Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/kTndO1uQy7jTC2UUS0e4Vg68hWk.roa
File: kTndO1uQy7jTC2UUS0e4Vg68hWk.roa (raw, json)
Hash identifier: 1ZcePxWIXlbaKL/tkS8yzgf8Jq1Wb3G1gK0A0lwQCpI=
Subject key identifier: 91:39:DD:3B:5B:90:CB:B8:D3:0B:65:14:4B:47:B8:56:0E:BC:85:69
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F7E199883347B247111A28FE5831125DC
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/kTndO1uQy7jTC2UUS0e4Vg68hWk.roa
Signing time: Mon 20 Jul 2026 05:57:14 +0000
ROA not before: Mon 20 Jul 2026 05:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.82.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:19:98:83:34:7b:24:71:11:a2:8f:e5:83:11:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 20 05:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9139dd3b5b90cbb8d30b65144b47b8560ebc8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:8e:e9:8f:cd:b6:da:f0:70:70:5b:cc:d9:
e9:92:a1:e7:8c:98:6e:5b:94:d7:ee:56:22:a9:ea:
7c:0d:9a:57:4c:f6:78:3c:51:46:65:a3:44:dd:65:
b6:4a:2b:05:67:54:85:a4:12:cc:65:32:7c:ca:83:
90:2b:a7:a5:8f:60:e6:a5:e2:16:28:25:da:50:52:
23:5e:98:be:4a:9a:e7:79:d2:2a:4a:b8:16:b0:56:
32:17:25:b7:79:5f:9f:46:ae:91:e7:ca:7a:3e:4d:
d2:8a:fd:6e:34:51:0c:9f:67:91:80:68:04:fc:aa:
ce:0b:5b:d7:81:18:0b:1b:ab:0f:9d:2e:19:d3:b8:
fe:4d:9b:b6:90:d6:62:c2:d4:dc:b6:5e:40:8d:17:
31:ed:08:4b:ce:cf:6b:e5:8a:8d:81:1a:fa:e3:a5:
47:ee:fa:5b:45:30:e0:0d:96:84:81:73:57:83:f7:
1d:2d:97:9e:eb:ae:27:59:b4:49:10:52:88:10:0e:
ea:72:12:80:4e:40:e7:ba:bf:88:52:42:46:1a:36:
04:ce:e0:4e:3e:fb:a7:17:03:d5:e0:23:5f:cf:eb:
6e:15:51:f1:68:b5:75:b8:1e:c9:47:bb:e4:3c:ea:
33:7c:d8:91:5f:fa:43:1d:d6:fa:16:63:3b:a0:f2:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:DD:3B:5B:90:CB:B8:D3:0B:65:14:4B:47:B8:56:0E:BC:85:69
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/kTndO1uQy7jTC2UUS0e4Vg68hWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
89.23.93.0/24
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1d:75:28:6b:72:9a:bb:6a:db:7b:ee:c0:cb:c8:02:5b:65:
42:12:05:08:54:79:67:3d:70:ee:eb:8e:9c:27:90:15:0b:d6:
99:b4:78:48:2e:54:99:47:33:bf:cf:2a:4b:56:b9:28:28:d1:
ae:a9:a7:83:fa:cc:2e:f0:5c:1d:20:45:5e:07:c7:9c:0b:86:
bd:b5:0d:f7:21:3e:c0:2e:df:6b:e6:50:5c:cd:73:35:17:8e:
cb:81:0d:74:d2:a0:49:84:40:44:60:8d:e1:e6:b3:8e:b6:1b:
d5:b6:f9:4a:e0:15:cd:c7:04:c8:75:1b:cc:fd:ca:6d:f2:e2:
fa:a3:67:e6:81:3a:6b:92:ac:b8:8b:d1:f3:43:ad:a3:26:b7:
1c:de:72:3a:51:d9:77:67:3b:63:e6:3f:e7:35:b1:51:04:c1:
48:94:ab:d9:1f:c4:84:61:05:3f:1c:84:87:6b:98:7b:fa:6a:
36:2c:1e:08:a4:6a:87:83:f1:ad:89:0d:38:c2:7b:a8:92:91:
b0:72:8b:ea:4f:d4:cc:5c:87:8f:57:28:42:06:89:0a:5d:a3:
02:33:ca:73:c1:c9:33:1e:e7:dc:5e:b6:d7:e6:42:68:ec:fb:
f3:9a:c4:b3:3d:98:9c:a1:e5:97:0b:77:c2:16:ca:91:b8:1e:
e0:10:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:23 2026 by rpki-client