Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Vy5RjwE6qmQCSkDPS_BlFyLCMuE.roa
File: Vy5RjwE6qmQCSkDPS_BlFyLCMuE.roa (raw, json)
Hash identifier: TbLSGIkYswPawBMlwOxGVyB02jG2Xdme9XPcg1OdtOo=
Subject key identifier: 57:2E:51:8F:01:3A:AA:64:02:4A:40:CF:4B:F0:65:17:22:C2:32:E1
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019F930A02003500EACC21342B586CC8D3E6
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Vy5RjwE6qmQCSkDPS_BlFyLCMuE.roa
Signing time: Fri 24 Jul 2026 07:32:14 +0000
ROA not before: Fri 24 Jul 2026 07:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199737
IP address blocks: 89.42.29.0/24 maxlen: 24
89.44.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:0a:02:00:35:00:ea:cc:21:34:2b:58:6c:c8:d3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 24 07:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=572e518f013aaa64024a40cf4bf0651722c232e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a6:65:88:ce:9e:63:ab:22:4c:32:19:ca:20:
9c:a5:b7:39:12:c5:fc:a9:0a:63:f0:1e:ea:88:54:
8f:20:a2:60:e6:a1:39:f5:39:f5:5b:53:0f:d9:92:
f7:3c:c0:65:19:eb:ca:00:3d:70:2b:31:23:8e:76:
1f:f0:bf:81:76:50:42:f6:cf:68:e3:01:b0:5b:cb:
49:d2:e1:fc:67:75:1b:7f:81:dc:bc:d7:59:6c:f3:
43:e9:03:2f:87:ba:b5:8a:8d:6a:42:99:d5:53:ff:
f5:fc:ba:f1:39:84:6e:0e:31:f2:eb:7e:85:e4:ae:
4e:33:75:be:97:f1:5a:e6:25:4f:eb:e3:1e:1a:f3:
3a:cb:e8:f7:94:40:ee:34:36:b0:84:d8:8a:7e:60:
2f:1c:c9:11:75:08:ea:58:bf:59:51:b4:71:80:aa:
d4:56:20:90:c9:0e:0f:b0:5d:99:0e:91:08:a1:86:
f1:79:16:92:27:6d:4f:95:fe:8c:ed:35:27:cd:06:
aa:bd:6f:68:da:0d:56:f2:ef:68:08:73:d5:b1:09:
e0:f0:08:5d:19:42:cd:eb:32:15:d5:2b:4c:f0:66:
8a:2a:9e:98:20:21:36:e3:20:e0:76:69:7c:90:b6:
ce:9c:63:f4:9f:7f:da:3a:d7:d9:0a:42:00:58:ad:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2E:51:8F:01:3A:AA:64:02:4A:40:CF:4B:F0:65:17:22:C2:32:E1
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Vy5RjwE6qmQCSkDPS_BlFyLCMuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.29.0/24
89.44.102.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7e:bf:07:fc:a2:c6:d7:4b:4c:7f:ac:12:f0:9c:74:ec:34:
79:f0:88:2c:45:bc:32:3d:d5:25:27:54:fa:e4:1c:cd:6d:88:
af:2a:11:7b:be:18:7f:cb:43:2e:c4:60:ec:9d:ee:32:76:a7:
5f:b9:23:1d:94:c5:c4:95:4a:7e:c6:d6:92:a2:f9:66:18:4d:
d3:f9:cf:51:2d:f0:c1:8b:7f:37:08:bc:b8:bc:aa:01:f0:ab:
fe:62:4b:27:d5:da:b9:9b:b3:f3:b4:07:19:23:9d:00:b7:a4:
e6:80:c8:f8:b1:18:e4:9c:cd:10:92:d5:f1:47:c5:ed:aa:1c:
6c:76:51:0b:db:61:47:89:be:60:e2:9b:6b:45:03:66:51:eb:
02:39:55:07:29:96:f5:ae:13:cd:ec:20:45:2d:1a:c5:00:23:
b3:a7:35:81:f9:71:e0:e3:ad:4d:d6:9b:59:8c:ec:92:1f:28:
81:6a:0a:d7:b4:72:e1:2f:95:de:e0:f3:4b:e6:5b:8a:f9:22:
9d:05:a0:6c:d4:13:96:63:c3:da:53:7a:8b:25:3c:8a:26:7e:
1d:78:07:bf:7e:9e:56:67:9c:b4:06:c3:eb:2c:7c:29:09:63:
fe:a2:8c:ff:5b:de:d0:57:d0:0c:5e:85:0c:36:40:4b:0c:93:
f5:2b:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:28 2026 by rpki-client