Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/afnf8Ava__hqVeg36xd7DPl8yBY.roa
File: afnf8Ava__hqVeg36xd7DPl8yBY.roa (raw, json)
Hash identifier: k7VETiKCJH6acHicPlCfwHaLKAprOT+9VybotdEnACE=
Subject key identifier: 69:F9:DF:F0:0B:DA:FF:F8:6A:55:E8:37:EB:17:7B:0C:F9:7C:C8:16
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019E0EAE7D0973FE46482986EE11C09DC90A
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/afnf8Ava__hqVeg36xd7DPl8yBY.roa
Signing time: Sat 09 May 2026 21:39:36 +0000
ROA not before: Sat 09 May 2026 21:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.91.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0e:ae:7d:09:73:fe:46:48:29:86:ee:11:c0:9d:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 9 21:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f9dff00bdafff86a55e837eb177b0cf97cc816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:aa:a8:1f:58:4c:19:4b:73:2d:06:41:b3:
ff:b3:22:d0:14:78:e8:95:da:f2:1d:79:a4:91:8c:
3a:dc:4c:0a:ba:47:b1:4b:90:69:a6:46:c8:fc:5d:
1c:4f:b9:6c:8c:87:f3:10:f1:cf:ff:d0:fb:9b:4b:
61:ac:e2:ee:dc:b2:b3:cf:05:30:ce:66:d0:ee:2f:
55:46:72:57:39:f6:eb:11:5f:16:ca:9b:1f:ac:09:
ac:f9:ad:6a:c2:93:3c:62:c5:c7:9a:a4:aa:6b:44:
ae:04:a3:9d:96:0b:e7:26:2b:66:97:5c:65:b2:34:
81:5a:43:c6:e5:17:b0:50:bd:89:be:3d:c4:02:ac:
bd:a1:ff:fc:fa:37:da:5b:57:2a:2c:9b:24:23:12:
a2:5c:d3:3d:91:15:8e:20:c6:2d:01:dc:2a:6e:ca:
f3:3d:18:bc:87:30:e2:12:0d:23:ee:5c:db:7f:52:
81:d4:48:6b:d8:22:83:57:44:1f:10:58:ca:0e:33:
38:7a:17:4e:db:d1:22:3a:92:1d:4e:da:ee:eb:60:
ed:1a:c3:26:aa:06:ca:0d:de:bd:e9:6a:70:c8:28:
8f:6a:31:0e:e4:3e:c1:06:f1:24:fa:89:e5:65:55:
47:bd:95:bf:38:c8:3d:b2:16:a3:96:8e:92:e6:13:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:DF:F0:0B:DA:FF:F8:6A:55:E8:37:EB:17:7B:0C:F9:7C:C8:16
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/afnf8Ava__hqVeg36xd7DPl8yBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
89.23.93.0/24
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
59:dc:86:aa:7b:9a:47:d7:b5:0a:05:e0:85:55:04:ca:02:29:
ad:6c:2e:cd:1a:c1:53:0b:37:e9:34:da:02:6d:dc:58:f1:c2:
02:c2:5b:57:53:e6:19:f5:2e:b5:03:08:b9:39:92:fb:ff:4e:
0c:72:5d:00:2b:1e:a2:17:45:fe:cb:e7:b5:5a:c6:f7:c2:47:
4e:05:2a:1f:cd:44:0f:6b:9c:eb:10:97:b9:c4:f2:a3:49:5f:
38:88:2e:07:f2:a1:c3:b7:b4:8c:fd:b3:96:e1:27:cc:b8:4c:
6c:82:7f:b2:f8:27:a3:e2:fa:f6:96:8a:40:96:77:cc:55:8c:
05:c3:4a:f7:36:8e:28:3b:f3:61:8d:f9:5b:85:5a:16:a2:54:
fe:03:cf:ea:e9:28:ce:c6:ff:c6:10:21:a5:a9:a9:8f:ea:7b:
d8:6f:e2:f7:24:cc:ba:eb:0c:8e:31:02:94:e8:11:3c:b0:c5:
8a:93:7b:90:54:53:37:0c:b3:a1:a6:a3:af:f7:48:90:0a:46:
62:57:83:22:db:3f:89:10:74:a0:bb:43:d3:12:e5:76:a3:7b:
99:3f:a4:9d:37:16:00:21:78:f6:e8:63:32:1e:56:7e:4a:d1:
27:f3:25:e1:fa:73:f0:ae:09:da:65:73:d9:c9:05:30:fb:5a:
1f:07:cf:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ4Orn0Jc/5GSCmG7hHAnckKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjYwNTA5MjEzOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWY5ZGZmMDBiZGFmZmY4NmE1NWU4MzdlYjE3N2IwY2Y5N2NjODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ueqqB9YTBlLcy0GQbP/syLQFHjo
ldryHXmkkYw63EwKukexS5BppkbI/F0cT7lsjIfzEPHP/9D7m0thrOLu3LKzzwUw
zmbQ7i9VRnJXOfbrEV8WypsfrAms+a1qwpM8YsXHmqSqa0SuBKOdlgvnJitml1xl
sjSBWkPG5RewUL2Jvj3EAqy9of/8+jfaW1cqLJskIxKiXNM9kRWOIMYtAdwqbsrz
PRi8hzDiEg0j7lzbf1KB1Ehr2CKDV0QfEFjKDjM4ehdO29EiOpIdTtru62DtGsMm
qgbKDd696WpwyCiPajEO5D7BBvEk+onlZVVHvZW/OMg9shajlo6S5hOCmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGn53/AL2v/4alXoN+sXewz5fMgWMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvYWZuZjhBdmFfX2hxVmVnMzZ4ZDdEUGw4eUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRdbAwQA
WRddAwQAuZ0uMA0GCSqGSIb3DQEBCwUAA4IBAQBZ3Iaqe5pH17UKBeCFVQTKAimt
bC7NGsFTCzfpNNoCbdxY8cICwltXU+YZ9S61Awi5OZL7/04Mcl0AKx6iF0X+y+e1
Wsb3wkdOBSofzUQPa5zrEJe5xPKjSV84iC4H8qHDt7SM/bOW4SfMuExsgn+y+Cej
4vr2lopAlnfMVYwFw0r3No4oO/NhjflbhVoWolT+A8/q6SjOxv/GECGlqamP6nvY
b+L3JMy66wyOMQKU6BE8sMWKk3uQVFM3DLOhpqOv90iQCkZiV4Mi2z+JEHSgu0PT
EuV2o3uZP6SdNxYAIXj26GMyHlZ+StEn8yXh+nPwrgnaZXPZyQUw+1ofB8/W
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:02 2026 by rpki-client