Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/5pUb4usxoUemY0cKiAWilNYbvzU.roa
File: 5pUb4usxoUemY0cKiAWilNYbvzU.roa (raw, json)
Hash identifier: FJ+d9SQFx/yVW7NXXyFNRSHBza0C2OJNmGoQVEd++aY=
Subject key identifier: E6:95:1B:E2:EB:31:A1:47:A6:63:47:0A:88:05:A2:94:D6:1B:BF:35
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 019F17AA4BD7EF42AC75EC644F78A78DDD0E
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/5pUb4usxoUemY0cKiAWilNYbvzU.roa
Signing time: Tue 30 Jun 2026 08:34:24 +0000
ROA not before: Tue 30 Jun 2026 08:34:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 89.18.89.0/24 maxlen: 24
89.18.90.0/24 maxlen: 24
2a01:940:1::/48 maxlen: 48
2a01:940:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:aa:4b:d7:ef:42:ac:75:ec:64:4f:78:a7:8d:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Jun 30 08:34:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6951be2eb31a147a663470a8805a294d61bbf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:cc:1d:57:49:64:a5:d2:0e:a3:e2:c0:48:
21:73:c0:35:53:27:a5:3e:da:1a:37:05:72:93:ea:
c1:3d:04:6c:b8:18:01:65:8d:df:e8:34:13:9d:1a:
03:98:2a:14:dc:8c:0c:1c:8d:22:d4:a3:08:4d:20:
04:47:2d:ac:3b:b9:2c:af:41:f5:a1:14:96:3d:27:
e4:14:9f:aa:e9:96:84:0c:99:e1:80:be:b9:88:82:
ac:7d:90:4f:da:cf:cd:c2:a3:69:3e:89:42:b9:7e:
c9:b8:17:44:f9:57:e1:b6:c5:eb:3f:c8:23:ed:08:
08:d7:a5:52:ac:1d:2b:c8:55:e7:30:c0:fd:a9:31:
59:1a:b9:6f:c2:c8:34:d6:7b:9b:43:8c:99:f7:ce:
dd:68:06:dd:1c:aa:0e:cc:be:95:78:da:d9:29:1b:
bf:5a:08:39:65:c3:59:4a:90:c6:5c:b1:bc:dd:e1:
59:c5:9a:bd:84:02:e6:0e:f6:12:db:fb:b5:6f:d5:
bd:31:fc:e5:19:b7:e5:74:3c:55:29:35:96:4e:3e:
b0:f7:a7:a6:f5:f7:5d:fb:e9:d1:25:a2:a5:dd:3b:
a8:a0:3c:d4:64:2f:8f:78:e2:e1:04:93:71:96:69:
6b:ca:b6:18:89:b1:03:c7:92:12:fb:5c:b1:91:04:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:95:1B:E2:EB:31:A1:47:A6:63:47:0A:88:05:A2:94:D6:1B:BF:35
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/5pUb4usxoUemY0cKiAWilNYbvzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.89.0-89.18.90.255
IPv6:
2a01:940:1::-2a01:940:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:e3:41:25:cf:1c:c2:56:d7:31:66:66:5f:df:b5:6f:4d:c2:
3c:d1:f1:8a:54:d5:fe:ea:c8:37:65:f1:77:31:b9:86:da:19:
28:79:45:e7:8f:5a:f1:1b:19:ed:4e:95:72:87:98:c7:1f:32:
e6:eb:67:d0:73:4a:05:b2:1a:00:69:98:88:8b:a7:b1:d2:4f:
87:05:72:71:ee:be:5a:19:21:9d:fd:b4:90:e8:c3:02:a5:e5:
dd:b9:7e:75:35:f4:0c:5b:47:37:2c:1a:8e:f9:4e:00:06:c9:
a8:db:08:1f:56:0d:15:f0:26:de:8d:d0:e2:17:81:f9:37:2b:
65:9d:7e:f8:37:57:7b:eb:f8:70:66:3c:f0:1d:7c:13:56:00:
d5:81:06:0f:89:2c:e2:66:00:d0:05:5c:43:87:10:bf:84:30:
5c:c9:99:0e:27:c2:da:3f:79:60:27:95:38:4b:3e:6c:e4:6f:
a5:f2:d2:94:2b:94:6b:b4:4e:71:d9:c9:7c:2e:0e:02:1b:d3:
c3:11:00:e4:d2:3d:bd:71:02:cd:82:0b:5e:3e:18:d8:7d:08:
91:ec:6b:13:45:2d:70:b8:3a:1c:cf:11:6f:90:6d:ea:0d:71:
22:d9:5d:43:5d:ff:24:6e:db:e6:bc:14:97:f3:87:17:49:9f:
04:86:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:01 2026 by rpki-client