Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/j3miBQqNH9MvtZNlx1-gjZqrqlE.roa
File: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (raw, json)
Hash identifier: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=
Subject key identifier: 8F:79:A2:05:0A:8D:1F:D3:2F:B5:93:65:C7:5F:A0:8D:9A:AB:AA:51
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019F1287EB64B377FB4C61735EEE5FF02628
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/j3miBQqNH9MvtZNlx1-gjZqrqlE.roa
Signing time: Mon 29 Jun 2026 08:38:45 +0000
ROA not before: Mon 29 Jun 2026 08:38:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50149
IP address blocks: 89.104.107.0/24 maxlen: 24
89.104.119.0/24 maxlen: 24
89.104.125.0/24 maxlen: 24
2a00:ab01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:87:eb:64:b3:77:fb:4c:61:73:5e:ee:5f:f0:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jun 29 08:38:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f79a2050a8d1fd32fb59365c75fa08d9aabaa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:29:d3:83:ff:f0:e6:b2:7b:67:48:8f:4c:
39:57:78:6d:6b:1f:d7:db:5d:82:cb:86:80:93:67:
f3:5b:f7:d5:f6:07:96:90:3f:cf:c2:55:6f:b6:ea:
2d:2a:b0:1c:1f:fd:42:20:3b:ed:dc:49:50:6c:63:
55:1d:5d:40:1e:5b:ce:3f:d4:46:69:b3:72:95:c7:
c8:16:01:e7:05:5e:f9:68:b6:f3:b0:b0:02:82:72:
fc:20:22:18:f9:b4:33:1b:cb:01:d0:9d:82:0f:a0:
5f:34:b5:d4:d7:4d:8c:87:ec:38:49:cb:b9:e6:47:
71:0c:01:86:05:0e:fa:bc:54:62:ee:cb:6f:98:fd:
fe:73:e2:fd:bd:7e:16:17:42:77:6a:0c:96:0f:3a:
42:29:85:e1:3d:cc:37:de:e8:aa:0f:a7:dc:23:3b:
e8:ce:8d:bd:5b:94:f5:0a:c2:c9:d6:f6:90:2b:5e:
31:ba:35:07:b3:2b:62:37:c7:c2:80:ac:5b:77:4f:
c0:99:6c:97:a0:18:3a:cf:d7:be:ac:e4:fb:dd:82:
da:31:40:3b:af:12:c9:53:78:ee:5e:95:ca:46:31:
4b:75:30:96:f0:31:87:eb:fb:73:70:6b:4f:2b:5c:
86:ef:c5:f3:1b:1b:7b:8c:3a:5b:80:dd:02:3d:a0:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:79:A2:05:0A:8D:1F:D3:2F:B5:93:65:C7:5F:A0:8D:9A:AB:AA:51
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/j3miBQqNH9MvtZNlx1-gjZqrqlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.107.0/24
89.104.119.0/24
89.104.125.0/24
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
50:cb:b0:78:35:f9:37:48:04:5c:32:0d:37:ee:ab:c7:b4:8a:
cc:70:cb:5f:c5:d3:21:0c:76:34:8c:9a:2f:17:b8:76:7d:3c:
7e:d6:88:04:55:19:f2:56:6c:8e:ad:37:3c:f5:4d:e8:e7:d2:
15:3f:34:47:6b:1d:67:db:74:93:39:bd:10:77:72:f3:57:fd:
3a:d2:58:6e:14:2f:92:7f:63:7e:42:1a:6f:88:92:ec:22:e3:
c6:c4:10:3c:7e:38:06:5a:d6:7e:b4:cc:89:c4:40:13:15:fc:
6a:e4:05:f7:10:ff:99:b3:16:f6:a3:0d:f5:31:48:82:18:89:
16:38:14:2c:44:68:6b:86:ae:1f:c0:fe:20:9d:4e:7b:ed:90:
b6:e7:ec:54:ae:6c:01:eb:27:47:19:f6:8c:a5:fd:e1:4d:63:
e0:fc:b3:00:e7:c5:9f:06:83:ef:c2:6a:7b:b4:67:16:f6:02:
3a:4b:bc:9d:f8:31:0f:6a:f6:43:5e:0c:41:5c:de:b6:60:97:
53:32:f5:d5:d0:9f:77:d4:da:1e:2c:74:37:91:57:5b:09:fb:
da:83:56:e0:d3:b4:93:f6:ab:07:55:fa:f6:3c:0d:a7:2f:89:
e7:26:e0:b6:54:00:6f:08:b9:d5:4b:d6:7f:34:e0:95:0d:50:
80:48:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:43 2026 by rpki-client