Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa
File: KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa (raw, json)
Hash identifier: efAG/Ph6arJLhBGmrTyKEVKSnEt8hq/UMiJWsX3vnIE=
Subject key identifier: 29:D0:8C:2E:18:60:DA:BF:1E:30:12:B0:AB:C0:EC:D9:B9:AA:5F:B6
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D080922AA0E4C08E5738D6E27C0917930
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa
Signing time: Thu 19 Mar 2026 21:38:29 +0000
ROA not before: Thu 19 Mar 2026 21:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 89.126.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:09:22:aa:0e:4c:08:e5:73:8d:6e:27:c0:91:79:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 19 21:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29d08c2e1860dabf1e3012b0abc0ecd9b9aa5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:82:90:b9:17:67:22:ed:a0:d3:79:29:54:
81:9e:eb:a9:1a:26:72:85:f9:13:ed:9e:19:55:d6:
96:32:15:4d:95:40:ff:08:9b:89:d5:b4:8b:03:03:
a1:ac:87:13:5d:23:f6:8e:ec:91:02:56:59:ea:46:
9a:5e:d1:97:0b:44:32:3c:73:75:6f:a6:62:80:82:
bc:5c:17:de:59:2b:3d:e7:b7:b1:23:75:e1:64:ed:
25:63:84:2d:fc:a3:24:47:bc:3c:cf:40:af:8a:92:
fc:16:e6:bf:f9:c5:a9:f8:39:7a:b7:39:3a:99:48:
b9:40:86:a4:38:81:38:9c:e9:11:82:a3:30:62:d8:
39:3f:57:fa:19:15:87:7a:d2:ce:db:eb:44:68:53:
a4:a3:0b:0b:3d:16:da:0d:2e:8e:d9:7c:a6:7b:6d:
ae:86:22:2d:35:bb:83:11:bf:44:87:e1:35:3f:6e:
f3:ff:17:29:16:88:d4:c7:03:ec:41:db:81:75:af:
9c:65:d5:b4:b6:90:f9:de:b9:1a:79:97:40:d7:66:
f6:1d:a9:07:dd:dc:9c:3a:b1:1d:41:e8:73:1f:e1:
a1:29:85:ce:27:4b:08:92:1e:ff:44:86:c5:f7:79:
88:81:d4:57:15:a2:b3:5f:3b:2a:1e:39:45:e7:4a:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:8C:2E:18:60:DA:BF:1E:30:12:B0:AB:C0:EC:D9:B9:AA:5F:B6
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.225.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e9:f5:c4:14:49:e6:c6:10:40:19:59:32:56:8f:96:d6:8c:
1b:df:dd:43:96:88:84:a7:70:a2:bc:b3:37:d2:57:aa:a5:3d:
d4:c8:21:72:4a:01:0c:aa:c8:96:0e:ce:a0:59:86:c6:63:50:
04:29:fd:d6:b1:01:7e:97:c2:27:ac:f6:1a:4f:db:fb:4f:ad:
aa:4d:1a:0c:c2:56:9c:db:bf:50:59:45:44:53:6e:56:45:59:
34:6a:58:8b:7f:73:d5:3c:9d:5d:de:4b:d8:a9:de:4b:e8:48:
ce:8b:28:3a:20:1a:8b:b4:b0:33:69:b4:3c:30:32:80:22:5c:
cc:7d:54:fc:8b:56:cb:4e:a7:3f:84:c9:94:a2:64:34:99:bf:
c0:58:e5:a4:b9:f1:ae:29:7d:b0:45:c8:8f:5f:8d:7b:24:52:
02:18:df:e2:41:4a:e5:61:34:51:45:bb:55:4a:1a:66:f5:ca:
1a:de:c3:b2:de:f3:a4:bf:f4:96:b8:3c:b8:10:ad:5b:7a:b7:
73:a3:79:e0:11:56:d4:79:0b:bf:0a:6c:b8:21:18:da:ca:d4:
f8:f4:90:85:e5:14:c7:c2:a4:ea:2e:54:bc:2d:02:ea:ea:96:
6b:54:31:06:66:fe:45:d0:c8:0f:f5:c3:6f:ed:a7:77:7f:f5:
94:55:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:39 2026 by rpki-client