Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/58r89F5OQ6mbVRMbQGKflxp8u_s.roa
File: 58r89F5OQ6mbVRMbQGKflxp8u_s.roa (raw, json)
Hash identifier: Rf2lg7OdEjSozh26E3arTlvKWp7ptBow1hivVFwMCIs=
Subject key identifier: E7:CA:FC:F4:5E:4E:43:A9:9B:55:13:1B:40:62:9F:97:1A:7C:BB:FB
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 019C5690C18F3BC266530115B39332AA4360
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/58r89F5OQ6mbVRMbQGKflxp8u_s.roa
Signing time: Fri 13 Feb 2026 10:34:13 +0000
ROA not before: Fri 13 Feb 2026 10:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212345
IP address blocks: 93.179.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:90:c1:8f:3b:c2:66:53:01:15:b3:93:32:aa:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Feb 13 10:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7cafcf45e4e43a99b55131b40629f971a7cbbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:7c:fb:83:1d:b5:6f:3f:de:0a:33:bb:89:
3a:47:48:f8:97:aa:c6:60:9b:63:3f:e3:15:35:c5:
ca:0a:d1:b1:32:8e:43:75:15:a8:09:7e:dd:c9:4d:
a6:2e:2d:9e:a7:ea:31:38:74:7c:3d:7a:ff:b2:02:
3c:02:53:d2:e9:24:ed:c0:16:1a:3b:1f:25:e4:50:
bd:80:16:b8:2c:2a:db:48:e0:73:55:98:9e:91:34:
f3:1a:cc:74:2e:83:af:f5:be:ad:32:9e:eb:48:dd:
3c:79:ed:bd:78:9e:c8:95:b1:e7:58:a3:97:a2:63:
27:68:8f:a9:e1:19:3c:44:84:b9:b7:78:14:40:09:
bd:38:a4:07:ef:f1:11:18:7f:e0:f5:34:c4:84:e8:
68:dc:ac:05:94:26:4f:a7:70:fe:3e:c7:62:d8:ac:
66:73:4d:8f:76:90:1a:23:5b:e1:56:6b:b9:34:31:
e3:19:3a:69:99:42:c8:f9:c6:5e:02:4a:54:5a:0b:
c0:d0:94:0e:64:c1:c2:ff:b8:c9:cf:f7:f0:7e:87:
c4:6c:78:f0:46:aa:d2:49:10:2f:e2:b9:ae:2f:e1:
5e:16:04:4b:49:aa:db:7c:fa:3b:47:33:74:3a:eb:
9a:11:0f:ae:b7:6f:96:b6:ad:6c:d6:be:88:62:bc:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:FC:F4:5E:4E:43:A9:9B:55:13:1B:40:62:9F:97:1A:7C:BB:FB
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/58r89F5OQ6mbVRMbQGKflxp8u_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6d:28:ee:d8:ac:a8:d0:27:ba:0d:e5:d1:63:21:59:2e:41:
c7:a4:94:c2:3d:85:aa:62:fe:8f:3b:79:a6:54:18:64:68:b1:
ad:ec:b4:c7:6d:df:c4:64:3f:48:96:c3:38:28:88:fe:9b:6a:
f3:d2:88:72:ea:8e:32:bd:b9:be:ff:8e:e7:64:b5:9f:6e:06:
d9:82:81:62:39:19:db:cc:be:98:e9:86:d5:08:ba:50:c5:1b:
d1:b7:00:0a:1d:7a:f8:11:d7:5c:78:db:02:a0:75:1f:0f:0b:
df:34:ba:d3:0d:6c:13:b4:34:da:3c:1a:ff:96:1f:d7:25:bc:
05:24:75:e9:c2:18:13:d8:07:a7:2c:7f:f9:36:e4:b6:e9:1b:
05:dd:7c:7f:76:0a:b8:e2:ec:52:3a:2d:62:6e:15:39:1d:01:
d7:b3:ad:d3:d9:92:81:9f:82:f5:38:f1:4f:ed:c8:93:1d:04:
97:97:17:0c:c6:f8:2b:bf:d8:f4:b9:b7:26:f2:61:32:d6:30:
0b:1d:28:1b:8b:ee:93:7d:b6:93:c6:82:e9:b8:23:42:de:da:
01:be:ff:d7:ba:02:a5:45:a4:f8:54:99:d1:77:59:51:4d:1f:
9a:e7:eb:f8:bd:46:9b:69:d9:18:86:01:75:d7:cf:23:b5:8b:
67:c8:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:31 2026 by rpki-client