F3CA12937CC094354ADF938AB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KFrixVFWVYeGVFOfy2dqnkmRbA4.roa
Signing time: Tue 07 Apr 2026 16:24:20 +0000
ROA not before: Tue 07 Apr 2026 16:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215039
IP address blocks: 5.83.137.0/24 maxlen: 24
77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:c2:5a:8f:3c:a1:29:37:cc:09:43:54:ad:f9:38:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 7 16:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=285ae2c5515655878654539fcb676a9e49916c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:ed:0f:20:d0:97:fb:f8:e8:73:12:85:e0:
da:9f:96:68:c4:04:af:74:58:a8:42:d0:01:e4:44:
37:f2:c6:cc:97:ab:4a:69:0e:4d:4b:f8:d2:1d:9d:
fa:02:c5:69:ca:3e:34:cf:ed:d0:aa:32:02:9f:4f:
be:22:d7:07:58:a4:82:77:82:98:33:c1:c4:1d:99:
bf:7c:95:47:4a:93:8f:7e:cd:4c:f2:5c:fa:48:e4:
38:a1:4d:cb:81:2c:bb:5d:b2:d2:c8:06:9b:72:d4:
46:53:60:1d:28:89:4f:e1:cf:e0:8a:d5:ec:32:5f:
45:12:14:f8:9f:75:cd:08:77:c2:4c:c7:76:d7:10:
f0:7a:15:40:f5:f4:d1:31:3a:b1:ff:bc:49:24:41:
8d:72:d2:e0:98:b8:c0:13:20:de:a0:bf:78:bb:d5:
82:55:dd:c0:e0:6a:99:4f:7c:80:43:f9:c9:5a:70:
68:2f:07:45:68:e9:e0:ae:4d:dc:13:98:15:fd:cb:
06:fc:ee:ff:79:04:03:ae:74:e0:12:54:5f:98:21:
a9:e5:a9:fb:d9:7d:8f:9f:cd:e6:ee:2c:a9:9d:9d:
46:7e:77:ab:b5:e8:a5:1e:0b:cf:54:c1:38:91:11:
c3:96:69:90:7c:1d:c9:e6:9f:86:c3:62:37:5c:ab:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:E2:C5:51:56:55:87:86:54:53:9F:CB:67:6A:9E:49:91:6C:0E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KFrixVFWVYeGVFOfy2dqnkmRbA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.137.0/24
77.90.5.0/24
77.90.14.0/24
77.90.41.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9f:b7:86:c0:d8:08:ec:79:49:d3:d2:b5:d8:7c:e5:f1:2b:
81:08:57:6c:02:d0:76:0b:79:a8:5a:e3:0e:47:15:24:4e:12:
c3:54:36:38:78:cc:6a:ff:a9:33:73:ec:b0:ea:4f:9e:b3:b5:
24:26:96:eb:30:8b:b1:6e:ad:dc:8b:32:df:24:96:18:e9:26:
54:73:11:ae:31:f4:06:53:21:19:0e:07:b4:42:7d:89:ec:75:
af:1b:1f:3d:9b:3f:1e:c8:6b:f4:6c:09:e1:b3:f0:e0:40:5f:
04:57:b3:4b:86:de:7b:32:85:1c:77:18:ab:46:6a:01:9c:93:
fa:77:99:74:dd:b1:57:b8:c7:86:3e:2c:32:a7:c6:e0:a6:ac:
1c:93:64:24:9a:7b:7f:46:93:15:81:45:80:2a:f1:95:7a:c6:
1b:32:93:e3:3d:3c:91:cd:69:89:da:24:b3:44:a8:08:84:bf:
75:05:28:c0:de:90:50:40:1f:13:04:df:a2:10:c7:b4:82:5e:
50:57:c6:f0:a3:85:10:fe:cc:ca:fa:47:68:da:00:1f:93:32:
ce:ed:4b:38:44:9d:ce:65:64:4b:5d:60:d1:e2:a9:77:48:89:
9c:11:a7:68:16:58:62:b2:d4:d9:f9:89:6b:c1:5d:40:2b:54:
a0:07:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:13 2026 by rpki-client