Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T0qCia98TsXI7r_0pyb77XxeSLc.roa
File: T0qCia98TsXI7r_0pyb77XxeSLc.roa (raw, json)
Hash identifier: WO9ESOFnhhXTyHNgs3Uc3NI28SBzc3pE8MfAgwxi+q8=
Subject key identifier: 4F:4A:82:89:AF:7C:4E:C5:C8:EE:BF:F4:A7:26:FB:ED:7C:5E:48:B7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0AEFA34B2C54C06886F0CF63142D88051
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T0qCia98TsXI7r_0pyb77XxeSLc.roa
Signing time: Thu 17 Sep 2026 10:47:07 +0000
ROA not before: Thu 17 Sep 2026 10:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.209.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.231.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:fa:34:b2:c5:4c:06:88:6f:0c:f6:31:42:d8:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 10:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f4a8289af7c4ec5c8eebff4a726fbed7c5e48b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:26:11:cb:f7:13:a9:75:cf:a1:7d:c5:08:
da:4e:5d:bf:47:ec:84:b9:0f:47:53:75:e6:1e:6b:
70:54:a2:72:8d:ab:05:0f:2e:11:ea:03:dc:3d:0a:
a6:42:53:a0:a3:7f:15:0a:1c:dd:6b:58:e9:f0:e1:
06:4d:aa:05:59:06:e8:b7:37:f5:24:2b:0c:4f:0b:
67:fd:21:5d:d1:39:c6:53:7f:aa:f3:30:09:6c:38:
aa:82:38:8a:c9:04:c2:33:a1:bf:47:01:84:c2:6d:
b4:b9:27:31:ec:52:59:ab:fa:ea:49:c7:a8:bb:2c:
d6:3d:c9:3d:45:63:17:32:3a:dc:67:c4:9c:1a:7b:
4b:77:e6:1d:79:29:51:7d:9d:d4:6c:80:15:4d:90:
62:41:1e:b3:f2:4a:b7:2a:c1:ae:d3:60:f0:94:a9:
bb:1c:99:a9:6a:88:9b:61:49:3f:d3:86:25:90:32:
08:61:5e:e8:55:7d:3c:3e:2b:86:63:8d:61:90:71:
80:d8:1c:3e:ab:d6:19:1b:f9:c6:b5:66:d2:24:04:
7c:4f:8b:cc:6f:83:2c:4a:e3:34:ae:6e:f7:77:ca:
bf:00:5d:de:12:fe:90:cd:95:a4:2f:13:be:f7:01:
e1:b2:c2:df:5e:03:c1:ab:d9:ce:56:2f:19:f3:7f:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:82:89:AF:7C:4E:C5:C8:EE:BF:F4:A7:26:FB:ED:7C:5E:48:B7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T0qCia98TsXI7r_0pyb77XxeSLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.209.0/24
5.175.212.0/24
5.231.110.0/24
5.231.115.0/24
5.231.124.0/24
5.231.231.0/24
5.231.241.0/24
89.106.87.0/24
89.144.40.0/24
94.249.181.0/24
94.249.183.0/24
94.249.226.0/24
94.249.238.0/24
94.249.243.0/24
178.18.149.0/24
178.18.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:78:f0:b3:09:e4:b3:74:ef:fa:44:cd:54:b6:3d:b0:76:dc:
82:ec:fb:69:01:37:49:be:99:4a:54:06:11:cf:bc:cb:52:40:
c8:0a:e7:f7:c3:91:79:ca:c7:f3:9c:90:de:c2:78:4e:bd:f8:
27:41:23:40:ef:45:67:e2:c4:e0:ed:49:a5:90:55:1d:bd:2e:
22:a3:10:61:bb:eb:6a:34:5b:ca:ba:77:d1:47:e7:48:72:1b:
25:76:2c:6c:82:03:3b:53:7d:7a:30:ae:89:f6:04:63:bc:8e:
5a:a7:0b:14:c0:e3:d3:38:f5:06:3f:31:99:5d:cc:2d:48:87:
1e:4a:c9:6c:4f:69:26:14:b6:df:07:0a:4a:b0:3b:d3:81:e7:
7b:20:2c:67:9a:e5:25:bc:2e:d9:af:76:55:d7:6b:b9:da:fd:
60:bc:35:9c:bf:75:da:74:d9:c9:a5:f8:b1:6f:d3:3d:f6:5e:
ac:e5:25:ae:16:e9:c3:3d:c7:dc:d0:a2:9a:e5:38:85:09:d6:
f6:b5:a5:a7:a6:ca:34:97:75:6e:a9:0e:15:c3:b6:2c:a1:ea:
81:14:80:29:26:1d:ca:16:da:44:ca:f0:24:18:01:a4:29:c2:
4d:df:46:dc:ec:d3:3a:ac:12:df:c9:c5:94:e6:cb:26:f5:78:
ab:72:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:36 2026 by rpki-client