Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-o4lYcLnDimKpvxM83jMNakudEE.roa
File: 1-o4lYcLnDimKpvxM83jMNakudEE.roa (raw, json)
Hash identifier: NO4cxcIh1vGdpjyBzME5qrR+Y5c5tGR1NbkrE7kmdRo=
Subject key identifier: FA:8E:25:61:C2:E7:0E:29:8A:A6:FC:4C:F3:78:CC:35:A9:2E:74:41
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E10B0BE42D22E886AD4BA4780EDC11767
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-o4lYcLnDimKpvxM83jMNakudEE.roa
Signing time: Sun 10 May 2026 07:01:18 +0000
ROA not before: Sun 10 May 2026 07:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214783
IP address blocks: 89.106.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:10:b0:be:42:d2:2e:88:6a:d4:ba:47:80:ed:c1:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 10 07:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa8e2561c2e70e298aa6fc4cf378cc35a92e7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:41:1c:4f:4b:eb:80:a4:6f:91:3b:72:45:
86:bc:51:e9:c6:dc:75:49:d0:3e:cc:81:09:32:5b:
26:dd:71:c9:91:a9:eb:84:02:26:9b:04:b5:0c:43:
60:29:2c:54:d1:98:54:fc:53:1a:0c:7e:6c:89:10:
0c:21:39:62:9d:6e:ae:fe:0a:f7:08:30:6c:90:f6:
51:40:25:5a:4f:12:2a:16:b3:c1:92:24:d0:1e:6e:
73:79:d4:22:86:88:25:fa:22:e3:d9:6d:96:8c:15:
3c:45:2f:dc:9c:2f:33:85:bf:f5:8a:f7:c7:14:b9:
3b:4a:5e:ce:41:93:d0:98:b7:e0:4b:ea:6e:a6:c8:
f2:85:ad:fe:c1:bf:e6:b0:c6:4b:d5:a4:87:35:42:
0b:d7:8e:82:d5:c0:a0:24:70:39:1a:7f:95:00:e5:
a5:bc:e4:2f:0f:8d:c6:0d:00:b5:d9:df:2c:99:74:
ab:f9:94:ff:16:1e:f5:c5:87:3e:e3:4b:96:f1:41:
dc:47:36:f2:40:aa:7f:f7:1b:c5:b0:be:93:38:c6:
b1:40:71:d4:82:63:26:50:47:e6:6e:f4:31:f4:3c:
2f:dc:d9:d0:fc:04:1a:b0:09:59:f5:ab:ba:f6:87:
07:f2:2a:20:40:9b:07:cf:fa:a8:83:33:fb:98:40:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:25:61:C2:E7:0E:29:8A:A6:FC:4C:F3:78:CC:35:A9:2E:74:41
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-o4lYcLnDimKpvxM83jMNakudEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.79.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:16:1a:d4:30:39:b0:d9:c0:91:96:b9:7b:60:4c:19:cc:3b:
ff:32:a2:a4:74:d0:d3:fa:23:51:66:b4:91:61:c1:27:0a:ec:
a5:0a:a9:4a:ce:06:db:93:42:84:7e:59:ce:cc:de:40:e1:5d:
22:79:20:b5:95:3f:f2:17:2c:51:8c:db:e0:cd:b2:1c:d0:3d:
3c:d8:da:8a:fc:4a:8f:04:d1:c3:45:3d:ac:41:43:64:14:ea:
eb:cf:d3:7d:0f:54:5a:75:9c:60:1b:14:1e:e8:78:a0:9a:61:
a7:cc:6b:28:e2:ab:65:4d:1a:69:c7:c7:b0:b2:a8:89:03:26:
62:05:2b:a5:81:82:33:67:58:23:b6:87:38:eb:08:03:fb:e1:
1e:0c:51:a5:ab:f3:c2:af:f1:d8:7c:ab:d5:3a:04:f0:af:97:
ec:48:70:4d:5e:58:7f:45:83:e6:fc:8d:18:b5:ff:3a:fe:28:
a9:9e:46:99:79:d7:88:be:fc:f2:e2:f7:e6:88:98:f4:39:db:
44:8f:49:4d:f4:66:c1:53:6f:84:4b:44:45:31:fe:19:38:03:
dd:e5:4e:86:fb:42:1d:c5:35:20:5e:2a:f1:37:00:25:78:96:
16:f4:d1:6f:ba:08:d2:2b:c2:82:96:d9:3d:3e:a3:0e:cd:17:
fb:d8:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:21 2026 by rpki-client