Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VRKGhIimYxpJMbeLtr1t7H9Ri1Q.roa
File: VRKGhIimYxpJMbeLtr1t7H9Ri1Q.roa (raw, json)
Hash identifier: nUBMGNdz49/RB4Oox6U/2kO+lDhW7EXys29ZSf8Q5KA=
Subject key identifier: 55:12:86:84:88:A6:63:1A:49:31:B7:8B:B6:BD:6D:EC:7F:51:8B:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A17E6EB251135CFC6735613E3CF6A75A9E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VRKGhIimYxpJMbeLtr1t7H9Ri1Q.roa
Signing time: Tue 27 Oct 2026 17:35:45 +0000
ROA not before: Tue 27 Oct 2026 17:35:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32132
IP address blocks: 5.175.143.0/24 maxlen: 24
5.175.187.0/24 maxlen: 24
5.175.218.0/24 maxlen: 24
5.175.250.0/24 maxlen: 24
5.230.20.0/24 maxlen: 24
5.230.110.0/24 maxlen: 24
5.230.111.0/24 maxlen: 24
5.230.161.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.230.190.0/24 maxlen: 24
5.230.198.0/24 maxlen: 24
5.230.199.0/24 maxlen: 24
5.230.233.0/24 maxlen: 24
5.231.57.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.210.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.237.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
94.103.165.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.119.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:6e:b2:51:13:5c:fc:67:35:61:3e:3c:f6:a7:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 27 17:35:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5512868488a6631a4931b78bb6bd6dec7f518b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:36:11:81:5e:99:39:f2:c7:e2:ae:d2:1d:
9d:ea:4b:17:b0:77:f8:bc:b5:06:56:d9:a6:13:24:
3e:5a:39:5d:e7:0b:48:04:c3:74:3f:33:9e:e8:fd:
be:e3:b3:c4:f6:be:68:41:d6:d9:1a:b0:1e:4c:3e:
7c:1a:8b:c6:b6:c3:8a:6d:a2:35:db:ea:e2:00:70:
6c:66:bf:f3:2a:fd:ba:9f:ea:41:a1:7d:dc:7b:42:
5a:45:ec:a4:55:eb:46:44:e1:6c:d6:87:a4:52:1f:
a8:f6:c3:0f:82:f2:bd:e9:13:3e:26:89:2d:86:49:
a1:a2:ce:c6:28:1f:b7:c0:8d:86:8e:f3:0b:94:26:
c8:23:cb:c4:24:b3:23:c3:fc:06:ab:96:ee:a7:62:
e6:66:b0:31:62:de:1b:48:2c:15:6c:8d:7e:eb:5a:
0d:ac:c1:76:ae:68:1b:e9:52:de:7f:15:c8:f6:e8:
c2:7e:3e:d8:c1:f2:00:d7:26:55:4a:b8:95:10:fb:
25:8f:c6:a9:8d:61:ff:db:8c:fe:4c:3e:f2:0f:44:
a7:c8:53:d6:6e:72:ed:c2:36:57:4c:9c:64:4d:0a:
5d:6b:fd:2e:a1:bd:ef:f0:5b:9a:b9:d7:f7:ef:13:
6e:35:ab:4a:7b:5d:49:40:38:b2:62:76:79:e9:05:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:86:84:88:A6:63:1A:49:31:B7:8B:B6:BD:6D:EC:7F:51:8B:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VRKGhIimYxpJMbeLtr1t7H9Ri1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.143.0/24
5.175.187.0/24
5.175.218.0/24
5.175.250.0/24
5.230.20.0/24
5.230.110.0/23
5.230.161.0/24
5.230.164.0/24
5.230.190.0/24
5.230.198.0/23
5.230.233.0/24
5.231.57.0/24
5.231.121.0/24
5.231.210.0/24
5.231.225.0/24
5.231.237.0/24
77.90.38.0/24
89.106.91.0/24
89.144.14.0/24
94.103.165.0/24
94.249.173.0/24
94.249.183.0/24
95.215.34.0/24
185.119.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6d:e7:34:02:61:d6:e6:a7:15:96:d3:b2:75:f8:46:46:ac:
de:e6:6e:d2:05:f7:8c:4c:b2:2a:a9:cc:94:e5:98:df:87:a1:
e4:5b:f4:c2:3b:a0:8c:23:97:0e:43:6a:12:5c:54:9c:f3:a5:
64:97:ac:9b:31:35:a1:01:99:68:65:f2:6d:fe:25:9c:73:53:
f4:aa:d1:c1:f4:e4:e4:4e:75:d1:b2:c5:e2:ac:88:a6:03:1c:
19:ec:5d:f4:b0:e7:4a:49:a8:81:08:34:48:1b:05:4c:4f:ce:
e5:34:fc:4e:b9:fe:14:c1:1d:6b:c1:40:be:6e:9c:3c:b2:ca:
99:48:63:a3:71:ec:9b:0d:02:31:93:05:14:57:37:8c:4f:4b:
f6:38:52:0f:cd:54:2a:3d:c6:67:cd:82:c5:f8:59:20:7f:48:
a9:42:9e:26:64:a0:5c:30:54:16:41:f9:86:a1:ad:01:6c:9d:
a6:fd:7e:5c:41:7c:87:ce:46:0b:b8:92:a3:cb:db:87:6c:93:
e4:06:10:6f:11:8e:00:88:7c:09:21:97:86:77:a1:e3:1b:e2:
0e:2b:b4:3c:e4:d7:80:15:fb:93:d8:39:aa:f2:11:6d:4a:69:
cb:ae:50:df:a1:38:6e:be:3d:e9:38:3d:9b:08:ef:a1:97:c2:
a1:59:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:44 2026 by rpki-client