Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/jZC8msUz53dPXEsxHaEAo1Owp3k.roa
File: jZC8msUz53dPXEsxHaEAo1Owp3k.roa (raw, json)
Hash identifier: /j4LUoxGggX4HV9p5zoknPASZ3y1fQpFvmTvqncRrXU=
Subject key identifier: 8D:90:BC:9A:C5:33:E7:77:4F:5C:4B:31:1D:A1:00:A3:53:B0:A7:79
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019E1ACFF568796ADF602C6D8AE29DDBFD00
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/jZC8msUz53dPXEsxHaEAo1Owp3k.roa
Signing time: Tue 12 May 2026 06:11:36 +0000
ROA not before: Tue 12 May 2026 06:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 89.23.80.0/24 maxlen: 24
89.23.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:cf:f5:68:79:6a:df:60:2c:6d:8a:e2:9d:db:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 12 06:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d90bc9ac533e7774f5c4b311da100a353b0a779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:3f:39:74:4b:01:7b:b5:40:f7:ff:c1:3f:
fb:86:0d:82:6a:1e:68:8e:86:8c:75:99:9e:59:2e:
f0:14:58:ea:cc:51:08:ae:7c:d1:7a:50:05:ac:1a:
28:23:b2:74:a9:0f:08:81:60:ae:20:74:2a:2c:48:
9d:d0:db:2c:51:08:69:c5:0e:e5:39:07:ff:e1:26:
5f:54:e0:b2:d0:5d:3c:e3:9c:6d:9d:dd:89:21:fc:
33:33:26:d5:8e:29:7e:1b:a9:8d:80:d8:eb:d5:f5:
63:58:59:c7:ec:d0:17:27:4f:af:03:49:78:12:ca:
6d:f2:6e:75:dc:60:40:86:29:b9:ba:af:4a:fa:fd:
b6:ae:2d:8d:77:f8:0a:1b:e4:aa:ec:54:70:bb:a1:
37:3e:fe:82:f3:83:4a:d5:72:66:78:5a:f7:a3:9b:
07:28:7c:c7:82:7a:11:1c:e3:c3:cb:12:df:36:82:
19:ae:bb:21:52:61:b5:8e:2f:a6:7b:ec:60:c7:b8:
05:f6:8c:19:f4:ee:ff:46:95:2c:bd:51:09:f8:3a:
ab:b6:42:74:e3:b6:c2:a9:a3:96:a2:30:61:4c:f6:
de:a6:17:ac:f2:31:ae:5e:4c:c7:17:4f:00:4e:9e:
ab:33:5f:02:04:e3:4a:17:71:16:a9:5b:88:83:12:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:BC:9A:C5:33:E7:77:4F:5C:4B:31:1D:A1:00:A3:53:B0:A7:79
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/jZC8msUz53dPXEsxHaEAo1Owp3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fe:f2:99:c5:e1:c3:9a:85:a2:d3:e3:1e:2b:75:65:da:02:
18:a4:02:b9:f9:c5:b0:57:20:5f:55:96:b8:fc:ba:70:95:9c:
0c:78:11:de:b8:d6:21:dc:09:e9:22:af:44:86:a6:df:56:aa:
aa:bd:59:00:12:85:bf:68:7b:70:11:74:e3:0b:92:6d:98:03:
66:b1:f1:e8:de:44:f6:87:bb:7a:47:c9:c7:22:1a:a7:11:e1:
54:80:b7:46:12:55:d2:2a:35:47:d0:09:21:f8:d9:6e:1c:99:
b8:cb:18:6f:b7:22:35:8c:f6:34:e6:5a:9f:91:9c:28:ef:21:
f6:ab:a8:f6:cc:55:b9:b5:7a:53:07:8a:29:3a:46:4c:ce:39:
89:50:6c:ef:7f:48:b5:fb:4a:14:30:66:1d:3b:00:06:4e:08:
9b:e5:f1:c6:ad:67:d8:ee:b1:4d:f8:0e:77:63:00:13:89:0f:
ed:c3:b4:8a:ad:b3:0e:77:1d:f4:6f:fe:9d:79:a7:48:d1:9f:
30:8a:53:50:6d:0b:1b:92:50:01:bf:83:0a:e5:fd:6a:25:0e:
4b:7d:e2:a7:27:c2:78:64:fe:32:cf:16:87:9c:f7:84:b7:0b:
ff:1d:5f:57:9e:2a:d9:f1:2c:6e:7e:b5:b1:bf:23:c5:4a:03:
d6:34:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:28 2026 by rpki-client