Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/KipxckbuqYEpwU_qBbQio5vsMyk.roa
File: KipxckbuqYEpwU_qBbQio5vsMyk.roa (raw, json)
Hash identifier: WZopJNv/GXdqf4y92PGM/2m38ZlEAa1h6WkKnMkE8w4=
Subject key identifier: 2A:2A:71:72:46:EE:A9:81:29:C1:4F:EA:05:B4:22:A3:9B:EC:33:29
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A10B4642FDF68F5DEE418F9334AE6FF111
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/KipxckbuqYEpwU_qBbQio5vsMyk.roa
Signing time: Mon 05 Oct 2026 08:55:16 +0000
ROA not before: Mon 05 Oct 2026 08:55:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204535
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:46:42:fd:f6:8f:5d:ee:41:8f:93:34:ae:6f:f1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 5 08:55:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a2a717246eea98129c14fea05b422a39bec3329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:36:bd:d4:e9:cd:b2:8a:20:79:88:54:36:
24:1a:e7:8c:4a:75:f3:a0:2c:b9:f6:e3:33:c1:27:
8c:2f:ba:55:09:38:5c:d1:83:8b:06:a9:5d:fb:4f:
28:7b:81:a0:a7:11:d5:f6:f6:fe:da:e1:fb:3f:ae:
b7:54:65:a1:dd:96:ad:37:db:97:29:de:7f:1c:9c:
1b:aa:34:72:35:62:f4:6e:65:41:d3:41:c6:9d:0f:
e3:fb:38:78:66:98:b4:28:9a:2e:23:c4:0e:74:3e:
f8:be:2c:35:06:f6:14:16:f2:7b:55:fc:27:54:fd:
84:6d:b9:e5:82:2e:a3:21:b3:b8:ec:de:6a:a6:93:
8e:40:42:bd:fe:2a:f3:e9:3f:2a:10:b4:6f:6d:80:
08:9f:85:31:c2:4a:0b:47:0b:f3:50:8d:93:b6:eb:
ca:58:94:c1:3f:1d:66:e6:91:74:a0:91:ba:b8:c3:
0f:cd:24:4a:aa:07:4b:e8:3a:d1:be:a1:05:d6:ca:
d5:2a:14:c2:4f:76:1c:b5:12:00:53:db:cb:a7:40:
f2:91:8c:0a:f5:e2:32:ff:8f:c7:e9:85:4c:5c:ac:
62:76:43:e5:22:b1:c6:2f:1c:bf:17:66:73:13:32:
18:de:34:a0:15:fd:19:c8:3c:03:8b:4e:c0:7a:78:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:71:72:46:EE:A9:81:29:C1:4F:EA:05:B4:22:A3:9B:EC:33:29
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/KipxckbuqYEpwU_qBbQio5vsMyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2a:24:2e:9c:ee:ec:99:aa:86:b1:8b:f3:74:7a:bf:b9:0d:
20:90:83:b0:6e:19:43:8a:62:89:fc:d9:db:f1:2c:89:45:97:
d2:c2:b8:e8:22:09:e9:1c:f2:c1:de:1d:83:c2:02:00:25:86:
cd:73:73:a2:31:ff:da:23:40:e0:41:ac:e0:95:95:6b:4b:e9:
12:3a:a0:66:4d:3e:46:cf:d6:0d:a1:9e:af:17:e8:9d:67:14:
c7:7f:b8:dd:26:d5:92:ce:b9:bf:76:45:9d:be:3f:70:ac:6c:
81:9f:04:92:34:b8:fa:e9:a0:03:c3:9e:68:81:40:cc:4e:d8:
cd:59:54:6d:e5:3e:f1:ec:11:da:65:71:fc:14:ab:85:6d:2f:
54:96:6d:1e:03:7b:49:f0:1c:34:f0:4c:0e:05:0f:be:d4:30:
1b:71:32:6e:55:ed:2e:b1:58:f7:13:ed:0b:a7:46:d3:88:5d:
9d:0d:e2:29:e3:1b:51:98:f4:80:1f:3c:bf:e9:a0:42:8c:4a:
b9:72:5f:c7:8f:57:4d:cb:60:44:17:f3:de:c3:2b:79:c1:1a:
d7:54:6e:1b:bb:cb:7e:87:17:c4:d2:7f:45:06:33:17:09:2e:
e7:6e:9a:a5:0e:04:57:2b:14:13:4d:b5:74:07:c2:30:77:47:
fe:42:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:18:12 2026 by rpki-client