Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/jN8ZAfdOuYWVwWAecHJR5uKrw7M.roa
File: jN8ZAfdOuYWVwWAecHJR5uKrw7M.roa (raw, json)
Hash identifier: Mr6ZGAtpxuIzNGe6lwSrPCX48xV5UibwdOv3mSZGkRo=
Subject key identifier: 8C:DF:19:01:F7:4E:B9:85:95:C1:60:1E:70:72:51:E6:E2:AB:C3:B3
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019D1F5D43594A2858325FEF0F4D754FF714
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/jN8ZAfdOuYWVwWAecHJR5uKrw7M.roa
Signing time: Tue 24 Mar 2026 10:21:39 +0000
ROA not before: Tue 24 Mar 2026 10:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.172.36.0/24 maxlen: 24
89.23.82.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:5d:43:59:4a:28:58:32:5f:ef:0f:4d:75:4f:f7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Mar 24 10:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cdf1901f74eb98595c1601e707251e6e2abc3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:91:42:59:e7:10:85:e4:fc:0b:7d:00:b5:
49:11:14:9f:c6:f9:a5:90:32:2a:c5:bf:1e:ea:b0:
ce:82:99:3b:e6:02:3f:bc:e0:70:6e:6d:9e:b9:4c:
29:e4:f4:e6:14:9d:34:cf:59:df:f5:e2:3d:24:a2:
a3:fa:b4:7e:d8:3b:d2:db:6f:82:ac:7d:d5:cf:1e:
44:23:70:0e:95:80:f3:ec:ab:21:a8:e8:76:45:8b:
d7:5a:48:1c:9a:ac:65:fa:b6:08:98:b8:25:25:29:
52:90:ef:60:1b:0e:fa:4d:77:4e:15:48:cf:5a:64:
c1:5f:76:94:c0:62:0a:79:09:7c:0f:17:63:59:b7:
42:1b:40:2d:45:32:ca:49:20:9b:06:95:00:97:7e:
a0:cb:64:41:51:8d:e0:10:fb:84:88:43:51:c2:a4:
1b:23:c2:4e:a3:1d:1a:35:c1:83:fc:c4:a7:4f:0a:
0a:ba:7f:4b:31:6b:f0:89:70:bf:89:50:85:f6:be:
ad:11:db:42:41:40:ad:84:22:df:eb:6a:81:6e:75:
5e:b3:ec:78:8c:f2:5f:38:20:87:07:76:85:01:6e:
54:bd:76:9e:60:2a:73:2a:a1:cf:9e:cf:dc:64:b6:
81:a8:76:90:6f:5b:1a:fd:39:dd:d3:ba:0c:25:46:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:19:01:F7:4E:B9:85:95:C1:60:1E:70:72:51:E6:E2:AB:C3:B3
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/jN8ZAfdOuYWVwWAecHJR5uKrw7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.36.0/24
89.23.82.0/24
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:84:0d:e1:58:ff:ec:18:29:1a:07:83:08:14:a0:4c:1d:bf:
14:1d:26:a0:f6:35:cc:f0:8d:8a:88:f6:de:af:80:33:00:a7:
13:3d:38:39:fb:04:1a:72:e1:2f:f0:e8:eb:50:b3:62:f7:60:
6b:59:2c:82:28:07:93:6e:58:91:f1:4f:7d:0c:24:69:80:ac:
50:b3:c8:46:29:c1:02:ac:bb:07:b9:ab:ad:a9:56:c6:4a:b9:
a3:61:fa:2f:40:1f:0e:27:24:98:1f:06:22:11:12:2b:b0:f3:
56:40:36:06:2c:fe:8d:8a:12:1d:b1:e7:b1:c7:d2:e2:2d:f2:
33:03:bb:fb:c2:de:d7:65:ff:a1:cf:fb:f8:f5:fc:07:96:70:
21:3c:53:a8:d8:50:16:88:2f:91:32:05:0e:a6:67:16:94:8a:
ef:f6:ee:da:a9:cb:d3:46:f4:ef:56:40:f1:5b:e5:d6:8f:04:
15:f2:1a:25:4f:c2:ef:f0:a0:f7:79:89:6f:41:eb:4f:57:d1:
a0:5a:d8:a9:6d:e6:b5:be:da:0b:d2:93:e1:fd:ce:49:65:cb:
c9:92:a2:4d:05:4e:2e:cc:bf:39:ad:73:0a:79:3f:10:d8:95:
f5:c6:24:e2:79:e0:05:2e:d7:1a:ec:23:3c:e8:85:0e:52:4a:
5f:d9:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:19 2026 by rpki-client