Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iedjWJKYJiH_XCXNuwy4g6r7gnU.roa
File: iedjWJKYJiH_XCXNuwy4g6r7gnU.roa (raw, json)
Hash identifier: g+CxHjSQaAwbP/kbbDRjJDWJJLU5xh1o7dt85tsLyM4=
Subject key identifier: 89:E7:63:58:92:98:26:21:FF:5C:25:CD:BB:0C:B8:83:AA:FB:82:75
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DE4550419126E2949DC23A8FEF32DFD22
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iedjWJKYJiH_XCXNuwy4g6r7gnU.roa
Signing time: Fri 01 May 2026 16:17:49 +0000
ROA not before: Fri 01 May 2026 16:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47277
IP address blocks: 89.106.78.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:55:04:19:12:6e:29:49:dc:23:a8:fe:f3:2d:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 1 16:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89e7635892982621ff5c25cdbb0cb883aafb8275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:96:19:5e:ec:ea:b1:7a:85:6e:c3:69:11:
de:01:f9:5e:c5:76:85:62:16:e3:9b:9f:55:9b:24:
6a:b6:62:1c:19:ce:e9:5e:ff:87:80:3a:d2:d4:24:
f9:cd:22:bc:cc:99:38:68:3c:80:66:cf:22:58:74:
e4:c7:b7:bd:26:c4:c4:93:52:28:d7:25:2e:cf:fb:
6e:8f:e7:0a:24:7f:6d:03:fd:35:95:d9:be:ce:5c:
be:5c:d9:e6:47:0a:53:43:be:6e:97:52:c7:d5:9d:
e6:5b:b5:03:51:b1:86:3c:88:3f:1b:cc:cc:48:f3:
54:16:68:53:da:e4:81:52:8c:8e:4e:20:b3:e3:8e:
61:0b:b1:2f:55:ec:53:67:75:9c:42:77:9c:55:4c:
29:7b:36:62:75:dc:c7:ae:b2:a1:23:25:69:5b:6f:
ce:59:d0:78:25:d4:0a:41:96:85:12:d7:2a:65:f0:
66:f2:75:cc:9b:93:49:65:9f:5a:5c:1b:04:a0:39:
e9:25:cd:77:7f:20:9b:4b:49:ed:db:b5:b3:08:46:
0e:ce:77:8c:dd:77:68:15:f8:70:8f:12:fe:cb:d4:
0b:0c:80:d6:ea:7c:7c:15:41:03:d6:b8:fb:b2:1a:
a4:ce:50:63:d5:a2:dd:c1:90:24:97:23:f9:50:27:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:63:58:92:98:26:21:FF:5C:25:CD:BB:0C:B8:83:AA:FB:82:75
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iedjWJKYJiH_XCXNuwy4g6r7gnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.78.0/24
94.249.199.0/24
Signature Algorithm: sha256WithRSAEncryption
60:65:31:3a:69:e2:34:f0:d0:31:8a:3f:aa:f2:4b:fa:df:5f:
6d:73:92:ad:3b:eb:a2:ac:73:7e:09:a2:bd:98:87:95:31:11:
78:41:06:36:12:fa:ba:9c:ca:27:6a:0d:c3:90:9b:4f:e1:82:
7f:99:64:98:eb:f7:71:10:78:0d:71:f7:05:30:c7:76:d8:ef:
d9:5b:71:cb:a2:d3:e9:ec:d5:75:f2:03:02:e3:57:8c:9a:91:
fe:7e:cb:2b:6a:7e:0b:2a:b5:33:c2:8a:64:57:76:29:35:bf:
5c:89:91:c5:9e:25:39:25:71:9a:87:c9:26:c0:85:cf:62:2a:
9e:b3:a6:ad:56:47:35:a1:b9:30:c4:81:15:ec:60:60:8a:c5:
3b:a3:d1:aa:32:84:55:7c:01:0b:61:3c:df:fe:21:2b:ea:19:
c5:65:e3:69:8d:36:a2:c0:a6:00:05:d7:a9:21:02:72:72:52:
1b:2f:0f:b6:96:4f:46:f9:3d:6f:21:72:d0:fd:4d:49:55:c6:
7e:11:65:55:18:90:04:90:1d:a9:df:23:ae:b8:e7:37:ae:e1:
3e:25:8c:c0:fd:59:e3:d5:43:64:02:d6:64:20:36:d8:8c:70:
de:a7:e7:40:40:35:c6:10:0c:ae:8d:27:2b:4c:a2:b2:07:be:
26:6a:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:39 2026 by rpki-client