Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa
File: n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa (raw, json)
Hash identifier: 9Q8TNAnTm2hfdhie9oH3Jcj9om1Q+4fMUBjWp/97vOg=
Subject key identifier: 9F:A0:9B:EC:02:48:8C:77:54:C0:A8:D5:66:F8:B0:66:70:D8:22:13
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019F65FADA74A0882DF32E2467373FBE81B1
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa
Signing time: Wed 15 Jul 2026 13:32:46 +0000
ROA not before: Wed 15 Jul 2026 13:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 89.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:fa:da:74:a0:88:2d:f3:2e:24:67:37:3f:be:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jul 15 13:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fa09bec02488c7754c0a8d566f8b06670d82213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:1a:78:b5:8d:43:81:db:8d:a0:b3:90:80:
cf:8c:fc:02:8b:d1:b2:28:e4:13:e0:6b:9d:69:57:
2c:ae:0d:ca:fd:92:23:f6:6a:f9:ba:b6:3f:bb:ff:
2a:ef:4b:a2:cc:97:9a:ee:ff:12:1e:2d:fe:7b:8f:
1f:cb:05:6b:1e:61:76:34:13:e3:5a:13:ae:fc:c8:
f6:1d:0a:b9:fa:71:71:0c:dd:c7:62:a2:3a:a2:fe:
28:90:a4:2a:b6:c4:2f:79:ea:e6:95:4b:a5:2a:04:
1d:fb:11:35:7d:45:bf:63:61:c2:80:13:95:4c:dd:
ed:a7:9e:83:bb:ac:f5:1d:b0:f5:06:22:04:c0:56:
4b:30:8c:a9:66:a2:0f:f4:04:7d:f5:b1:c8:16:59:
c0:e6:db:33:02:b9:b7:5b:87:3a:f6:ea:e2:23:d2:
bb:5d:cb:86:ab:2b:67:e2:10:b3:af:84:0b:3d:e1:
7b:fe:e1:2e:cb:83:8a:41:7e:9b:99:24:20:47:19:
ac:d6:33:b6:3e:69:62:36:bc:3d:12:95:bb:23:15:
a5:c3:02:b6:13:08:61:d6:b3:44:33:e2:62:e2:e8:
2e:b1:5f:62:cc:c2:79:50:71:46:e0:34:41:ef:59:
90:8d:8d:08:aa:fd:31:de:a7:50:03:08:0f:90:15:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:9B:EC:02:48:8C:77:54:C0:A8:D5:66:F8:B0:66:70:D8:22:13
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fe:21:42:ed:5e:72:27:eb:ed:b3:7d:69:71:83:45:b1:4a:
e9:cf:0e:d1:dd:a6:e2:97:aa:c1:61:54:46:63:c9:4c:f9:31:
91:e3:ad:95:59:5f:31:0f:21:51:8c:88:b9:8a:19:a1:4f:84:
8e:f3:d6:7a:22:d3:1a:62:bb:ee:c9:a2:f2:6a:ab:4c:90:c7:
08:5c:2a:6c:64:72:09:32:ca:76:78:8d:38:ed:d0:70:0c:dd:
61:d9:8c:ee:c8:22:ee:b2:dd:43:60:14:b3:f7:f8:8b:14:66:
ed:9d:f0:e7:99:c4:63:4a:a9:26:c4:94:94:62:5b:b7:83:ab:
4e:83:7b:71:28:22:1c:c5:54:fb:c0:63:ad:2b:32:b5:e7:0f:
0c:16:59:59:b7:12:3e:90:86:e1:74:76:b1:be:d0:dd:16:8d:
e3:81:f6:03:34:5d:a0:5a:7d:39:3d:c5:83:3d:ef:cf:ef:fc:
93:57:e1:1f:27:64:80:22:0a:25:35:55:65:1b:b8:a9:e0:01:
48:bb:14:5f:a0:9d:e6:7a:9b:33:96:5d:03:15:3d:d4:b4:98:
9b:63:55:76:60:0a:f2:46:35:bf:52:4f:30:4f:68:2a:e6:ce:
b6:f1:64:78:01:1d:e4:5c:e4:ff:65:45:b4:2c:01:15:aa:7f:
0d:2a:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:54 2026 by rpki-client