Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wPYxRo6zUkDqXnYb6eg4LLiXp5Y.roa
File: wPYxRo6zUkDqXnYb6eg4LLiXp5Y.roa (raw, json)
Hash identifier: W4Zb8PHuwrOiusXjyRqwEE3e1/SuLLw1TKEpt7TW+E4=
Subject key identifier: C0:F6:31:46:8E:B3:52:40:EA:5E:76:1B:E9:E8:38:2C:B8:97:A7:96
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0B4A0BD074D05F3DB2DF80BBC63192DE1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wPYxRo6zUkDqXnYb6eg4LLiXp5Y.roa
Signing time: Fri 18 Sep 2026 13:07:07 +0000
ROA not before: Fri 18 Sep 2026 13:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.133.0/24 maxlen: 24
5.83.134.0/24 maxlen: 24
5.83.136.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:a0:bd:07:4d:05:f3:db:2d:f8:0b:bc:63:19:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 18 13:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0f631468eb35240ea5e761be9e8382cb897a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:17:b1:9f:21:db:12:a1:d7:f7:3f:06:ec:
c5:bf:8f:28:2a:0c:0a:84:76:36:15:66:fa:f6:4f:
e9:ca:56:d8:2c:41:22:d9:e6:ad:37:94:f2:b4:d6:
9a:65:db:92:71:e8:4e:4a:0e:64:03:d6:1c:ea:eb:
56:47:6b:80:d2:8b:6a:e7:68:0c:47:cf:28:d7:de:
16:83:e3:21:4e:1f:33:a4:a8:4e:14:f6:f7:14:84:
80:ac:2d:94:be:7e:1b:11:92:a6:8c:a0:8f:01:79:
7c:61:8d:62:07:64:18:44:56:1c:c3:c6:7a:55:42:
08:ae:50:af:31:47:62:6c:5f:f6:11:77:d2:d4:71:
13:b4:e1:8a:ec:94:98:8a:c0:e4:d1:f2:44:43:99:
0c:71:5a:15:39:4e:35:28:9e:41:9a:6b:99:e9:f8:
89:0d:f4:1c:24:21:e1:48:6b:d0:29:0d:92:d4:c9:
82:b2:5c:2a:8f:63:84:73:ab:56:d6:f9:ea:f9:11:
87:6d:0f:ef:56:0d:04:06:aa:c4:d3:b3:63:89:4d:
61:92:22:40:c5:e9:54:70:14:b5:1f:c6:a6:6b:35:
03:68:04:60:12:6b:44:51:1d:53:ef:61:05:3c:e0:
a8:f5:c3:92:ff:4a:2b:53:b3:c8:c9:0e:a0:b4:35:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:31:46:8E:B3:52:40:EA:5E:76:1B:E9:E8:38:2C:B8:97:A7:96
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wPYxRo6zUkDqXnYb6eg4LLiXp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.133.0-5.83.134.255
5.83.136.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fb:e5:fe:78:35:8c:d3:94:ea:5d:71:9d:65:ea:65:30:2a:
8b:13:48:de:f5:83:dd:7f:cd:eb:3f:05:df:76:dc:be:7d:a1:
fb:58:32:c1:be:d2:90:74:c4:f3:c7:86:ba:a8:e5:30:63:f7:
62:a8:ef:1b:85:09:7a:d0:ef:92:e5:35:50:27:91:fe:2a:44:
68:4e:ab:c0:c9:dc:f7:cf:2c:36:88:a6:45:d8:66:77:fb:5f:
ce:3f:26:c5:09:b9:f9:a8:ec:c9:fc:0b:d0:5a:4b:f1:ac:86:
68:48:01:0c:6a:09:f2:c0:2d:34:a1:f1:49:20:3d:42:a8:d3:
99:17:de:b5:2b:d5:99:fd:eb:52:8f:d6:c6:37:75:1b:46:88:
d9:9a:00:9f:0f:b5:cb:e2:cc:18:48:ef:5e:ed:da:ed:79:f3:
66:ae:42:22:1d:7d:70:ed:4d:86:71:40:ab:ef:74:47:43:15:
d6:3e:1b:e3:aa:df:90:25:11:14:29:dc:dd:f5:a2:3b:4c:de:
de:d1:72:d6:c4:e9:3b:6c:55:3a:af:90:b9:40:a1:46:49:a2:
30:a7:39:6a:f7:d8:7d:b9:eb:dd:23:59:ff:74:61:85:56:f9:
ca:75:ba:8f:75:d9:2d:49:ee:49:ec:26:59:b8:ef:54:fc:85:
45:d9:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:44 2026 by rpki-client