Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/SInoj_kAF0mrq8Lx-aSX2jFRjGI.roa
File: SInoj_kAF0mrq8Lx-aSX2jFRjGI.roa (raw, json)
Hash identifier: NniP8oqJmkUH9aBaqIjt/fH/D9eARWMTWLlD4efIopM=
Subject key identifier: 48:89:E8:8F:F9:00:17:49:AB:AB:C2:F1:F9:A4:97:DA:31:51:8C:62
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01A1C1B456B692B1B019EA4A1CEBB2384F88
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/SInoj_kAF0mrq8Lx-aSX2jFRjGI.roa
Signing time: Mon 09 Nov 2026 19:06:23 +0000
ROA not before: Mon 09 Nov 2026 19:06:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4913
IP address blocks: 89.254.18.0/24 maxlen: 24
89.254.19.0/24 maxlen: 24
89.254.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:b4:56:b6:92:b1:b0:19:ea:4a:1c:eb:b2:38:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Nov 9 19:06:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4889e88ff9001749ababc2f1f9a497da31518c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:10:6d:52:ad:0c:1d:57:34:74:35:b9:0b:
3c:6c:1a:95:74:ce:05:5b:d0:9a:59:bc:8f:77:e1:
31:f7:d3:33:1e:70:14:2c:49:db:87:ed:e4:9e:81:
de:10:49:8c:e2:b0:27:f0:f9:bd:6c:cf:71:c2:cb:
a6:5c:a2:12:45:62:a7:3f:1e:c8:eb:34:75:3a:f9:
4b:5a:b7:f1:c5:92:4c:67:a3:f6:94:94:c2:39:92:
97:dd:14:1c:37:97:3c:72:9c:cc:47:6c:e6:f0:df:
76:b0:52:79:22:1f:89:63:d5:50:82:24:6e:1c:fa:
4f:f3:aa:47:56:23:3e:cb:3c:89:3a:1c:99:c1:6a:
0e:4e:e2:63:86:2f:b5:ee:83:d2:b2:45:52:a1:bc:
21:87:27:f8:6c:eb:c8:9e:25:d2:32:b3:2a:e0:46:
2c:51:0a:3e:00:2c:ba:16:f0:8d:6d:3a:e2:2a:5b:
d8:23:db:3e:20:0a:19:64:2c:0c:bb:dd:32:e3:89:
9f:83:17:50:bc:f0:0c:ac:88:ca:b7:f9:c3:a0:58:
39:5b:19:0e:54:9c:0b:4a:37:6b:a9:b2:6c:f4:30:
99:70:01:fe:f7:ff:82:02:f7:0a:a4:ba:ea:c3:ec:
31:e4:86:68:43:c4:89:8e:da:bc:e4:d7:aa:d0:a2:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:E8:8F:F9:00:17:49:AB:AB:C2:F1:F9:A4:97:DA:31:51:8C:62
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/SInoj_kAF0mrq8Lx-aSX2jFRjGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.254.18.0-89.254.20.255
Signature Algorithm: sha256WithRSAEncryption
3a:c2:10:90:e8:10:f3:c0:89:94:ae:61:ac:dd:3d:f8:32:d4:
c6:c3:0a:d1:f7:4b:42:ab:6c:30:33:0f:56:9f:2f:ae:83:dc:
9e:ef:d7:e8:84:4a:d1:6a:f5:99:ce:3a:44:79:e6:03:20:52:
74:0e:61:7b:1a:33:0f:51:f9:7a:5b:e8:1d:20:14:eb:38:90:
84:0b:75:f8:49:ac:40:01:8b:a5:18:88:85:26:a7:88:6a:90:
5a:fd:e4:d7:05:dd:fd:f2:34:bd:90:5c:0c:d0:c0:86:c1:a2:
8c:1a:6e:bf:69:c2:b9:de:82:5c:4b:1d:cd:b6:74:22:8c:53:
dd:9e:35:50:8d:e2:f3:ad:cc:3f:d0:e5:41:08:c1:de:52:88:
f3:45:cb:e6:06:4c:83:da:a0:55:5e:34:9b:ee:ab:2d:8c:6f:
ed:c6:34:a8:03:29:cf:bf:09:ce:15:92:8c:60:ca:61:19:dd:
2e:51:1b:b1:9a:81:84:97:94:4f:5b:16:3b:42:66:ee:de:ee:
d9:ae:44:72:3f:75:d0:91:f2:ec:68:bb:43:3c:38:49:b6:c3:
c3:85:df:eb:bc:71:21:c7:5e:10:da:6a:a1:bc:fe:14:79:70:
a5:fa:40:38:80:52:f3:36:f2:5e:e5:cd:65:25:f9:23:c4:06:
ac:4c:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:44 2026 by rpki-client