Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/jOw_auvAMHfQZA63CN2U9mBRMVc.roa
File: jOw_auvAMHfQZA63CN2U9mBRMVc.roa (raw, json)
Hash identifier: xPvK5ttQn8QygiN6ftuMK506XQIyRGc1Bg84C5Jpu7Y=
Subject key identifier: 8C:EC:3F:6A:EB:C0:30:77:D0:64:0E:B7:08:DD:94:F6:60:51:31:57
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D3BB868040574C8BDED2E3D5FF2E195
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/jOw_auvAMHfQZA63CN2U9mBRMVc.roa
Signing time: Wed 01 Jul 2026 10:31:20 +0000
ROA not before: Wed 01 Jul 2026 10:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 89.167.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:3b:b8:68:04:05:74:c8:bd:ed:2e:3d:5f:f2:e1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cec3f6aebc03077d0640eb708dd94f660513157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:27:08:c0:17:32:68:89:a6:03:88:e0:7b:
ac:6a:9e:19:ab:f1:4b:b7:03:88:c5:9e:f4:0d:ac:
2a:af:fd:fd:ff:fb:a3:d2:e1:3b:ae:c0:55:7e:3f:
0a:9c:3c:28:e2:09:33:6d:76:0e:53:45:87:06:48:
c4:79:ac:e4:67:81:d2:f9:db:f4:bc:7b:64:30:6b:
50:13:eb:40:c9:5c:4f:8c:f3:31:a1:41:45:65:6c:
9c:f5:c9:c2:95:d7:a0:77:a1:8f:18:a2:b9:75:43:
7e:a5:5b:cc:e1:1b:0f:de:2f:03:f8:1a:25:04:ba:
a5:5b:82:0c:e1:b3:11:82:2a:b3:8e:1b:84:f5:c2:
13:6e:8d:3f:27:2a:31:13:0b:37:33:ca:c7:15:50:
81:d1:9f:9d:d8:c2:4c:bf:1a:52:4c:32:04:82:f3:
bf:f7:ae:2b:e3:11:da:9d:49:cb:98:f8:b9:c3:ab:
de:c9:ed:75:c5:0e:b9:2a:01:8e:65:e5:57:0a:d4:
13:a9:a6:a6:9c:c3:3e:b4:15:7a:8a:97:ec:99:39:
94:e7:d3:85:ce:b8:ce:71:bb:ac:b9:be:24:4b:a4:
fb:2d:96:8f:83:b7:2c:6e:e3:f3:68:30:00:b8:08:
05:5a:8f:85:6c:7f:25:98:5e:49:1b:ea:9c:e4:b6:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:3F:6A:EB:C0:30:77:D0:64:0E:B7:08:DD:94:F6:60:51:31:57
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/jOw_auvAMHfQZA63CN2U9mBRMVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:78:bb:54:b5:ae:2d:61:e5:b5:51:34:c1:f1:5f:6d:62:44:
c5:e7:fd:b4:a5:7d:2c:1b:db:a4:66:2b:87:11:b1:32:37:9f:
b1:82:93:f9:4b:00:9d:4c:c8:84:c4:b0:04:6d:e4:8f:12:42:
53:a6:79:00:f6:42:f8:e7:a3:71:5e:ae:a0:26:93:18:ce:a9:
be:91:6f:a7:5d:cf:cf:48:b0:dd:6d:86:56:c4:a3:85:98:3b:
a1:72:2c:83:68:1c:25:0b:cd:52:9f:de:f0:d2:9e:a6:27:9d:
21:8c:d7:b5:e2:26:c4:b0:b5:13:c8:91:e2:cc:d2:0e:1c:26:
dd:91:04:71:78:94:ad:26:42:15:d9:8d:eb:e5:42:c2:df:16:
b1:07:9a:e1:e0:52:51:ee:e5:83:9a:58:e5:51:d6:82:5c:a6:
22:6f:42:d4:9e:77:e4:4d:5d:61:88:d7:bc:25:a5:bf:f5:23:
fd:54:2d:5c:d9:3f:a7:22:7e:64:f5:5e:6f:8c:41:66:0b:a4:
e6:15:14:01:a9:1b:fb:5c:be:2f:93:e7:de:49:ec:c2:35:60:
b5:46:07:31:18:47:38:95:71:7e:5a:fa:fb:8d:e2:59:98:75:
0b:89:66:a9:3e:3a:76:45:86:98:2c:67:4c:73:a1:cb:71:e4:
70:d0:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:29:50 2026 by rpki-client