Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kDJA_DT_fDCfPR3rDFqeL5IsR-A.roa
File: kDJA_DT_fDCfPR3rDFqeL5IsR-A.roa (raw, json)
Hash identifier: WnZ8fN5+bO6Kzj0KNWWk1FK9o9oAkMSFlbUtCrgi7V0=
Subject key identifier: 90:32:40:FC:34:FF:7C:30:9F:3D:1D:EB:0C:5A:9E:2F:92:2C:47:E0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C827D7B156C18BE005BB5D89F951B832F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kDJA_DT_fDCfPR3rDFqeL5IsR-A.roa
Signing time: Sat 21 Feb 2026 23:16:27 +0000
ROA not before: Sat 21 Feb 2026 23:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:82:7d:7b:15:6c:18:be:00:5b:b5:d8:9f:95:1b:83:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 21 23:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=903240fc34ff7c309f3d1deb0c5a9e2f922c47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:58:be:08:fd:0e:de:c3:b5:93:00:01:1d:
eb:13:c4:12:69:cc:55:34:52:8f:e2:e9:fc:4e:6e:
10:7f:3c:05:92:48:da:08:5b:9f:f2:66:47:2b:4b:
3b:53:d4:4a:1b:65:ae:13:d1:7f:f6:94:cd:4f:b1:
3e:2c:1d:29:39:09:0f:de:fe:08:e1:42:c3:a0:cc:
4d:a6:dc:58:4d:a7:b7:d0:76:fd:39:3e:33:98:dd:
53:b6:49:a4:9d:d8:6a:eb:00:32:3c:65:e4:05:b4:
67:87:3d:09:2f:ff:ea:80:ed:60:f1:e6:7b:4a:08:
41:c7:a1:df:be:bb:2c:a7:6c:07:a0:10:95:2d:5f:
b1:2a:e1:16:47:8d:bf:93:bd:b5:3f:b9:57:ab:d7:
32:be:56:d6:02:a4:b5:02:95:d7:c6:6e:c8:3b:e0:
41:5a:7c:0f:2c:f0:4a:d3:f3:ba:2e:12:37:35:e4:
86:47:99:63:05:d1:64:76:28:ff:83:c5:3e:00:68:
6b:e7:f3:ac:d4:c7:db:d2:e6:50:d1:c2:30:0a:7f:
01:5e:0e:91:9c:7d:69:b1:79:79:8b:dd:99:5e:91:
41:67:01:5a:81:92:51:cb:48:28:61:88:ba:40:30:
21:cc:9d:8c:31:2b:d2:c9:26:72:81:0c:03:0d:4d:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:40:FC:34:FF:7C:30:9F:3D:1D:EB:0C:5A:9E:2F:92:2C:47:E0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kDJA_DT_fDCfPR3rDFqeL5IsR-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.175.168.0/24
5.175.195.0/24
5.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:bd:7b:22:2d:16:1b:8d:b8:30:82:d6:e2:6d:7d:67:73:a9:
5f:36:77:73:a5:ce:d3:30:78:89:43:b3:00:c4:87:e8:ca:75:
3d:73:a3:0b:27:8b:b7:a2:ee:4a:36:fc:00:a0:07:37:fc:e6:
7a:49:d3:3f:aa:88:b5:c0:73:2a:fe:73:6a:10:4d:7b:60:21:
a5:da:0c:ab:5f:f3:3b:c9:50:cf:44:db:c6:8c:ff:91:02:0c:
8c:bb:5b:dd:33:54:97:8b:83:61:61:95:b9:4b:b0:94:36:2d:
dc:d0:29:bc:14:7f:45:ac:b1:94:8e:83:79:6d:3b:b6:3b:5b:
73:7b:dc:21:b9:bd:13:02:50:f7:e4:4f:1f:8b:03:37:72:f6:
f2:84:fe:e4:50:61:2c:2a:bb:ac:bd:c7:60:31:4f:e6:e8:09:
35:73:7e:9b:2c:3f:9d:fb:b6:94:0a:e1:7a:b1:aa:b6:24:42:
9e:aa:40:cb:07:24:82:d1:47:17:06:83:51:eb:d6:91:a0:b7:
9f:38:da:2e:71:94:93:76:1a:4e:37:11:84:55:7b:ba:a7:ee:
19:01:6c:0e:c2:d3:94:e5:77:21:fa:a4:11:ee:b3:ca:87:72:
11:a7:4c:d6:5f:ed:cb:e6:b8:e6:8e:4c:0a:5c:b9:69:6c:7c:
22:3d:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:58 2026 by rpki-client