Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/5pKnnMxvmXQkgUx4iD030qaafz8.roa
File: 5pKnnMxvmXQkgUx4iD030qaafz8.roa (raw, json)
Hash identifier: IozSxfWn+UQdKpc/wlrGsOFheXQl2L332SmtWMgRUXY=
Subject key identifier: E6:92:A7:9C:CC:6F:99:74:24:81:4C:78:88:3D:37:D2:A6:9A:7F:3F
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019CE7651EC7CCE92C64C4F657E6AFB9B601
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/5pKnnMxvmXQkgUx4iD030qaafz8.roa
Signing time: Fri 13 Mar 2026 13:31:29 +0000
ROA not before: Fri 13 Mar 2026 13:31:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 89.187.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:65:1e:c7:cc:e9:2c:64:c4:f6:57:e6:af:b9:b6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Mar 13 13:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e692a79ccc6f997424814c78883d37d2a69a7f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:46:08:7f:1a:b5:13:fa:64:a1:97:49:52:
c3:14:50:d7:7e:64:1e:79:fc:df:91:88:2c:13:9a:
b8:c5:cf:c0:25:33:5f:a1:5d:de:73:0e:52:ba:a7:
0d:96:10:a9:e2:9f:44:2b:8b:ba:8d:e1:a1:63:18:
76:04:84:52:db:c0:1a:23:21:17:69:52:26:aa:5a:
4a:75:2b:c6:b9:40:b5:b2:40:cc:7d:eb:45:46:70:
4f:32:97:d0:6c:f0:9c:a8:83:73:cf:82:ae:78:12:
83:64:8e:e6:01:80:84:7e:60:2c:a4:18:8e:21:40:
8f:27:08:b8:0f:33:76:04:ef:4d:8b:cd:c1:50:02:
85:33:32:13:6f:6f:81:e0:3e:5e:8f:66:7e:22:be:
67:ab:8b:07:80:b7:be:90:77:5b:60:59:15:37:5f:
66:62:ae:ec:5d:67:14:12:45:3a:2b:ad:61:7b:91:
48:ac:f2:80:a1:26:63:a1:8a:1c:b9:22:4d:7c:24:
42:b1:99:d7:3c:45:dc:d7:a6:fc:20:79:4f:1a:a3:
70:9d:4d:49:df:19:15:65:71:4c:d7:fe:46:ee:a7:
28:50:34:f9:38:cb:6a:0f:11:47:f4:0d:ba:b3:fd:
4c:69:02:3b:79:d3:69:9c:38:8d:fe:4a:de:a1:00:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:A7:9C:CC:6F:99:74:24:81:4C:78:88:3D:37:D2:A6:9A:7F:3F
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/5pKnnMxvmXQkgUx4iD030qaafz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d9:82:d6:28:19:16:01:9f:b2:42:b6:78:1f:2c:de:29:1b:
b1:b3:e6:71:4b:75:4f:e4:d9:78:bb:f8:8a:9b:84:c7:f1:e9:
80:a2:8c:af:a1:68:81:7b:c2:09:1d:fc:41:22:2b:50:64:a7:
e9:a9:cb:19:3b:3b:68:46:e9:c7:2c:df:0b:48:13:07:16:cb:
37:a1:ee:05:39:a2:99:6d:a2:a5:5c:c3:85:40:e2:7b:2d:93:
71:53:4b:83:28:27:fc:aa:c3:57:ec:97:cf:52:7a:83:b5:c7:
91:fa:23:d6:03:f8:2f:03:66:c5:04:78:97:a8:c5:c0:60:17:
b9:cf:12:da:7d:79:5d:ef:81:4f:24:b3:9d:85:bb:f4:ed:b1:
98:23:f0:3a:ae:40:7b:70:7b:d8:9f:66:db:27:cc:21:ee:72:
0e:f8:a5:d2:cf:b1:bb:db:91:8e:96:1d:08:8d:40:5c:88:0c:
32:1d:c4:c0:87:68:7f:f3:b4:99:90:f8:5e:d1:19:71:92:96:
ea:45:3e:04:8e:33:03:49:37:4e:08:a9:a8:4e:b8:e6:b9:e2:
1c:1b:47:bf:48:96:f6:13:b1:50:2e:5a:fe:cb:dc:39:9d:17:
d5:3b:16:99:70:71:46:c1:43:7d:27:4a:ed:6d:04:0e:0b:f3:
67:ce:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:46 2026 by rpki-client