Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qhz5ZeyJO44mRg2aRwAqD9AQw8g.roa
File: qhz5ZeyJO44mRg2aRwAqD9AQw8g.roa (raw, json)
Hash identifier: 6W0zWbFnbNFc087siVgmF2Pa5Lt/HJ4otzjFSCuP2JA=
Subject key identifier: AA:1C:F9:65:EC:89:3B:8E:26:46:0D:9A:47:00:2A:0F:D0:10:C3:C8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C2FEF3BA5DA6581127D360E0E4365CAF5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qhz5ZeyJO44mRg2aRwAqD9AQw8g.roa
Signing time: Thu 05 Feb 2026 22:32:13 +0000
ROA not before: Thu 05 Feb 2026 22:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.230.125.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.44.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
89.144.15.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:ef:3b:a5:da:65:81:12:7d:36:0e:0e:43:65:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 5 22:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa1cf965ec893b8e26460d9a47002a0fd010c3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:28:b3:d7:80:65:28:69:81:9b:5e:20:58:
c3:1c:44:ea:98:0e:60:1a:a2:e8:ea:5c:22:2c:94:
fb:8a:ce:ad:ee:d4:20:50:ab:7a:9b:87:60:34:b1:
81:59:da:d2:a9:d4:e2:f3:be:a9:dd:21:4d:3c:24:
d5:50:09:c2:1b:17:05:06:63:ff:fb:de:0f:52:b5:
69:97:22:34:f6:bd:a0:b5:db:ef:f3:db:a0:ec:c8:
a0:2c:0f:f3:0b:5f:08:59:18:aa:c5:31:93:bf:67:
b7:4c:03:11:d9:eb:de:ba:8d:8a:de:df:5e:7a:da:
5a:c5:18:da:d4:7e:53:72:cf:27:2e:0b:a3:e3:d8:
8d:65:7b:a4:b1:0e:18:ef:81:ce:c2:bf:06:fa:3b:
5d:54:7f:76:99:3e:64:0e:b1:46:5b:e9:58:ab:d6:
db:44:f4:b6:79:e9:55:28:eb:92:71:aa:d6:55:1e:
30:c3:66:9c:60:94:50:cb:cc:a0:77:d6:0e:25:85:
03:74:34:76:31:b6:7a:3a:b2:ed:6d:9f:9e:df:c9:
77:8a:5d:80:3b:b6:c4:d9:03:96:c6:f2:99:e4:e5:
3f:c8:aa:ab:90:ae:b9:e8:21:e8:d5:9e:0e:c0:7a:
04:6a:e0:d4:60:d0:d7:91:8e:6c:74:28:01:fb:cf:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:F9:65:EC:89:3B:8E:26:46:0D:9A:47:00:2A:0F:D0:10:C3:C8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qhz5ZeyJO44mRg2aRwAqD9AQw8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.230.125.0/24
5.231.29.0/24
5.231.44.0/24
5.231.204.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
89.144.15.0/24
185.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
11:91:33:4e:0c:d8:14:88:ca:57:0a:16:e2:36:87:48:bc:1d:
28:31:62:6b:7b:2b:ca:84:45:ae:a9:2c:3a:5c:cd:49:5b:f5:
f8:99:d7:5a:75:1a:3f:8a:ee:b9:f5:82:f6:e8:22:7a:bc:9b:
d4:83:6e:dc:b8:62:be:3b:f8:f9:83:f0:9e:c7:84:67:32:3f:
8c:b8:f2:a3:be:80:c6:15:0e:ac:1c:0c:1d:f3:d2:56:60:86:
c0:24:a0:2b:fa:c5:80:1c:b1:0a:99:3d:2d:10:4a:a0:e7:37:
0e:3c:1c:c6:72:a3:5f:3f:b4:ac:32:33:2f:46:5d:21:e9:1b:
48:11:9d:fa:73:5b:ef:7d:3b:4d:5d:10:72:e6:5a:f0:5d:eb:
90:52:1c:f6:b1:b8:27:a6:6c:ea:1d:5a:40:ba:4c:d3:3b:e8:
df:8c:69:20:32:d8:72:96:7b:f3:9d:ce:9c:bd:c8:93:e9:43:
b2:ac:e2:ab:e8:5a:65:8d:65:33:70:1a:30:f2:b7:c3:cf:71:
ef:a4:77:9a:af:05:47:ad:b4:48:e7:bd:ad:a8:b0:89:dd:5a:
f9:2c:8c:a9:5a:82:32:f0:c1:e3:a4:32:16:32:ce:a3:4f:4d:
47:6d:56:c9:07:16:ac:c9:55:06:05:09:7d:ec:f3:02:a8:02:
6a:c6:18:85
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZwv7zul2mWBEn02Dg5DZcr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjA1MjIzMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTFjZjk2NWVjODkzYjhlMjY0NjBkOWE0NzAwMmEwZmQwMTBjM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCoos9eAZShpgZteIFjDHETqmA5g
GqLo6lwiLJT7is6t7tQgUKt6m4dgNLGBWdrSqdTi876p3SFNPCTVUAnCGxcFBmP/
+94PUrVplyI09r2gtdvv89ug7MigLA/zC18IWRiqxTGTv2e3TAMR2eveuo2K3t9e
etpaxRja1H5Tcs8nLguj49iNZXuksQ4Y74HOwr8G+jtdVH92mT5kDrFGW+lYq9bb
RPS2eelVKOuScarWVR4ww2acYJRQy8ygd9YOJYUDdDR2MbZ6OrLtbZ+e38l3il2A
O7bE2QOWxvKZ5OU/yKqrkK656CHo1Z4OwHoEauDUYNDXkY5sdCgB+880KwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFKoc+WXsiTuOJkYNmkcAKg/QEMPIMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcWh6NVpleUpPNDRtUmcyYVJ3QXFEOUFRdzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABVOYAwQA
BeZ9AwQABecdAwQABecsAwQABefMAwQATVoMAwQATVoqAwQAVV0IAwQAWZAPAwQC
uXcQMA0GCSqGSIb3DQEBCwUAA4IBAQARkTNODNgUiMpXChbiNodIvB0oMWJreyvK
hEWuqSw6XM1JW/X4mddadRo/iu659YL26CJ6vJvUg27cuGK+O/j5g/Cex4RnMj+M
uPKjvoDGFQ6sHAwd89JWYIbAJKAr+sWAHLEKmT0tEEqg5zcOPBzGcqNfP7SsMjMv
Rl0h6RtIEZ36c1vvfTtNXRBy5lrwXeuQUhz2sbgnpmzqHVpAukzTO+jfjGkgMthy
lnvznc6cvciT6UOyrOKr6FpljWUzcBow8rfDz3HvpHearwVHrbRI572tqLCJ3Vr5
LIypWoIy8MHjpDIWMs6jT01HbVbJBxasyVUGBQl97PMCqAJqxhiF
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:58 2026 by rpki-client