Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Saj6xwpoWwhhgeVO31mhXDVDjMc.roa
File: Saj6xwpoWwhhgeVO31mhXDVDjMc.roa (raw, json)
Hash identifier: PyD1sggbCT6y1hv3oPa78LwSL1FS2ps//kA4gzssfIE=
Subject key identifier: 49:A8:FA:C7:0A:68:5B:08:61:81:E5:4E:DF:59:A1:5C:35:43:8C:C7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D7141E1AD2464780314B7874157310E86
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Saj6xwpoWwhhgeVO31mhXDVDjMc.roa
Signing time: Thu 09 Apr 2026 08:00:36 +0000
ROA not before: Thu 09 Apr 2026 08:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47585
IP address blocks: 5.175.136.0/24 maxlen: 24
89.144.10.0/24 maxlen: 24
89.144.20.0/24 maxlen: 24
2a02:2fc0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:41:e1:ad:24:64:78:03:14:b7:87:41:57:31:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 9 08:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49a8fac70a685b086181e54edf59a15c35438cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:5d:68:dd:e1:05:ec:c0:91:42:8c:8f:b8:
e0:9e:fe:f9:d0:62:6b:70:4e:6a:5a:40:bc:1c:cf:
78:36:c7:cc:b7:e9:bb:25:14:cb:c6:d4:c1:11:7f:
6d:84:c5:2c:8d:25:70:c7:16:11:58:27:fd:90:ac:
fb:41:22:b9:6c:ee:ea:bd:28:ed:8a:e2:6e:04:f9:
09:58:9b:17:06:2f:c5:69:bc:98:da:c6:d0:88:f4:
17:b6:26:9d:43:e2:33:fd:c9:f5:d2:57:46:01:32:
6d:41:01:24:52:e4:7f:1c:64:53:07:1a:f1:95:61:
44:5f:6d:3f:79:fd:58:ec:e5:34:64:cf:1d:9e:aa:
0b:93:d4:db:38:c9:6e:04:0c:32:72:99:e4:d1:8e:
6b:f1:46:d7:5d:c6:82:23:df:d8:ad:b4:96:93:1d:
9b:1d:1a:24:4b:f5:bb:47:44:ec:95:50:2c:1e:fd:
83:f8:d5:9c:6a:58:b2:08:3a:a2:f4:6e:e5:f8:8e:
58:32:60:5d:89:c7:a7:37:b2:9f:a7:38:a4:06:72:
d5:76:51:e3:26:50:a7:30:0f:cb:43:67:40:f1:51:
4c:22:e1:2b:1c:b2:d7:3c:45:64:f4:bb:c7:9c:5c:
80:7a:37:73:fb:0e:78:42:93:58:99:46:a1:4c:26:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:FA:C7:0A:68:5B:08:61:81:E5:4E:DF:59:A1:5C:35:43:8C:C7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Saj6xwpoWwhhgeVO31mhXDVDjMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.136.0/24
89.144.10.0/24
89.144.20.0/24
IPv6:
2a02:2fc0:12::/48
Signature Algorithm: sha256WithRSAEncryption
53:52:ea:2f:33:aa:8b:d8:ea:b9:4c:b1:46:a2:7d:27:1b:b8:
e5:76:65:f2:28:42:06:ae:20:3d:f8:68:14:e3:db:bd:84:4c:
8f:ff:02:5a:61:f5:97:53:41:9e:da:93:c9:d0:0f:80:83:0b:
0b:e2:80:15:90:20:e9:37:50:1b:b0:d7:68:da:3c:b1:88:e5:
6e:78:a3:3c:7f:1e:5e:ef:fe:ee:86:8f:c6:43:a8:33:c6:32:
c5:33:0f:af:49:27:59:17:ff:91:7f:14:e2:dd:2d:2e:0c:0f:
29:8a:60:e6:be:0d:6f:a1:88:40:76:25:94:26:21:e5:1e:6d:
bc:6b:d1:58:84:ed:ff:a1:21:44:f0:8d:bd:9a:27:2b:f6:47:
7c:ad:6a:10:32:56:f9:41:6e:2d:e1:73:97:27:e3:4d:d6:f4:
b4:ad:ff:d0:e9:ed:e1:4b:51:4d:ca:7e:d3:28:71:e6:0c:30:
f1:d1:dd:bd:c1:b2:9e:cd:da:76:4e:27:ae:5f:84:32:4a:0a:
2e:af:1b:18:32:68:79:60:57:7b:18:bb:e3:21:62:8c:ba:8c:
7b:67:6b:a7:40:4e:3b:41:7e:e9:fc:dc:c3:b8:96:04:49:9f:
b5:3d:bd:b5:23:80:48:12:ed:a6:fb:7f:58:78:b1:54:d6:4b:
a7:c6:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:38 2026 by rpki-client