Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jmeYa9CX7WONyt2d-7e2WNrijS8.roa
File: jmeYa9CX7WONyt2d-7e2WNrijS8.roa (raw, json)
Hash identifier: EfWq9d1P9kixbgs+IWv7xBDaVwsPHTW+tvfdZLsYKu0=
Subject key identifier: 8E:67:98:6B:D0:97:ED:63:8D:CA:DD:9D:FB:B7:B6:58:DA:E2:8D:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EB18EE433F8A16604CD7E3F1DAF545561
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jmeYa9CX7WONyt2d-7e2WNrijS8.roa
Signing time: Wed 10 Jun 2026 12:43:12 +0000
ROA not before: Wed 10 Jun 2026 12:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206491
IP address blocks: 5.230.5.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:8e:e4:33:f8:a1:66:04:cd:7e:3f:1d:af:54:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 12:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e67986bd097ed638dcadd9dfbb7b658dae28d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:0d:6e:64:74:d5:60:ff:ac:e2:fe:52:2d:
51:9b:db:ed:2f:a5:83:8e:ac:29:3b:01:ff:c9:ea:
45:cb:cd:30:4b:0e:f8:b3:c8:05:67:2e:9c:31:03:
c0:10:9e:35:9f:b0:34:fb:d0:d7:6e:e6:1b:66:8e:
77:28:9d:14:88:e2:26:de:88:0e:07:f1:49:b0:38:
4a:75:c6:03:cd:18:65:85:dc:32:63:c0:95:26:b3:
0c:75:30:6e:e6:6f:66:fc:56:ac:ce:d8:ee:95:fd:
aa:7a:b5:68:1b:c3:d9:e0:72:7e:a7:58:e9:aa:c0:
02:62:f4:5d:fc:f0:9f:0a:0c:88:8b:da:da:59:c3:
e0:c9:24:7c:36:83:a8:35:a2:32:92:be:42:8c:49:
2a:9e:ef:81:d5:10:a0:a3:a8:2c:56:00:bc:c5:25:
84:0e:60:1c:9d:2d:a3:cd:02:c6:14:50:2d:97:64:
03:5c:0e:4b:63:00:a7:46:24:9a:20:48:08:28:0d:
cf:8f:14:32:ea:62:16:17:c6:f1:af:c1:ad:8a:61:
10:04:46:55:b8:75:3a:81:b2:cc:79:97:77:0c:30:
14:e5:5e:6d:9d:4f:a5:f9:9a:b9:08:8e:2c:3a:2b:
a7:0d:d5:04:71:66:e8:1e:48:a9:ee:d4:64:b1:e0:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:98:6B:D0:97:ED:63:8D:CA:DD:9D:FB:B7:B6:58:DA:E2:8D:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jmeYa9CX7WONyt2d-7e2WNrijS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.5.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c1:df:f4:cb:5b:25:ef:a4:68:28:01:50:bb:4b:c4:ec:84:
d9:57:8d:8f:f0:a0:a9:39:06:76:90:64:09:b9:33:e2:e7:cb:
c6:9e:0e:e8:b8:85:fd:cd:36:e0:99:b9:2b:6d:54:c8:ec:92:
d8:63:f5:29:5f:b5:43:a8:c7:fd:d3:37:a9:b0:96:de:e3:01:
02:b1:02:3a:4c:1b:08:47:74:7f:55:ba:ab:60:02:c6:5e:9f:
72:c6:30:c7:4b:35:d5:f1:32:2a:81:7e:bb:99:a9:c3:0d:ef:
df:e1:6a:06:cf:09:7e:f0:38:39:81:e8:af:d7:ed:91:4e:58:
3b:8f:f1:3d:d6:0d:eb:4a:d2:1d:29:55:64:d2:f1:94:19:08:
4d:9d:96:57:f4:e3:7d:dc:02:74:d6:f9:a3:27:f9:74:89:6d:
6b:e9:98:01:73:67:0c:20:41:c0:14:d0:94:c4:d4:ff:b2:25:
b3:2a:a4:2d:c2:b6:ec:e5:a4:b4:fe:11:40:29:57:a5:79:44:
78:af:d7:88:87:89:99:3c:fe:7d:45:11:0f:b9:74:48:f0:0a:
21:80:d6:4e:64:ec:a2:9e:5d:ee:19:25:2a:5e:2f:be:62:94:
df:c8:96:94:0b:fa:f6:80:d8:30:fd:2a:b5:fb:9b:ca:33:61:
cb:b6:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:08 2026 by rpki-client