Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/REeRVE2BHlUQOrHYK0avI7f1KsM.roa
File: REeRVE2BHlUQOrHYK0avI7f1KsM.roa (raw, json)
Hash identifier: iIA7Y3pjdko5O7mah9jZC3yhvjhhU49aDz0nseqXqBs=
Subject key identifier: 44:47:91:54:4D:81:1E:55:10:3A:B1:D8:2B:46:AF:23:B7:F5:2A:C3
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019F5A0D87989A958B38609D42C8C0A9DAB5
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/REeRVE2BHlUQOrHYK0avI7f1KsM.roa
Signing time: Mon 13 Jul 2026 05:57:43 +0000
ROA not before: Mon 13 Jul 2026 05:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402075
IP address blocks: 189.13.160.0/24 maxlen: 24
189.13.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:0d:87:98:9a:95:8b:38:60:9d:42:c8:c0:a9:da:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jul 13 05:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=444791544d811e55103ab1d82b46af23b7f52ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:ef:82:39:1f:25:ae:fd:6a:aa:f0:10:4f:
93:93:39:f3:02:7a:50:4f:16:e0:90:34:40:c1:fe:
f1:1e:0c:74:c0:bf:7c:f2:b9:66:cd:c8:44:9e:30:
19:7f:31:7d:4f:ae:ae:4f:a8:d2:7d:3d:a5:6f:22:
d9:fe:c8:87:49:d4:40:5c:08:5a:19:e4:7d:8d:48:
dd:1d:e7:19:8b:6d:da:53:e0:f9:6b:00:f8:1b:b1:
1a:6c:fa:9b:55:ea:7f:fe:1f:11:f5:73:a1:64:e5:
e3:44:a8:af:8b:0f:3e:6b:84:de:e3:c8:42:33:0a:
6e:84:bb:ca:70:9e:eb:72:a2:bb:5e:99:76:c0:16:
a9:0c:c8:f4:56:5f:2a:aa:a2:80:72:67:27:ee:15:
1a:e1:22:dc:01:c3:34:bd:0f:a0:87:6c:d2:29:e1:
90:0e:cd:0a:cf:2a:30:5d:3b:e7:b2:9b:0a:9d:32:
40:ad:49:65:3b:ea:74:4c:74:9b:8e:32:b3:43:8a:
a4:26:0b:be:ee:0a:7b:b4:5a:a6:72:37:32:74:02:
55:fe:5c:36:c7:30:e7:ec:e0:ba:13:de:91:37:99:
4d:21:c8:48:7e:b7:1c:6d:78:35:3b:27:fd:db:46:
fc:b7:ec:f3:f3:37:2c:30:45:13:6b:9d:16:1f:d7:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:91:54:4D:81:1E:55:10:3A:B1:D8:2B:46:AF:23:B7:F5:2A:C3
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/REeRVE2BHlUQOrHYK0avI7f1KsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.160.0/23
Signature Algorithm: sha256WithRSAEncryption
79:9f:75:79:8e:ba:71:80:2b:62:e2:55:df:1b:8e:ee:f8:fe:
03:dc:88:a9:bf:29:3d:c7:c1:4e:87:5a:e8:d6:b6:23:40:3c:
9e:91:05:55:b3:16:68:b6:ef:24:49:49:33:bb:68:75:61:42:
0e:ad:20:a5:2b:8d:d1:cf:c6:a2:c6:90:ad:fe:ba:b5:cd:31:
75:91:6d:f9:71:06:7c:93:5d:6e:ca:8f:db:ee:da:f4:6c:50:
2b:97:06:e7:f5:98:16:95:2c:af:5b:f1:10:4d:93:ed:e5:1a:
5e:99:02:35:10:e9:35:e3:3c:14:28:a6:bd:4b:ac:7c:71:ae:
dc:83:5b:b8:a3:3f:2b:7d:0f:02:b8:50:1b:5d:6b:81:31:40:
6e:a7:67:2d:f2:58:d9:1d:74:89:c8:28:d8:60:75:2e:e3:3b:
79:f9:66:2e:3f:02:42:a7:36:6a:9c:ab:66:16:34:c1:29:b8:
ad:47:ff:41:e4:15:b2:07:cd:19:e5:c9:f2:21:35:3e:cf:96:
82:c7:5d:a0:63:e8:ae:7e:f9:fb:4e:7f:e2:06:fa:ea:33:ee:
a2:5e:c6:dc:fb:e5:06:72:db:62:a1:bc:f7:78:02:48:60:30:
bd:ef:56:38:1d:c4:e5:dc:00:d3:b4:84:b2:4f:61:8a:e0:40:
ec:86:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:49 2026 by rpki-client