Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa
File: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (raw, json)
Hash identifier: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=
Subject key identifier: F2:1F:79:B8:D2:03:60:6F:94:7E:88:36:23:C6:68:28:C6:8B:72:CC
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FE195EA9D2885F45C25CF8AF8F4D
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206647
IP address blocks: 89.223.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:19:5e:a9:d2:88:5f:45:c2:5c:f8:af:8f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21f79b8d203606f947e883623c66828c68b72cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:6f:db:a6:17:42:e5:92:18:b6:dd:7b:9e:
33:40:ea:ec:79:71:29:4f:4d:57:52:9a:66:51:26:
fa:74:fe:d0:77:a8:b3:55:5c:a2:a3:0f:b1:87:61:
a1:1c:eb:f5:ca:c3:b8:f4:61:dc:02:50:ab:19:43:
b9:36:dd:f5:23:71:57:cf:91:d1:2e:b5:be:75:d2:
6d:6c:c6:5d:27:81:b5:25:0a:e9:7c:e9:c8:f4:b3:
f5:0c:ed:dc:e2:01:5f:b9:58:82:67:76:bc:eb:0d:
74:35:b8:38:ab:b3:84:77:0d:50:e2:a6:ad:2b:aa:
60:87:08:56:49:39:50:c6:2d:e8:11:88:c6:92:9d:
13:47:0b:a9:41:30:72:9e:fb:52:95:db:74:c0:24:
64:ce:90:b4:a5:d0:f7:3e:99:c4:c9:bc:13:c5:fa:
2b:df:f0:2a:c8:0f:20:1d:81:af:9e:51:87:24:d1:
ff:22:37:7d:db:3c:e1:7a:ba:48:3d:28:a9:34:bb:
72:20:fd:fb:09:f8:26:09:dd:95:80:ae:44:88:32:
5b:95:95:b7:44:e8:55:b7:5b:a6:7a:e9:1f:ca:d4:
34:3f:b5:41:94:0a:d7:23:59:74:c5:1a:9f:50:39:
07:5f:a5:9e:6b:b9:cd:a9:68:f6:b7:77:fd:d4:1c:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:79:B8:D2:03:60:6F:94:7E:88:36:23:C6:68:28:C6:8B:72:CC
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.17.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:14:5b:87:f5:10:ad:7b:f4:7b:89:a0:22:c7:f7:8c:20:
fc:a2:60:ef:11:11:a4:20:15:27:b1:8f:92:1f:0d:4f:21:ca:
d1:b1:88:da:a4:54:0d:b7:be:99:05:c1:90:f2:87:ad:ca:35:
10:9e:39:37:61:30:9b:fa:ea:e8:72:ba:6b:ec:c9:2d:1b:46:
70:b8:4d:56:4d:2d:c2:ac:06:df:fc:bb:0b:a6:a9:c1:62:c0:
e1:0f:f4:cb:06:26:15:d9:f5:bc:e5:ca:79:ab:28:71:21:8e:
7f:0e:d1:7d:44:3f:9c:ab:7d:6a:29:56:79:dc:d8:5b:ef:84:
f1:fd:1b:85:1a:9f:20:20:1a:ad:61:1f:20:7a:64:a0:a6:4f:
5b:b9:69:d9:4a:1f:3d:94:2b:84:53:36:13:81:64:70:a7:a5:
10:9b:a4:78:39:79:4c:cd:08:6c:4b:a5:47:ac:a6:6b:45:d3:
41:3e:ab:6c:4f:cb:b4:05:1b:42:65:f9:19:53:6f:e3:12:d1:
b1:b2:f4:a7:5d:5c:d4:18:06:e8:cc:37:f1:d5:57:b6:a4:e8:
b0:a7:52:62:d3:07:f1:3b:8b:ce:66:54:7e:91:24:fe:5b:84:
24:80:43:ec:c4:55:f3:1a:8c:34:9a:a5:0c:49:a4:a2:e4:42:
7c:0e:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:23 2026 by rpki-client