Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R48i_SJR7UOqEgofOKbcT9gUGwM.roa
File: R48i_SJR7UOqEgofOKbcT9gUGwM.roa (raw, json)
Hash identifier: 28JPt4TGB3UqqqBVkurtDDRccOyGKKhAKL2vl0WX99M=
Subject key identifier: 47:8F:22:FD:22:51:ED:43:AA:12:0A:1F:38:A6:DC:4F:D8:14:1B:03
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0ACABFE50B41E77D44CCFD5CCA5FA67DF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R48i_SJR7UOqEgofOKbcT9gUGwM.roa
Signing time: Thu 17 Sep 2026 00:02:27 +0000
ROA not before: Thu 17 Sep 2026 00:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.252.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ac:ab:fe:50:b4:1e:77:d4:4c:cf:d5:cc:a5:fa:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 00:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=478f22fd2251ed43aa120a1f38a6dc4fd8141b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:8f:a9:70:00:9f:ee:ef:f4:b5:c1:7f:ea:
9b:6f:ba:64:45:72:16:63:7c:aa:2d:10:38:41:a7:
ba:82:b6:0d:9a:a8:5f:ce:c5:0a:f6:ca:32:29:a4:
bf:d0:d7:dc:7f:31:c8:91:c9:af:2b:6a:66:65:3e:
f9:87:84:66:1e:16:79:8b:e3:d2:5d:d4:6c:00:53:
d7:ae:a0:3c:cf:1e:82:db:70:43:91:1a:56:ab:13:
78:0a:39:ce:50:5f:86:0a:fd:8a:1e:19:3d:3f:7b:
97:af:c8:5f:ef:b3:7b:65:fe:75:2d:ff:8f:35:21:
4d:ed:34:cb:dc:60:f3:97:9c:bc:0e:5e:40:7f:20:
97:d0:d2:e6:53:b6:23:a0:23:33:d5:62:f5:35:ae:
2c:60:ab:ed:d0:33:6b:dc:07:b4:ea:9b:e0:3a:75:
96:d6:3e:a5:78:d9:f2:8f:66:da:e4:23:b5:5b:6c:
7c:74:f1:f3:03:fa:70:f4:c9:78:ca:62:e0:23:6d:
b8:ba:16:4c:04:84:2a:19:1b:27:e9:39:34:ad:e2:
e2:ce:76:48:29:6a:9d:70:9f:29:67:1e:8c:95:19:
c1:02:65:5c:cd:80:b3:0c:f5:f3:87:57:f3:c3:5c:
f2:32:46:1c:59:55:3f:0b:8c:fc:f6:87:f6:13:50:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:22:FD:22:51:ED:43:AA:12:0A:1F:38:A6:DC:4F:D8:14:1B:03
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R48i_SJR7UOqEgofOKbcT9gUGwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.175.223.0/24
5.231.107.0/24
5.231.252.0/24
89.106.74.0/24
94.249.185.0/24
94.249.233.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:71:3a:a0:db:2d:e2:f8:51:e5:84:60:ee:f7:19:03:5d:ae:
fd:0e:39:02:50:d6:ec:58:1a:30:a9:c8:d3:0f:d9:e8:2f:33:
db:b7:cd:da:72:32:a8:41:09:26:74:c7:a3:4c:f3:8d:1b:bb:
57:fa:22:d1:35:1a:e0:bd:1a:ce:df:cd:82:e7:4a:95:3d:5d:
fe:de:ef:48:5e:8c:f0:0b:9c:0e:10:eb:3b:47:91:49:d8:15:
31:a8:0b:64:ac:1a:cb:ed:9a:7e:de:81:7a:1e:9c:db:2a:97:
15:f0:40:dd:f3:d3:a1:8c:72:3f:51:71:9c:dd:51:c6:25:b3:
8e:e9:b5:74:01:81:04:88:1c:26:c8:e6:5d:3b:44:15:d8:8c:
9b:ce:b3:64:58:8f:71:4b:48:ba:7d:80:28:de:96:d4:19:e9:
f0:14:c4:26:bb:cb:1d:75:c0:a1:78:e9:1f:4c:63:1d:82:c1:
a1:4e:e1:72:18:13:ac:8a:f9:ae:70:d7:23:1c:a8:a2:ba:4f:
5b:4b:58:bd:7a:75:59:17:5b:b6:7f:cc:d8:da:8b:a2:6e:2b:
87:84:80:80:b9:07:00:a1:78:ee:ff:71:5c:83:19:53:03:90:
4a:85:9d:b6:17:a8:0c:8b:4f:0e:d5:c7:58:c1:85:8d:3f:92:
d9:81:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:29 2026 by rpki-client