Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa
File: 1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa (raw, json)
Hash identifier: VNrmRdyCEMk5sVsUYPMlRs6jibn3G+c48bYYZcPJruY=
Subject key identifier: F8:5C:17:7B:B3:D9:66:7F:29:6D:F3:68:03:97:F7:2D:AC:40:F5:9E
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019E1CD45035DE24CD4B2190AF685EA91827
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa
Signing time: Tue 12 May 2026 15:35:36 +0000
ROA not before: Tue 12 May 2026 15:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.42.0/24 maxlen: 24
89.38.45.0/24 maxlen: 24
185.48.192.0/22 maxlen: 24
185.48.192.0/24 maxlen: 24
185.48.193.0/24 maxlen: 24
2a01:98e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:d4:50:35:de:24:cd:4b:21:90:af:68:5e:a9:18:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: May 12 15:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f85c177bb3d9667f296df3680397f72dac40f59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:9c:f5:f9:f2:5f:84:48:bd:14:39:12:f8:
62:86:04:38:e6:77:25:dd:35:dd:7a:e4:d0:38:12:
88:a8:bd:4f:26:e4:23:d7:67:0f:0c:28:52:f8:63:
32:ed:16:7d:6a:34:41:e1:69:e8:5c:21:12:3d:63:
7f:a9:e3:d4:ed:9a:fe:3a:c5:21:d1:e0:86:22:07:
0d:7b:e0:2d:6a:f9:aa:24:f4:25:5a:8e:fe:55:73:
b7:98:22:64:4d:d7:e0:1a:aa:54:0f:56:b1:61:b8:
a3:50:91:de:74:27:38:e9:cc:40:e1:d5:a8:5d:29:
ed:91:43:67:bf:bf:df:b8:64:20:f4:2d:3e:28:6e:
35:dd:13:22:ce:b7:2a:06:ac:9d:ea:76:b3:37:86:
1e:b5:44:8f:29:4e:b4:e8:e9:be:15:28:c3:f8:dc:
b0:d6:4c:51:c3:c7:97:ad:f8:39:b8:47:69:e5:d2:
3d:fd:90:41:66:26:d3:08:ad:16:11:a6:07:de:3d:
fc:9e:60:f1:b6:5f:4a:b8:8b:1c:bb:97:7e:24:b5:
96:6b:a6:a9:5b:64:b4:d3:ab:da:4e:da:bd:74:7e:
bc:57:29:2c:e6:ce:b6:27:1a:4c:c7:e2:c2:d4:78:
39:50:7d:86:9b:7a:f1:f6:7a:cc:70:dc:b4:0b:51:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:17:7B:B3:D9:66:7F:29:6D:F3:68:03:97:F7:2D:AC:40:F5:9E
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.42.0/24
89.38.45.0/24
185.48.192.0/22
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:00:93:0d:67:a2:2a:d4:5d:36:b5:f8:e4:1a:a6:f3:dc:bf:
01:6d:fb:49:3a:77:bf:b8:35:fd:48:5a:c5:03:d5:51:f9:b0:
9f:12:6d:25:20:df:28:7e:b2:3d:8e:89:c4:21:12:44:f9:3f:
9d:02:c2:3a:f3:de:12:79:4f:93:3a:95:c0:e3:20:6e:70:2e:
ea:a9:d1:41:51:74:52:5a:e4:bf:62:e8:2d:7b:b6:b4:31:69:
34:d4:6f:f5:00:9b:cf:d1:8e:8a:51:5d:71:b3:17:6e:11:96:
0e:0a:7c:8b:d1:f1:9d:da:17:04:bf:cf:8a:a9:14:da:63:09:
85:b8:12:3d:a1:8d:0f:7e:b3:61:38:40:63:35:a8:37:5e:75:
9f:1a:54:ae:33:ee:8c:bd:ae:c2:e1:df:99:3e:53:ba:b5:3e:
42:65:ef:f0:e3:8b:16:dc:e3:c0:74:e7:ee:aa:dc:48:06:b0:
9b:41:d6:eb:ff:3e:1e:48:60:39:1a:e3:01:51:dc:98:dd:89:
c5:fb:1d:77:ad:e3:5b:18:39:96:4b:11:95:9d:7a:ae:2f:b5:
0f:37:06:ee:28:26:12:40:7e:af:b3:d1:0e:96:21:f8:f6:48:
a4:e1:83:dc:d0:37:58:81:99:2c:e9:3d:c9:40:9e:55:23:da:
42:a5:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:37 2026 by rpki-client