Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TRm0L7sjluIE69wXV8kzTRagqZI.roa
File: TRm0L7sjluIE69wXV8kzTRagqZI.roa (raw, json)
Hash identifier: gwMKHklT7OEXWNAEzONFlcTCdoQTrdT27QZAkc+BWvQ=
Subject key identifier: 4D:19:B4:2F:BB:23:96:E2:04:EB:DC:17:57:C9:33:4D:16:A0:A9:92
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0AE3203C8C9A4CA9914346BBCF6891CC2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TRm0L7sjluIE69wXV8kzTRagqZI.roa
Signing time: Thu 17 Sep 2026 07:08:28 +0000
ROA not before: Thu 17 Sep 2026 07:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214199
IP address blocks: 5.231.32.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:32:03:c8:c9:a4:ca:99:14:34:6b:bc:f6:89:1c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 07:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d19b42fbb2396e204ebdc1757c9334d16a0a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:e0:45:4b:c3:66:24:86:4d:51:2f:f0:a8:
d7:00:9e:75:e4:e8:04:f7:6e:07:68:24:77:e7:80:
12:f2:4c:e1:ff:ae:03:95:7c:7c:bb:07:84:e8:85:
21:67:e8:a8:09:79:d5:43:ee:78:1c:3d:26:c8:42:
42:4e:09:6a:0c:25:52:38:d4:41:6c:0c:17:94:58:
71:76:7a:af:65:b3:69:fd:bc:4a:dd:e1:7e:b7:bb:
a0:f2:e2:96:57:1e:be:91:3b:9a:ea:d9:98:0a:89:
5a:54:46:58:48:01:93:ce:15:e6:e8:c5:cf:5d:df:
2b:ec:1d:58:80:5e:fa:72:d5:5e:97:72:ab:56:75:
5a:4d:a0:ec:d2:f3:95:3e:6e:ab:05:a2:74:11:88:
07:a6:b9:a9:95:1b:ef:b3:8e:34:90:20:36:9a:7f:
75:73:fc:75:7c:96:0a:72:68:4a:a4:1a:aa:48:ac:
03:7c:64:7c:ff:e0:ef:b1:0f:99:91:6d:80:ba:c5:
3b:89:02:14:a1:f3:51:c0:cf:4d:07:07:1e:75:20:
72:a4:16:88:5d:9c:60:08:cd:a1:9d:90:12:72:84:
75:73:3e:88:16:75:35:32:b2:72:98:e0:fa:12:3e:
28:46:17:18:a3:ef:94:69:74:07:b6:74:47:5c:55:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:B4:2F:BB:23:96:E2:04:EB:DC:17:57:C9:33:4D:16:A0:A9:92
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TRm0L7sjluIE69wXV8kzTRagqZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.32.0/24
89.106.92.0/24
Signature Algorithm: sha256WithRSAEncryption
08:50:33:8d:09:c4:5d:50:06:fe:ed:3d:29:06:f9:8c:2f:73:
59:94:c9:fa:40:42:0f:24:2c:c7:72:07:d2:b7:2d:3c:ca:b7:
96:75:07:a5:6d:b7:52:51:77:50:7a:92:a3:a0:d4:4f:c1:d8:
54:3e:a7:68:27:14:27:30:26:5f:33:d4:f9:fe:7b:ca:55:c0:
70:84:ca:e3:e3:e8:08:a1:59:68:b5:41:b2:fd:1c:56:e0:2f:
8b:b8:7e:11:c6:cd:9f:5f:f5:69:9a:de:b8:1a:81:85:8b:30:
8a:a0:b2:bf:47:85:f3:ea:a9:2b:fb:20:6c:d7:9c:60:c9:fd:
1d:5e:8e:e6:53:b4:64:a3:2f:02:c9:77:0c:2c:72:27:0f:93:
a8:14:c8:17:70:04:ad:f5:e3:f4:4c:5d:a6:f0:2f:aa:5d:8a:
35:ff:53:49:cb:d1:93:ee:fd:e3:e2:8a:16:65:78:e0:b6:02:
1b:4a:6a:9e:f1:00:5d:36:ab:32:e7:bd:0c:8a:bc:05:6f:d4:
17:aa:8b:cf:37:4e:69:ec:c9:4a:98:72:af:ae:e1:14:a7:13:
c8:67:88:50:9f:e7:2c:03:54:f1:46:5a:c0:78:91:83:59:f6:
9e:74:fb:3c:fc:81:f6:12:92:25:99:a8:fd:1d:83:89:e6:7f:
8b:ac:a6:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCuMgPIyaTKmRQ0a7z2iRzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTE3MDcwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDE5YjQyZmJiMjM5NmUyMDRlYmRjMTc1N2M5MzM0ZDE2YTBhOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQDgRUvDZiSGTVEv8KjXAJ515OgE
924HaCR354AS8kzh/64DlXx8uweE6IUhZ+ioCXnVQ+54HD0myEJCTglqDCVSONRB
bAwXlFhxdnqvZbNp/bxK3eF+t7ug8uKWVx6+kTua6tmYColaVEZYSAGTzhXm6MXP
Xd8r7B1YgF76ctVel3KrVnVaTaDs0vOVPm6rBaJ0EYgHprmplRvvs440kCA2mn91
c/x1fJYKcmhKpBqqSKwDfGR8/+DvsQ+ZkW2AusU7iQIUofNRwM9NBwcedSBypBaI
XZxgCM2hnZAScoR1cz6IFnU1MrJymOD6Ej4oRhcYo++UaXQHtnRHXFWstwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE0ZtC+7I5biBOvcF1fJM00WoKmSMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVFJtMEw3c2psdUlFNjl3WFY4a3pUUmFncVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecgAwQA
WWpcMA0GCSqGSIb3DQEBCwUAA4IBAQAIUDONCcRdUAb+7T0pBvmML3NZlMn6QEIP
JCzHcgfSty08yreWdQelbbdSUXdQepKjoNRPwdhUPqdoJxQnMCZfM9T5/nvKVcBw
hMrj4+gIoVlotUGy/RxW4C+LuH4Rxs2fX/Vpmt64GoGFizCKoLK/R4Xz6qkr+yBs
15xgyf0dXo7mU7Rkoy8CyXcMLHInD5OoFMgXcASt9eP0TF2m8C+qXYo1/1NJy9GT
7v3j4ooWZXjgtgIbSmqe8QBdNqsy570MirwFb9QXqovPN05p7MlKmHKvruEUpxPI
Z4hQn+csA1TxRlrAeJGDWfaedPs8/IH2EpIlmaj9HYOJ5n+LrKa0
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:45:06 2026 by rpki-client