Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rq3n59MDP7ZP95WfsTJ-ug8hGz8.roa
File: Rq3n59MDP7ZP95WfsTJ-ug8hGz8.roa (raw, json)
Hash identifier: 2MQ5QhvakvDTaMGdOQHZv7842ARKdJkf6Fa2oeQnJRA=
Subject key identifier: 46:AD:E7:E7:D3:03:3F:B6:4F:F7:95:9F:B1:32:7E:BA:0F:21:1B:3F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0AE9A625B9A8386ADD5E1F0A0880989E4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rq3n59MDP7ZP95WfsTJ-ug8hGz8.roa
Signing time: Thu 17 Sep 2026 09:02:28 +0000
ROA not before: Thu 17 Sep 2026 09:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202147
IP address blocks: 5.83.137.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.118.165.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:9a:62:5b:9a:83:86:ad:d5:e1:f0:a0:88:09:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 09:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46ade7e7d3033fb64ff7959fb1327eba0f211b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:9c:f5:a5:27:21:03:ed:70:99:e3:59:de:
a6:b4:8a:c7:8e:7c:7d:db:47:4f:82:29:0f:64:6b:
53:c8:93:0d:0d:76:45:a6:cb:3d:23:06:ec:ee:02:
a8:6c:3e:48:7c:86:18:32:ef:ce:eb:f4:7b:fd:59:
7b:cf:5e:f9:24:ee:c8:66:12:d8:e1:10:f5:f9:58:
7e:6c:d0:7d:98:99:c5:ca:ef:81:0a:81:02:20:21:
36:5f:f2:37:34:91:27:9b:10:35:1d:da:87:16:46:
31:6f:e6:8f:e2:7a:df:db:9e:11:97:a9:f8:ad:af:
e8:6a:33:51:6d:1c:b5:6e:d5:e7:7b:cb:1e:28:38:
ab:a9:f0:c0:b1:b0:40:1e:ae:a8:4e:21:76:7a:95:
20:50:f6:39:33:7d:22:6e:7b:87:f3:bd:99:ba:66:
eb:f7:93:7f:81:04:0e:13:20:9a:20:db:5f:6d:43:
19:c1:b3:dc:e4:f7:e2:c4:6f:8d:1a:b6:ca:f5:72:
48:b4:35:af:12:82:d6:6f:86:56:03:b0:a2:42:b4:
09:a7:9b:97:35:5f:fc:8c:c8:b1:90:88:f6:7d:a6:
d1:3e:1d:14:ff:34:15:01:ea:86:df:2c:8a:4a:9a:
67:2e:85:54:0e:70:84:12:a3:f8:6c:ec:3f:00:63:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:E7:E7:D3:03:3F:B6:4F:F7:95:9F:B1:32:7E:BA:0F:21:1B:3F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rq3n59MDP7ZP95WfsTJ-ug8hGz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.137.0/24
77.90.36.0/24
85.93.1.0/24
85.118.165.0/24
94.249.205.0/24
95.215.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b8:76:f8:12:36:7d:e1:0c:c8:75:65:88:b9:23:75:c7:4b:
fc:03:de:b9:9c:48:cc:31:ac:67:21:51:c3:b7:69:f9:63:b0:
1a:ac:21:63:c1:1d:13:cf:b0:0a:06:24:36:7e:b9:d7:05:90:
be:83:a5:ec:45:87:88:1a:a1:ab:c7:5d:e6:61:bd:0c:12:2e:
7a:0b:b2:eb:03:81:7b:a0:13:f4:6f:b4:2a:0a:e7:1f:df:8f:
cf:9d:f0:13:f7:74:cc:9a:f9:12:0e:d1:6a:aa:43:68:60:3f:
24:ba:a3:95:b7:b6:f9:73:28:52:d9:6b:de:79:15:e9:5e:7d:
42:7a:95:5d:f5:7e:59:29:e2:8b:5d:cb:a2:f7:d4:22:33:97:
e5:d2:1c:18:a0:6c:88:f6:3e:93:c7:5d:56:a5:47:a5:69:1a:
57:20:e2:32:c8:3e:8f:a1:11:72:3f:a1:8c:87:6b:04:38:98:
db:ab:9e:bc:f3:69:f3:ff:ff:22:a0:7e:c2:af:18:3f:ea:ab:
f7:b0:b6:02:05:0d:52:60:ba:63:73:83:8d:20:c3:eb:31:19:
20:91:2d:1b:48:f0:9d:48:86:3c:d3:c6:62:b8:b8:02:db:a1:
2e:34:5b:b1:45:f8:e8:1d:ca:f4:e8:93:35:ef:59:9f:1e:76:
bc:1d:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:40 2026 by rpki-client