Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5w4BTgbHe3HswkOd-sON81ahsbQ.roa
File: 5w4BTgbHe3HswkOd-sON81ahsbQ.roa (raw, json)
Hash identifier: IQs3EBL+LSWp2t7dJdeH654ib+Wk0Jmr9bYD+QU9opI=
Subject key identifier: E7:0E:01:4E:06:C7:7B:71:EC:C2:43:9D:FA:C3:8D:F3:56:A1:B1:B4
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F6EC18F7B7C3EACD5C4671DFACDEF7EB7
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5w4BTgbHe3HswkOd-sON81ahsbQ.roa
Signing time: Fri 17 Jul 2026 06:26:46 +0000
ROA not before: Fri 17 Jul 2026 06:26:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211826
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:c1:8f:7b:7c:3e:ac:d5:c4:67:1d:fa:cd:ef:7e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 17 06:26:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e70e014e06c77b71ecc2439dfac38df356a1b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:af:eb:2a:5a:20:cd:6c:a7:69:49:0a:db:
33:c1:60:75:48:46:1d:de:20:98:10:18:fd:27:eb:
5e:cf:49:e2:4b:fe:5f:d2:ab:02:c8:bc:dd:37:2b:
9d:e9:f6:18:76:34:15:29:87:cd:95:c6:07:fc:5c:
f6:45:2f:dc:b4:8f:ab:4d:c4:80:78:3e:31:6f:24:
c9:f6:46:38:fb:ce:b9:69:d7:2a:ca:e7:a5:cf:e7:
a1:22:05:67:aa:74:67:e4:24:1e:10:de:99:b1:11:
ed:af:28:18:15:aa:7e:f0:63:a4:21:ef:38:2d:a7:
f2:67:a2:fb:72:51:5e:23:67:06:5b:79:8e:74:43:
45:3f:bc:3e:34:3e:ea:52:34:61:67:ec:59:22:da:
dc:f2:b0:48:31:d3:2a:d2:ea:f3:28:16:b2:cd:88:
1f:9a:cd:86:ee:c4:41:0e:b3:9c:f8:bb:a2:76:64:
3b:42:3f:c3:c1:e3:9f:b4:99:1f:19:f1:42:2f:64:
e4:82:75:2d:78:34:ff:a3:d0:51:11:af:bc:58:41:
e3:01:b7:17:87:bf:ed:47:fe:c7:70:10:bd:4b:82:
f5:02:e8:b7:81:b9:eb:68:5d:ab:1c:5d:e3:f3:57:
d1:ce:f9:7c:c4:5a:69:f9:80:dd:14:4c:83:e0:ee:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:01:4E:06:C7:7B:71:EC:C2:43:9D:FA:C3:8D:F3:56:A1:B1:B4
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5w4BTgbHe3HswkOd-sON81ahsbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:12:c2:cc:cf:9d:9d:65:67:73:b8:72:eb:6c:3f:bf:fe:
6b:d1:4f:fb:e5:f8:ba:5f:ac:1e:3b:d5:25:05:0f:6d:7c:d4:
98:3d:a9:7a:27:18:25:ec:43:22:ed:0c:75:f6:b8:ab:46:fb:
11:68:d4:9f:53:65:d5:08:c4:fc:6f:b9:d7:a6:77:f3:88:e9:
19:3e:f6:e4:17:cf:85:4b:b0:21:be:36:5f:84:34:8b:5a:60:
84:f8:ab:2d:71:3a:41:cd:08:c9:bb:07:77:0d:09:c3:de:f5:
40:3f:38:67:5d:59:23:ef:09:77:f8:ad:f6:09:a7:10:7b:9e:
61:02:8a:71:c7:43:e8:87:fd:2a:8f:ee:7c:04:c8:23:03:a1:
2a:7a:66:4b:2a:94:a8:22:e0:74:26:8b:06:2d:e7:5e:7a:2d:
58:95:c4:7f:28:2d:66:67:0c:45:0f:72:9b:62:33:63:56:6a:
05:82:f0:cd:c5:e6:0e:1f:24:17:0c:35:4a:46:c1:08:fc:8b:
cc:2d:16:3c:11:5b:85:05:18:18:4b:f6:f9:2e:d3:48:e2:07:
c2:15:ce:e4:da:13:a0:14:62:65:91:0c:67:0f:76:c6:89:f7:
a3:ad:a2:a5:ba:af:ef:9b:f8:ae:10:79:f8:77:5c:41:f6:47:
55:ac:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:02:20 2026 by rpki-client