Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pSKcDbHKjsYd8j-QP6PX7gO7qJk.roa
File: pSKcDbHKjsYd8j-QP6PX7gO7qJk.roa (raw, json)
Hash identifier: GLGsfVVEKjR+jCKwFbyJcFJy+5i+e420GeNeuOc/Sn4=
Subject key identifier: A5:22:9C:0D:B1:CA:8E:C6:1D:F2:3F:90:3F:A3:D7:EE:03:BB:A8:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0B9E28EF12952810E3FD23F3AC6D4548D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pSKcDbHKjsYd8j-QP6PX7gO7qJk.roa
Signing time: Sat 19 Sep 2026 13:37:07 +0000
ROA not before: Sat 19 Sep 2026 13:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.133.0/24 maxlen: 24
5.83.134.0/24 maxlen: 24
5.175.128.0/24 maxlen: 24
5.175.132.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.185.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
185.47.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:e2:8e:f1:29:52:81:0e:3f:d2:3f:3a:c6:d4:54:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 19 13:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5229c0db1ca8ec61df23f903fa3d7ee03bba899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:e5:a3:7e:27:39:ca:47:49:08:98:7f:a6:
6e:69:ec:d5:2e:3b:98:dd:c1:1d:cd:dc:29:1e:2e:
fb:a9:78:1a:35:69:8d:32:45:b2:2e:75:b8:11:8d:
fb:f6:b3:d3:ad:03:63:8e:c9:ba:56:e8:40:7d:4a:
04:6c:29:c5:83:05:4a:35:1a:25:6d:ae:7b:bd:56:
31:a8:2e:6e:68:aa:0f:45:d2:2d:97:59:8f:76:6b:
38:0c:ab:6c:3f:2b:1b:5d:6c:4c:aa:5a:3e:0f:0c:
85:19:44:a2:c8:e3:18:4f:32:45:42:02:6f:26:77:
49:78:b6:84:04:45:68:64:69:36:e8:8b:b8:a4:c2:
4d:12:d7:73:b6:16:62:19:69:57:12:25:8d:d6:4e:
9e:97:80:dc:f4:f9:e8:c1:53:b0:13:68:a1:9c:fb:
26:d6:71:a0:d3:ae:9f:64:c3:1a:64:a0:c2:61:b7:
3d:98:b5:37:6d:7e:92:cc:3f:d6:b6:38:76:c1:91:
df:52:04:3d:fc:8f:42:f4:a4:4d:bc:c5:e0:7a:b5:
ed:40:ba:59:85:d2:87:cf:98:ff:39:8c:4e:05:96:
17:cf:c3:3f:15:c4:f2:8b:a0:64:54:8e:fb:76:c0:
6b:de:40:38:16:64:d8:18:a4:ac:50:6f:bd:71:f8:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:9C:0D:B1:CA:8E:C6:1D:F2:3F:90:3F:A3:D7:EE:03:BB:A8:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pSKcDbHKjsYd8j-QP6PX7gO7qJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.133.0-5.83.134.255
5.175.128.0/24
5.175.132.0/24
5.175.140.0/24
5.175.185.0/24
5.175.192.0/24
5.175.221.0/24
5.231.94.0/24
87.239.131.0/24
89.106.77.0/24
89.106.82.0/24
89.144.49.0/24
94.249.247.0/24
185.47.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8b:65:20:4c:24:50:c5:17:a0:e3:58:3b:d5:68:a1:ae:f0:
cc:a4:4a:aa:19:bb:52:c4:7e:6b:33:c8:23:c3:a3:f2:22:48:
9d:6f:6c:c5:ba:3e:f8:20:d6:45:e3:94:32:e3:b3:78:83:94:
00:fb:fb:40:a2:17:3a:2a:f5:81:3b:01:53:12:4e:9c:f1:7f:
db:f1:25:1f:90:5a:41:e5:db:a5:1d:8c:8a:fc:20:b3:37:38:
c3:a3:b5:51:5d:97:44:21:83:32:5e:4a:59:4f:a9:90:84:cf:
de:07:85:07:00:86:90:f5:89:c9:71:b4:ec:13:c3:ed:5b:50:
d2:39:77:57:e6:a9:45:b9:84:e6:4a:8c:f5:cd:1d:d6:c1:c2:
f9:8a:89:46:1a:88:19:d2:1a:57:b7:f7:37:c2:a7:8b:0b:98:
2e:10:1f:e2:c0:ca:45:49:9b:83:53:99:85:d0:0d:4e:1e:9a:
b4:37:6f:fc:30:2d:b1:50:4c:16:b0:0b:14:12:27:41:24:e7:
ec:bd:7a:53:53:97:aa:27:62:5f:0a:d7:ec:4e:3d:7c:4e:58:
7a:b7:e1:64:b5:7d:4e:bb:b2:4f:ab:6f:30:aa:5c:f1:64:4c:
12:8b:35:00:bc:5a:68:41:e6:ca:93:2f:fa:51:dd:35:00:98:
e2:9c:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:32 2026 by rpki-client