Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m-ldRcOZzUloISzT7_Qr3aPOZK8.roa
File: m-ldRcOZzUloISzT7_Qr3aPOZK8.roa (raw, json)
Hash identifier: Oq22A90NwE+FntbSonJcWDEugCseDbbRdV/kn36LCAA=
Subject key identifier: 9B:E9:5D:45:C3:99:CD:49:68:21:2C:D3:EF:F4:2B:DD:A3:CE:64:AF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D913F09541F6F06214E0CB0C9E5F1B2AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m-ldRcOZzUloISzT7_Qr3aPOZK8.roa
Signing time: Wed 15 Apr 2026 13:05:20 +0000
ROA not before: Wed 15 Apr 2026 13:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214639
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.178.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.93.10.0/24 maxlen: 24
87.239.135.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:3f:09:54:1f:6f:06:21:4e:0c:b0:c9:e5:f1:b2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 15 13:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be95d45c399cd4968212cd3eff42bdda3ce64af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:3a:b7:ce:68:d2:c5:f6:e0:25:4e:fd:52:
6e:8a:86:e2:5c:e1:5c:00:78:5f:1e:4c:15:ee:77:
4a:4f:7f:59:99:8b:7d:eb:47:7a:45:80:82:e8:47:
83:27:4e:87:36:78:d8:b8:e4:14:df:0d:d3:33:07:
d6:c9:10:ae:41:ba:28:0e:f0:e9:cf:c2:82:b9:00:
b3:2a:8d:60:e6:e2:42:e9:f5:4f:b1:03:fa:41:66:
93:00:d5:3c:cc:a8:18:bc:6f:50:f1:24:40:bd:84:
a5:51:91:78:14:98:a0:e2:19:3b:63:b2:3d:24:fb:
92:f5:c0:a9:56:aa:53:2e:25:87:05:e4:40:43:9b:
93:5d:40:f9:c2:13:aa:65:97:67:d8:b2:32:8f:39:
ce:8c:9c:9a:98:21:cd:43:43:ce:ca:55:bc:6f:74:
c8:6e:35:b1:aa:f8:6e:83:82:e6:4e:7a:a8:0e:55:
4b:a4:74:0a:cd:6d:54:d4:4c:1f:a3:82:9f:ef:ab:
76:ff:77:7c:1e:50:eb:8c:8e:46:e1:2e:ec:23:ac:
f1:18:11:57:90:ab:ef:81:a1:cf:21:15:64:bb:b8:
ca:e6:ff:c1:31:ea:12:b1:67:d0:17:2c:e5:2f:13:
ca:ce:60:78:dd:5e:cc:a3:b5:00:18:03:e5:3c:c5:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:5D:45:C3:99:CD:49:68:21:2C:D3:EF:F4:2B:DD:A3:CE:64:AF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m-ldRcOZzUloISzT7_Qr3aPOZK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.178.0/24
83.243.86.0/24
85.93.10.0/24
87.239.135.0/24
89.144.35.0/24
94.249.176.0/24
94.249.205.0/24
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4c:b8:15:b3:97:cc:d8:30:58:49:86:0c:63:81:73:83:55:
aa:c4:d0:49:12:57:ce:b5:43:81:37:7f:4f:8c:34:40:d2:47:
bc:a1:47:25:f7:7f:cb:5a:a3:5e:c7:ac:84:6e:12:00:97:63:
de:9a:89:88:66:a0:84:e8:8a:d7:b0:dc:39:8a:19:60:15:c2:
af:23:fc:9c:d8:eb:5c:6f:91:4b:a7:44:b2:ae:28:63:7b:db:
c1:33:9c:75:ab:e3:61:bb:82:d2:6d:fe:35:cc:0f:1b:3a:90:
36:68:a2:17:94:44:4f:da:0a:97:ef:c9:9f:df:57:d3:70:de:
c5:b6:96:f0:62:13:6f:53:33:c9:8d:53:11:d2:0b:5b:17:bc:
d0:91:15:51:10:2d:2b:b0:20:92:b0:4f:31:8e:fb:56:3a:ca:
e6:d2:e9:84:fd:5d:8b:e5:26:0a:cb:12:36:a5:7d:21:d5:6a:
da:fc:f1:0f:04:72:bd:e2:59:1f:bb:40:c8:0c:b3:1b:b6:f0:
b6:da:57:f3:f6:f6:c0:a0:c2:0a:a4:4e:02:33:da:23:a6:a2:
6b:63:82:a1:a3:ec:49:4e:d6:00:9c:19:7f:0e:9e:b2:02:bc:
05:19:34:07:f0:ae:12:f6:c2:de:17:53:f8:ee:31:71:6a:53:
51:2e:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:05 2026 by rpki-client