Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/4dV_FEknf2673xUudEJgMK9SaSM.roa
File: 4dV_FEknf2673xUudEJgMK9SaSM.roa (raw, json)
Hash identifier: EFpUpjcuql5pAjeM5M3YVguPsMbWl4b3xSNvyRfGxlc=
Subject key identifier: E1:D5:7F:14:49:27:7F:6E:BB:DF:15:2E:74:42:60:30:AF:52:69:23
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 019F17AA4CAB92CABB94C5ACFE8AEE29CBFF
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/4dV_FEknf2673xUudEJgMK9SaSM.roa
Signing time: Tue 30 Jun 2026 08:34:24 +0000
ROA not before: Tue 30 Jun 2026 08:34:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62044
IP address blocks: 89.18.88.0/24 maxlen: 24
89.18.91.0/24 maxlen: 24
2a01:940::/48 maxlen: 48
2a01:940:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:aa:4c:ab:92:ca:bb:94:c5:ac:fe:8a:ee:29:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Jun 30 08:34:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1d57f1449277f6ebbdf152e74426030af526923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:a9:96:9c:df:9e:fd:27:23:a0:c9:ac:86:
4a:2e:ec:b2:cf:ea:f0:02:30:f0:70:7f:73:0c:ef:
de:fe:69:5b:65:7a:9c:18:b2:14:d2:d3:2d:2b:c2:
c4:18:9b:22:c6:7a:97:12:48:25:df:6c:51:10:c2:
59:7e:8d:4c:69:f4:22:06:ea:8b:3a:74:0a:b7:c6:
f6:ba:06:1b:ec:ab:ce:8c:03:34:05:98:6a:9f:9c:
f4:77:d4:ef:d7:d2:49:93:47:ea:a3:88:8f:52:45:
5a:06:bb:19:df:24:92:3b:d9:4c:9a:76:f7:c4:22:
c9:b2:2d:cf:ce:d3:56:d7:7f:51:2c:47:5d:b9:5b:
dc:47:12:fe:e3:6a:0f:23:ed:a6:52:c6:4e:72:90:
54:66:38:c5:db:d3:87:0a:fa:7b:77:1d:e8:67:4f:
9a:54:62:27:a0:3f:43:a4:66:52:2e:3c:50:04:06:
e7:e7:dc:19:2b:4b:00:b8:ec:2e:4f:99:bf:3f:33:
ef:75:6d:e4:4e:d4:2c:6b:8e:c6:5e:81:64:5a:c2:
e5:b8:cf:b2:5a:f5:1c:fc:2b:4f:87:06:e9:22:4f:
7d:0f:14:ab:62:e2:eb:ac:db:a5:89:cd:15:24:e1:
99:62:bd:81:1e:e4:4c:8c:8b:9d:fc:ff:c4:69:27:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:7F:14:49:27:7F:6E:BB:DF:15:2E:74:42:60:30:AF:52:69:23
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/4dV_FEknf2673xUudEJgMK9SaSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.88.0/24
89.18.91.0/24
IPv6:
2a01:940::/48
2a01:940:3::/48
Signature Algorithm: sha256WithRSAEncryption
34:fb:c0:21:49:a8:00:c7:80:88:71:ec:11:82:fd:c0:c0:13:
10:52:ea:c7:64:1c:26:6a:9c:e7:39:fe:e2:99:04:de:9f:cc:
54:04:88:5f:94:9e:e8:18:7f:2b:f2:37:e6:6e:fe:58:64:7a:
20:23:64:66:45:9e:c0:ff:89:86:48:d9:ba:37:33:51:77:69:
8a:21:08:f3:08:64:75:be:4a:15:15:0d:4b:95:a5:97:6a:ee:
68:8c:62:6f:cf:b0:c5:1e:b0:ba:2d:13:6f:7c:b9:a9:09:96:
88:e4:56:9e:68:82:36:b6:9c:92:00:8a:3a:54:c9:bd:83:62:
f6:8b:7f:f4:f9:c5:32:6f:e4:60:15:55:75:5b:93:c4:0f:c2:
c3:d2:51:e4:f9:1a:a3:e0:c9:b7:92:69:24:78:a3:14:7b:20:
d6:80:0d:15:c7:e4:e8:d1:b3:c3:50:6c:1c:7f:10:fb:84:f1:
2d:35:40:57:6e:4b:25:3e:23:92:77:34:00:9e:7e:2f:60:e4:
cb:1e:97:ba:bf:12:42:b6:16:e1:cb:9f:4c:79:65:cd:7d:87:
e4:b9:29:19:ef:1c:5f:7b:f7:e4:0d:a3:a8:5c:05:3b:f3:5b:
a4:ea:bd:71:9a:76:96:83:90:b6:f3:c4:c8:7a:5e:99:9e:b5:
f9:59:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:31 2026 by rpki-client