Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_uDbDolNtO0aTPRWLLkLpeUxTsI.roa
File: _uDbDolNtO0aTPRWLLkLpeUxTsI.roa (raw, json)
Hash identifier: k0bgiwnt/IHitPtsGDrCzhqgVvdBcKJa9r4FSV5bW3A=
Subject key identifier: FE:E0:DB:0E:89:4D:B4:ED:1A:4C:F4:56:2C:B9:0B:A5:E5:31:4E:C2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C74A45874C978ED86BEBE4746D9A5B090
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_uDbDolNtO0aTPRWLLkLpeUxTsI.roa
Signing time: Thu 19 Feb 2026 06:44:13 +0000
ROA not before: Thu 19 Feb 2026 06:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:a4:58:74:c9:78:ed:86:be:be:47:46:d9:a5:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 19 06:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fee0db0e894db4ed1a4cf4562cb90ba5e5314ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:a9:1b:af:5a:de:0d:53:c8:1c:92:5d:64:
5d:f3:73:91:29:4b:8b:92:fa:64:fc:9c:ee:d9:44:
cb:8c:e8:03:7b:62:f9:15:c0:71:2d:c6:28:6c:da:
45:a0:c2:2e:63:09:61:78:da:07:cd:05:f7:a0:0a:
34:17:d7:34:97:be:d3:73:5d:26:bf:d6:ba:d1:66:
11:46:cd:4e:ae:2d:a0:b6:f2:80:2d:3d:12:3f:e4:
e8:9d:b7:6c:0a:e3:ed:ac:e8:dd:1d:bf:4e:99:72:
df:67:10:f8:15:e4:7c:0b:a1:28:e7:12:23:ed:f9:
cc:e9:94:52:ff:47:86:ba:31:64:04:07:18:98:f1:
8b:23:ae:74:3d:d9:da:51:f2:91:e2:47:8e:38:9e:
bb:46:a9:ad:3b:a1:4d:da:38:e2:c0:15:a4:ec:d1:
4b:bd:05:a2:d7:9d:c1:5f:eb:49:cd:68:35:b7:03:
19:d1:41:f5:a7:be:0b:13:a9:85:6b:1c:cc:1f:4a:
20:6b:71:61:85:7f:7a:1d:cd:51:2c:88:f2:a6:3f:
b5:66:54:40:c4:70:84:fd:5f:99:d7:76:68:d2:24:
68:3a:06:79:f2:45:70:bb:39:29:a5:00:cd:50:03:
ff:38:05:dc:b8:1d:d6:9b:ba:83:73:9e:98:8c:fc:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:DB:0E:89:4D:B4:ED:1A:4C:F4:56:2C:B9:0B:A5:E5:31:4E:C2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_uDbDolNtO0aTPRWLLkLpeUxTsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fe:5a:a8:45:92:b3:13:38:6c:c7:0c:86:51:24:71:2f:a0:
e0:e7:0c:67:23:2e:8c:b6:8a:df:9a:79:4b:3a:cf:69:78:c9:
1a:73:b0:9e:bb:1f:7e:a3:96:90:a7:ae:05:73:99:e6:27:7e:
1d:7a:de:79:f8:47:9d:fc:b2:63:8e:d6:fa:c7:89:c7:63:fc:
b1:fd:59:3a:98:54:57:bf:4d:46:0d:01:9e:1c:0c:ee:03:72:
ae:c9:a4:a8:46:d4:ea:b3:ce:a6:25:85:09:0a:56:75:ff:f4:
28:85:4f:36:11:df:5c:20:73:e1:0a:fa:d7:3c:45:89:dd:d9:
40:3a:77:e7:8d:cc:d7:94:82:77:26:8e:b5:1d:fc:11:02:82:
82:ca:81:e2:4d:0d:32:03:80:6c:98:d6:64:3b:5c:39:1c:59:
ec:05:04:1f:3e:16:54:a4:b7:2d:48:e6:f4:d0:6c:6e:75:d7:
de:7c:f7:2d:18:c9:70:8f:25:f5:c9:64:f6:47:e1:40:c0:e4:
79:1e:a5:32:be:e9:0a:66:3e:ba:64:44:07:b8:d4:95:44:a4:
b4:d6:37:ee:a7:ef:a6:a8:14:42:a0:e3:88:45:74:18:69:b0:
02:b6:ea:c8:b6:79:a7:5d:94:b2:3b:70:48:3d:44:8f:41:a0:
f0:2b:3f:f6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZx0pFh0yXjthr6+R0bZpbCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjE5MDY0NDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWUwZGIwZTg5NGRiNGVkMWE0Y2Y0NTYyY2I5MGJhNWU1MzE0ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnKpG69a3g1TyBySXWRd83ORKUuL
kvpk/Jzu2UTLjOgDe2L5FcBxLcYobNpFoMIuYwlheNoHzQX3oAo0F9c0l77Tc10m
v9a60WYRRs1Ori2gtvKALT0SP+TonbdsCuPtrOjdHb9OmXLfZxD4FeR8C6Eo5xIj
7fnM6ZRS/0eGujFkBAcYmPGLI650PdnaUfKR4keOOJ67RqmtO6FN2jjiwBWk7NFL
vQWi153BX+tJzWg1twMZ0UH1p74LE6mFaxzMH0oga3FhhX96Hc1RLIjypj+1ZlRA
xHCE/V+Z13Zo0iRoOgZ58kVwuzkppQDNUAP/OAXcuB3Wm7qDc56YjPw5DQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFP7g2w6JTbTtGkz0Viy5C6XlMU7CMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvX3VEYkRvbE50TzBhVFBSV0xMa0xwZVV4VHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOGAwQA
Ba+MAwQABa/eMA0GCSqGSIb3DQEBCwUAA4IBAQAN/lqoRZKzEzhsxwyGUSRxL6Dg
5wxnIy6MtorfmnlLOs9peMkac7Ceux9+o5aQp64Fc5nmJ34det55+Eed/LJjjtb6
x4nHY/yx/Vk6mFRXv01GDQGeHAzuA3KuyaSoRtTqs86mJYUJClZ1//QohU82Ed9c
IHPhCvrXPEWJ3dlAOnfnjczXlIJ3Jo61HfwRAoKCyoHiTQ0yA4BsmNZkO1w5HFns
BQQfPhZUpLctSOb00GxuddfefPctGMlwjyX1yWT2R+FAwOR5HqUyvukKZj66ZEQH
uNSVRKS01jfup++mqBRCoOOIRXQYabACturItnmnXZSyO3BIPUSPQaDwKz/2
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:19 2026 by rpki-client