Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/AECHdQkqzg3VccPRfvdj6dOEcf0.roa
File: AECHdQkqzg3VccPRfvdj6dOEcf0.roa (raw, json)
Hash identifier: gvtx0Jiys/YkGy3DMTtr3aUtbYmqqIES9vFl0maNE1Q=
Subject key identifier: 00:40:87:75:09:2A:CE:0D:D5:71:C3:D1:7E:F7:63:E9:D3:84:71:FD
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019E1B9876C387644D1876CB504448CC8172
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/AECHdQkqzg3VccPRfvdj6dOEcf0.roa
Signing time: Tue 12 May 2026 09:50:36 +0000
ROA not before: Tue 12 May 2026 09:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58238
IP address blocks: 89.188.166.0/24 maxlen: 24
89.188.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:98:76:c3:87:64:4d:18:76:cb:50:44:48:cc:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: May 12 09:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00408775092ace0dd571c3d17ef763e9d38471fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:61:14:3a:cd:9f:4e:a4:b1:d9:48:da:18:
89:a4:71:14:01:af:4d:0e:ec:49:85:b6:6c:39:e7:
70:ac:fc:ee:df:5e:d0:a5:ea:3e:e2:f4:49:4e:51:
f6:24:d0:4d:ca:8d:b6:78:b4:ea:cd:00:85:4d:48:
11:72:d7:6b:2e:fe:ca:0d:62:bc:1c:21:fa:24:4e:
e0:bf:37:16:9c:ae:7f:5f:d6:7f:02:5e:b5:ef:f9:
56:1a:d7:f3:1f:d6:92:4d:b9:55:84:2a:8d:05:1e:
24:54:dd:c2:ce:19:a4:a3:57:9e:66:d7:d0:d9:27:
bf:11:76:35:13:d5:93:50:fb:ec:f3:b3:c7:f8:99:
14:8e:7f:6a:a4:fe:15:cd:e7:52:d8:25:48:b4:7b:
07:33:08:31:f9:30:14:cf:87:8e:e6:a0:69:a0:3f:
30:db:48:2f:66:93:29:7d:d5:85:28:ab:02:77:e0:
9b:b5:0a:09:6c:f4:85:bc:56:5a:20:76:c9:6c:4c:
4d:c3:2d:ee:71:6b:c6:eb:c5:79:d7:59:c8:74:6d:
f0:5f:32:94:cb:8d:99:59:f6:c6:d8:78:03:d6:96:
aa:e8:9c:c9:3e:60:76:9d:b4:da:86:0c:f9:8e:48:
a7:b4:5a:b3:80:0b:fc:a1:76:01:62:62:4c:6e:99:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:87:75:09:2A:CE:0D:D5:71:C3:D1:7E:F7:63:E9:D3:84:71:FD
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/AECHdQkqzg3VccPRfvdj6dOEcf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.166.0/23
Signature Algorithm: sha256WithRSAEncryption
08:11:a9:93:4f:93:a6:5a:d4:bf:67:bf:bf:55:87:5d:c2:f0:
9b:14:b4:b7:13:bd:7c:67:83:60:6c:99:ca:f2:ad:1c:13:d8:
57:c3:1e:4b:80:7b:fd:84:d2:83:c6:4b:ea:49:23:00:a0:fd:
18:27:7c:89:16:38:f7:41:77:b8:33:b6:7b:94:54:c4:f3:b1:
83:74:e4:9f:2b:ed:39:eb:a9:d8:c5:97:d0:6b:09:23:3b:34:
3b:65:2a:b0:00:60:4f:4d:d0:e5:29:f1:20:37:28:93:b8:aa:
85:55:16:5c:03:43:cb:05:ed:19:1e:6b:be:35:aa:c1:10:b6:
0c:ff:09:de:53:8e:20:b9:7c:99:cd:26:ed:2e:a3:9e:c8:5f:
ab:95:de:4a:02:92:15:f2:e5:da:a4:81:24:a5:ac:d3:45:25:
b3:5a:12:75:82:cc:38:71:00:a9:82:01:ab:14:88:6c:4f:7c:
12:c8:88:59:51:ab:25:3a:c7:c1:75:90:4c:d1:2e:47:34:ce:
fc:d5:74:ae:5d:58:8a:ae:36:e8:83:57:5f:e0:52:85:86:2e:
73:2a:f3:17:a5:72:2e:59:ac:14:99:13:27:76:02:ce:52:27:
cc:49:c6:78:5d:be:1f:a4:1f:b9:ea:aa:9b:6e:18:42:e4:65:
4d:73:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:56:04 2026 by rpki-client