Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rkPd_Ts2kfpbSwDXyCqbPVEE5K0.roa
File: rkPd_Ts2kfpbSwDXyCqbPVEE5K0.roa (raw, json)
Hash identifier: KJb0csvDGrpAsWD8k8TueZqyRROE6RmfuJZrCPrjcHk=
Subject key identifier: AE:43:DD:FD:3B:36:91:FA:5B:4B:00:D7:C8:2A:9B:3D:51:04:E4:AD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EA83C16FCEE7FB3E346536B7B8032C9C0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rkPd_Ts2kfpbSwDXyCqbPVEE5K0.roa
Signing time: Mon 08 Jun 2026 17:16:10 +0000
ROA not before: Mon 08 Jun 2026 17:16:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214639
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.178.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.93.10.0/24 maxlen: 24
87.239.135.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.240.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:3c:16:fc:ee:7f:b3:e3:46:53:6b:7b:80:32:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 8 17:16:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae43ddfd3b3691fa5b4b00d7c82a9b3d5104e4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:b5:af:1d:49:df:7c:62:c3:f6:69:49:d9:
68:40:39:ff:18:11:ce:55:fc:0e:1a:67:f2:ee:95:
8c:71:c0:f9:f1:84:53:1c:5a:74:45:fe:99:30:19:
68:a5:4d:d5:51:b1:8f:6c:10:c3:c9:4e:3a:ed:1f:
7c:63:85:91:4f:34:42:2d:01:c5:78:c3:cd:a3:d2:
10:17:5f:db:41:ef:2f:c4:64:d7:1b:05:be:53:c4:
88:ba:7c:2a:27:6f:f7:ae:2a:c0:eb:29:b7:ab:7b:
22:c9:0a:1d:69:4a:c8:78:a2:b2:be:cb:11:6e:11:
28:77:1e:27:cf:06:92:8d:8a:3a:60:f1:76:b4:fc:
d0:22:f4:ee:98:da:35:91:3c:5b:a1:72:58:03:b4:
8f:2c:e1:f2:52:3f:ba:f2:22:a1:18:de:19:3f:c0:
c3:f2:5b:ce:11:55:22:a6:0d:db:bb:fb:86:d4:be:
cf:e8:55:5a:6f:23:10:62:b4:04:a3:64:60:8f:e3:
4b:a6:a7:95:04:88:42:49:68:c4:21:cf:4f:95:88:
9d:cb:24:43:f5:ee:9d:b1:25:d2:69:01:e1:8c:3c:
06:b4:69:f6:d8:90:ff:c4:9b:53:b5:d6:69:d2:b6:
f1:5d:09:f7:68:27:dc:7d:ff:7c:e6:ba:8c:f5:11:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:DD:FD:3B:36:91:FA:5B:4B:00:D7:C8:2A:9B:3D:51:04:E4:AD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rkPd_Ts2kfpbSwDXyCqbPVEE5K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.178.0/24
83.243.86.0/24
85.93.10.0/24
87.239.135.0/24
89.106.86.0/24
89.144.35.0/24
94.249.175.0-94.249.176.255
94.249.225.0/24
94.249.240.0/24
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:95:53:ae:14:5b:5e:f3:9e:6c:8e:12:9c:db:64:17:82:34:
6d:17:1c:b0:12:bc:75:c9:e9:10:0a:f4:33:74:3e:f9:60:52:
07:8d:4d:01:f9:94:c8:f0:b7:c4:0b:29:df:74:4b:48:c0:17:
55:1a:cb:7e:ea:70:30:48:12:30:48:ef:5b:3d:c0:1d:22:b2:
b8:88:f8:4a:7c:a1:8e:45:a2:68:2a:61:34:47:33:99:fe:59:
74:ca:54:3f:f5:36:57:7b:c4:93:99:d6:0e:a8:a5:e1:4e:75:
d0:cf:68:1d:5d:4a:7b:d5:a5:6c:0b:5b:af:13:3c:1c:99:c2:
9f:7c:47:53:98:c6:dd:cb:c7:11:2e:31:8b:59:24:e4:e5:f1:
81:8a:42:a2:e4:e8:16:b9:84:fd:73:b7:5a:d3:ff:d3:40:48:
94:66:ce:76:fa:54:e9:dd:f9:62:49:b3:d2:13:4a:40:c5:98:
4b:0d:75:33:de:9d:a5:7d:c5:8a:5c:0a:01:f5:d4:f2:22:a9:
42:97:20:b3:08:71:00:a1:f5:ae:65:25:2a:d7:3e:54:e5:15:
48:77:e9:6e:09:c3:93:48:5e:c3:35:d8:af:8a:68:df:e2:a0:
11:8f:b1:28:1f:04:53:45:0f:b1:91:02:a4:9d:05:ff:0a:6d:
92:67:2b:8d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZ6oPBb87n+z40ZTa3uAMsnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNjA4MTcxNjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTQzZGRmZDNiMzY5MWZhNWI0YjAwZDdjODJhOWIzZDUxMDRlNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0C1rx1J33xiw/ZpSdloQDn/GBHO
VfwOGmfy7pWMccD58YRTHFp0Rf6ZMBlopU3VUbGPbBDDyU467R98Y4WRTzRCLQHF
eMPNo9IQF1/bQe8vxGTXGwW+U8SIunwqJ2/3rirA6ym3q3siyQodaUrIeKKyvssR
bhEodx4nzwaSjYo6YPF2tPzQIvTumNo1kTxboXJYA7SPLOHyUj+68iKhGN4ZP8DD
8lvOEVUipg3bu/uG1L7P6FVabyMQYrQEo2Rgj+NLpqeVBIhCSWjEIc9PlYidyyRD
9e6dsSXSaQHhjDwGtGn22JD/xJtTtdZp0rbxXQn3aCfcff985rqM9RFNRQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFK5D3f07NpH6W0sA18gqmz1RBOStMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcmtQZF9UczJrZnBiU3dEWHlDcWJQVkVFNUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQABVOBAwQA
Ba+yAwQAU/NWAwQAVV0KAwQAV++HAwQAWWpWAwQAWZAjMAwDBABe+a8DBABe+bAD
BABe+eEDBABe+fADBACyEpMwDQYJKoZIhvcNAQELBQADggEBANiVU64UW17znmyO
EpzbZBeCNG0XHLASvHXJ6RAK9DN0PvlgUgeNTQH5lMjwt8QLKd90S0jAF1Uay37q
cDBIEjBI71s9wB0isriI+Ep8oY5FomgqYTRHM5n+WXTKVD/1Nld7xJOZ1g6opeFO
ddDPaB1dSnvVpWwLW68TPByZwp98R1OYxt3LxxEuMYtZJOTl8YGKQqLk6Ba5hP1z
t1rT/9NASJRmznb6VOnd+WJJs9ITSkDFmEsNdTPenaV9xYpcCgH11PIiqUKXILMI
cQCh9a5lJSrXPlTlFUh36W4Jw5NIXsM12K+KaN/ioBGPsSgfBFNFD7GRAqSdBf8K
bZJnK40=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:03 2026 by rpki-client