Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa
File: wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa (raw, json)
Hash identifier: 0N3meIn2yL7+R4H9Boh39pJ8uOOO2cz3n7sm1Yhp1RM=
Subject key identifier: C2:33:2B:E4:3C:B4:6D:1D:47:34:B1:26:E0:DC:F9:BB:5B:71:5A:B0
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019FD82643B750D2EC72942493CD777499AB
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa
Signing time: Thu 06 Aug 2026 17:36:54 +0000
ROA not before: Thu 06 Aug 2026 17:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 89.28.207.0/24 maxlen: 24
152.89.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:26:43:b7:50:d2:ec:72:94:24:93:cd:77:74:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Aug 6 17:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2332be43cb46d1d4734b126e0dcf9bb5b715ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:08:24:1e:03:32:ba:b8:f8:eb:ab:5a:a8:
c7:8e:04:ea:a1:00:57:99:ae:68:64:6a:e2:d5:b8:
70:7a:1b:ea:5c:eb:dd:f4:76:25:61:72:b0:1b:7f:
9b:ca:a3:56:4b:21:1e:ee:48:17:5d:71:1a:b8:03:
1b:92:59:b2:1a:23:f9:53:33:ee:24:02:e2:71:6f:
fa:3d:25:2b:9b:c4:51:41:5b:20:89:b3:7f:d7:88:
db:89:0e:ff:f2:a8:36:6a:18:8a:8e:b0:c6:23:83:
3e:62:ce:4a:38:41:80:d0:a3:94:0e:a3:4a:ca:5d:
f4:54:cd:1e:30:e7:c6:53:bd:bc:84:8b:28:94:97:
53:21:9b:ce:3e:bb:ba:d6:5f:9a:d5:31:e7:81:cb:
3d:b1:e7:3d:34:60:85:84:96:9f:bc:ae:f4:0b:54:
3c:e4:dc:cd:78:af:e2:23:85:8f:cb:b4:94:02:a0:
48:17:6a:8b:71:62:fd:9f:cf:19:b1:d6:2d:fb:13:
e6:0e:68:0a:51:4a:18:b3:f0:d9:a3:d7:ce:9c:82:
8b:81:69:e6:71:ea:ba:3c:bc:10:99:72:c3:4a:34:
ee:5a:88:d9:15:8e:9d:b6:f3:30:87:7f:8d:39:d8:
e4:45:73:f7:e3:02:9c:bc:8c:f0:ef:d2:a2:79:c1:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:2B:E4:3C:B4:6D:1D:47:34:B1:26:E0:DC:F9:BB:5B:71:5A:B0
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.207.0/24
152.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:2d:16:67:cb:dc:fb:89:ba:2d:a5:ca:53:be:38:29:8b:8e:
4a:06:ee:8d:58:8c:30:0f:95:5b:6f:a5:7d:33:ff:4a:ce:d1:
4d:fb:4e:f8:98:b0:d4:d6:29:3c:aa:20:c1:39:2a:63:e3:0b:
6d:7b:05:b7:83:33:24:43:a2:87:b0:2a:d2:f8:ee:f8:aa:71:
f0:84:95:53:65:61:03:c9:cd:71:20:ba:e9:bc:d1:88:7f:be:
6c:c6:fd:d6:36:36:3b:f5:72:ee:b5:c5:08:70:48:e0:b6:96:
eb:e1:d1:25:77:e7:22:6d:8d:2f:b8:a5:cb:f4:e0:85:1f:eb:
7c:89:f1:65:53:e0:64:02:a1:49:17:14:21:e5:a5:89:8d:99:
43:23:bf:70:ce:59:ce:32:74:37:ca:a1:c1:6b:de:fe:e6:5b:
c9:c4:a8:11:aa:d0:9f:d6:4d:c8:b1:04:89:24:69:a8:ee:b2:
50:4e:73:d0:7b:5d:0d:e4:e3:d0:5a:4a:cf:a8:a8:e6:f1:be:
18:51:71:a1:62:c9:aa:ec:89:4a:3e:00:ca:31:9b:91:e0:bf:
2d:c2:68:3f:9f:20:c2:ff:57:4b:41:11:c8:44:35:81:1d:80:
c0:70:00:d4:92:39:7e:2e:1f:4e:36:9c:59:58:e6:24:89:85:
da:c4:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:11 2026 by rpki-client