Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/r1SS8LFEpQE44s-P04lm5N9jdrI.roa
File: r1SS8LFEpQE44s-P04lm5N9jdrI.roa (raw, json)
Hash identifier: dmBENm5sE8LG/ao/9tbCsC72GYijSNdnoOECHESPOG4=
Subject key identifier: AF:54:92:F0:B1:44:A5:01:38:E2:CF:8F:D3:89:66:E4:DF:63:76:B2
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019C09813BEF2B2CB9296E76F94768146916
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/r1SS8LFEpQE44s-P04lm5N9jdrI.roa
Signing time: Thu 29 Jan 2026 11:26:30 +0000
ROA not before: Thu 29 Jan 2026 11:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215858
IP address blocks: 89.37.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:81:3b:ef:2b:2c:b9:29:6e:76:f9:47:68:14:69:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jan 29 11:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af5492f0b144a50138e2cf8fd38966e4df6376b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:81:dd:46:a6:a4:54:82:22:44:72:e3:ae:
c0:de:60:6a:9e:07:fb:5f:a6:2a:9a:d3:d5:27:ee:
7f:35:44:4f:ad:cd:6f:43:38:0a:67:67:83:ab:28:
90:a5:19:fd:b9:96:20:ac:81:3b:cb:b4:40:58:66:
da:bc:be:60:ef:88:23:71:a0:76:aa:57:da:9b:b2:
ec:04:27:54:3b:b5:e3:25:72:0d:21:c4:8b:14:aa:
de:97:2d:cd:4a:94:32:1b:13:5b:c7:50:82:3a:c0:
42:de:d6:a1:44:f9:bc:20:e3:02:e1:b9:97:c0:40:
77:59:7e:6d:a9:ec:fa:95:90:2c:3d:f8:de:24:8a:
f8:45:44:6c:0a:ae:9f:80:13:81:e0:32:8b:38:32:
dc:c1:24:76:20:c7:95:35:29:c2:46:a5:09:92:dd:
75:3f:81:18:db:6f:10:23:ed:57:5a:7f:35:b0:4e:
43:33:5d:0b:22:c3:aa:19:b3:b3:85:5e:71:73:41:
2a:1b:9d:a4:0b:bd:51:b0:28:48:c3:39:73:15:b1:
1d:5b:32:eb:3d:68:9a:ad:2d:7a:cf:0e:21:64:d0:
a3:77:fe:c4:dd:75:b5:21:df:9a:85:b7:db:cd:e3:
5c:c6:fe:f9:62:b8:dc:c5:bb:05:69:eb:f6:44:13:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:92:F0:B1:44:A5:01:38:E2:CF:8F:D3:89:66:E4:DF:63:76:B2
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/r1SS8LFEpQE44s-P04lm5N9jdrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.16.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0a:a0:b1:f3:a6:d2:f4:c2:97:bb:ab:ec:2d:d3:4b:76:3b:
43:cd:74:de:d1:d4:e4:14:fa:6d:e2:a5:77:ad:88:3d:a3:f6:
d1:3a:b8:8e:fc:3d:2e:04:7e:ff:ce:93:57:8c:f9:d8:13:80:
b4:fd:fb:f1:36:db:dd:59:68:f8:b2:2a:2d:58:9d:4c:90:d2:
3e:1e:8e:9c:2c:49:5a:12:fb:6a:5b:2a:0f:48:e7:4d:48:45:
a9:b6:20:a8:00:f1:de:e7:d5:d1:f7:c2:a2:ae:76:9f:33:a6:
4f:04:91:79:9d:02:40:a1:04:16:24:72:48:20:b8:4f:ef:fb:
58:5d:f1:ab:76:72:ef:36:e8:cb:ca:19:07:20:16:33:37:e0:
d4:ba:73:62:f7:d9:1f:91:a1:80:5b:d5:d7:e4:15:f8:74:4e:
5b:95:9c:b3:23:fa:44:7c:80:c1:92:a1:27:d2:73:22:7e:d5:
4a:df:64:58:8a:c7:c7:d6:46:84:1a:bd:e1:97:21:b3:8f:64:
8f:dc:67:77:c0:66:6a:00:fc:c7:69:89:7c:eb:2e:3d:31:9f:
ad:f3:d5:ce:7d:07:3a:b4:ba:0f:7e:60:1d:05:ea:9f:96:b7:
06:d9:a7:26:93:d8:79:7a:35:96:3d:09:f7:73:5b:1e:86:3b:
87:d1:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:36 2026 by rpki-client