Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pmQ3JP6Zme76GJCDECTsfvd3eTo.roa
File: pmQ3JP6Zme76GJCDECTsfvd3eTo.roa (raw, json)
Hash identifier: fgyjPJE4450N81LqyTdudEvmvaVI+HlQz74hHInPX44=
Subject key identifier: A6:64:37:24:FE:99:99:EE:FA:18:90:83:10:24:EC:7E:F7:77:79:3A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C198FF6608637FBCF3B544C3B1456D2A0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pmQ3JP6Zme76GJCDECTsfvd3eTo.roa
Signing time: Sun 01 Feb 2026 14:16:30 +0000
ROA not before: Sun 01 Feb 2026 14:16:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.181.0/24 maxlen: 24
5.175.184.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:19:8f:f6:60:86:37:fb:cf:3b:54:4c:3b:14:56:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 1 14:16:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6643724fe9999eefa1890831024ec7ef777793a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:e0:e1:10:82:ca:b6:a9:fd:e2:d2:3a:da:
24:95:8a:68:cd:c8:20:8e:b1:66:01:96:9e:da:dd:
f6:d0:bd:c8:2c:bd:cc:e4:24:6e:b5:b4:1a:0d:4a:
ed:80:26:b2:2a:31:b0:08:77:69:9a:d7:65:02:36:
65:ff:52:a6:54:30:42:82:de:80:4a:44:9d:87:28:
78:6b:41:66:38:aa:90:91:22:fa:52:11:0c:04:b2:
30:48:80:8a:2c:63:ae:20:69:00:16:f6:24:03:01:
19:f2:78:34:e8:ff:21:5f:1a:e4:58:6b:f0:55:b4:
57:37:c8:7a:b7:67:80:1c:43:e6:bf:96:29:a8:13:
fe:18:b8:37:68:20:ab:ae:99:52:77:a8:fb:b2:37:
cc:00:6e:1d:7f:4b:69:1f:78:da:a9:ac:0e:11:31:
09:c4:8a:8f:d0:70:6f:86:af:26:56:e9:a2:f8:33:
ec:2f:51:55:a5:a8:73:fe:b7:05:f8:ea:75:71:fa:
6d:89:5f:26:e7:d9:b3:e7:fe:83:ad:79:1b:08:8b:
12:c4:b5:31:71:12:03:a1:6b:11:82:f8:1f:31:fb:
3e:d1:c4:0e:53:d1:79:1f:c3:97:a8:74:6a:0b:cc:
68:6e:66:0e:29:bd:f4:ab:21:28:6d:e2:92:ab:14:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:37:24:FE:99:99:EE:FA:18:90:83:10:24:EC:7E:F7:77:79:3A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pmQ3JP6Zme76GJCDECTsfvd3eTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.181.0/24
5.175.184.0/24
5.175.213.0/24
5.231.107.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ff:ff:35:88:c5:c3:36:4f:51:52:bd:88:a0:73:a6:72:44:
74:0f:20:18:89:f3:ad:f0:d6:a8:a0:b8:ea:98:b5:a7:d3:6e:
6f:74:e4:fc:e6:9d:93:85:e1:4b:84:02:ec:c3:74:39:ad:49:
62:fe:e8:e6:c0:1c:cb:d0:3b:a7:60:36:07:1c:3d:33:60:4f:
c8:2f:7f:d7:38:6a:c6:68:0b:53:4d:59:ae:37:dd:29:d1:96:
7f:85:f8:31:1e:77:08:0c:f2:9e:20:26:5b:b6:05:ff:21:cc:
12:6e:2a:77:5d:d3:db:be:b1:57:06:8d:bc:f3:b8:cb:43:09:
08:48:e5:94:a5:15:1c:b0:68:68:09:13:59:ce:15:9b:d9:8c:
c3:55:07:94:a5:9a:b3:d2:5a:a6:5a:7b:00:29:57:30:de:d6:
b6:93:fd:43:53:e4:ad:8e:ad:0c:8a:23:3f:96:33:c4:51:20:
40:0d:81:af:7f:73:8a:22:0d:7d:ba:b4:bb:e6:39:34:f6:34:
5b:d8:82:85:fd:77:ea:d2:6c:18:7a:bc:9f:8d:3f:10:91:ec:
70:73:e8:05:36:60:19:ae:3e:97:d9:75:7e:8d:7d:0f:ac:2b:
38:63:12:5c:7b:83:bb:fc:a0:66:39:57:b1:13:48:88:03:c7:
90:eb:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:15 2026 by rpki-client