Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i_t_Ra_TOBtGXJgQjGjkaPdiW7A.roa
File: i_t_Ra_TOBtGXJgQjGjkaPdiW7A.roa (raw, json)
Hash identifier: eHi9ka9V+BrpFUzUjPxb+RiIuoviwtVTaDPkspHaDGU=
Subject key identifier: 8B:FB:7F:45:AF:D3:38:1B:46:5C:98:10:8C:68:E4:68:F7:62:5B:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CCC1E5DB06E5A39836A2DF4159AB343E3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i_t_Ra_TOBtGXJgQjGjkaPdiW7A.roa
Signing time: Sun 08 Mar 2026 06:24:27 +0000
ROA not before: Sun 08 Mar 2026 06:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215030
IP address blocks: 89.106.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cc:1e:5d:b0:6e:5a:39:83:6a:2d:f4:15:9a:b3:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 06:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bfb7f45afd3381b465c98108c68e468f7625bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:49:96:82:04:1b:cc:8e:12:be:43:6d:d4:
5d:24:aa:b5:0a:3e:8b:ec:20:0d:1e:1c:2c:5c:05:
c3:68:7b:63:0e:6e:9f:a1:6e:bb:24:35:c4:d5:e8:
b1:f4:32:c3:6b:ad:11:d6:23:19:81:1d:f7:b3:3e:
0f:ae:be:33:9a:44:70:e7:3b:5a:11:1c:a4:d7:58:
a6:90:e2:d5:d8:a2:ee:66:00:1e:8a:d3:3f:90:90:
2c:ab:6c:06:cb:9b:96:18:a9:4e:07:d0:e9:2c:4d:
8c:ad:30:01:3b:96:a7:fd:f0:22:2e:6d:63:d3:77:
80:5a:df:0e:95:d6:17:cc:76:09:62:92:4b:1d:90:
45:ae:69:b4:02:8f:8d:62:78:bc:46:b4:b4:69:81:
d2:3b:c0:2d:bd:38:2e:4c:ad:d5:2c:2a:46:a4:8b:
40:13:22:59:c3:0f:10:13:6c:ec:01:87:33:59:2e:
1d:8e:53:42:50:6c:8f:47:ca:e2:8e:7b:4d:d0:c8:
02:c5:b9:f4:bd:3f:68:8a:3a:20:f3:33:53:26:e5:
44:bc:b4:7e:8d:6b:6b:67:6c:0b:66:f9:5c:9f:58:
a2:76:b4:f6:63:26:b5:df:05:28:f1:ea:45:ec:b1:
bb:99:08:ac:2d:63:10:cd:31:16:9b:9d:e1:a1:c2:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FB:7F:45:AF:D3:38:1B:46:5C:98:10:8C:68:E4:68:F7:62:5B:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i_t_Ra_TOBtGXJgQjGjkaPdiW7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:52:fd:ff:04:bb:36:40:eb:d8:a5:04:77:26:f1:43:d9:e8:
57:91:dc:24:9b:e1:d0:6a:d8:a5:66:28:4e:df:64:f4:21:fb:
b6:8d:b5:35:50:8a:27:11:11:21:eb:d8:9b:d9:35:3e:24:f2:
33:9e:42:5f:b7:e0:bd:e5:f8:bc:f1:00:59:d7:00:b3:11:c3:
a4:75:07:09:fa:2a:6e:1d:f9:8c:4a:52:ed:2e:ea:91:d9:56:
21:e5:f2:69:f2:a5:73:d7:3d:c0:fa:3b:d1:83:88:d8:2e:12:
41:3d:55:56:70:33:86:32:9f:7f:fd:4a:05:d9:b8:19:13:c0:
88:c6:64:00:85:51:2a:b9:49:0f:61:38:be:e9:4a:69:62:a8:
63:70:08:cc:25:05:35:35:5d:3f:6d:31:2f:60:ce:ec:47:20:
a9:ae:0d:ff:1d:47:60:5d:a9:4b:66:91:64:a4:0d:36:03:0e:
b7:fc:a5:f3:e9:4a:4c:f9:1f:7a:22:62:6c:15:c8:bd:d8:61:
0e:b4:6a:b1:46:78:13:f6:78:43:1e:51:94:cc:84:c2:6a:36:
3c:37:77:8c:21:a6:d4:8f:cf:b6:a8:9b:d3:df:2c:f1:28:8a:
32:95:6e:10:c1:b9:62:f6:e8:22:3a:d9:13:b1:11:b5:06:9d:
4d:27:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:51 2026 by rpki-client