Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa
File: kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa (raw, json)
Hash identifier: VujkKRSH5a/ek90tKXqBOgg2Ya8vmz2jBWPjuMWSLmc=
Subject key identifier: 90:8C:31:55:AB:33:27:48:EF:67:0A:D8:F6:F4:0E:9A:B8:09:27:9E
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A090372173F059675ABD86DF7C7C7006D4
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa
Signing time: Fri 11 Sep 2026 11:25:27 +0000
ROA not before: Fri 11 Sep 2026 11:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274267
IP address blocks: 89.42.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:37:21:73:f0:59:67:5a:bd:86:df:7c:7c:70:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Sep 11 11:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=908c3155ab332748ef670ad8f6f40e9ab809279e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:91:ef:df:68:d6:11:8f:6e:09:ba:8b:b9:
11:dd:0e:00:25:9e:7e:52:c9:83:95:a5:4b:11:2a:
03:d5:b7:38:14:40:38:79:a4:b1:18:1a:60:7f:ea:
66:dc:78:a9:2f:5c:45:72:59:73:e2:15:2c:47:a4:
6c:52:fb:b5:61:21:f1:30:4c:34:36:99:46:b4:dd:
06:41:23:a0:93:01:1f:f7:d2:15:29:00:02:f3:03:
01:44:9b:cb:73:31:41:80:2c:90:b0:4c:6b:ef:22:
19:4e:3d:9f:13:20:c1:5a:a4:de:3c:64:3b:75:56:
b0:80:06:5e:14:c8:43:a6:63:fe:d6:dd:05:fa:ea:
14:4e:b7:cd:9e:29:5a:91:38:1e:52:f1:b0:05:ab:
1e:00:8d:1d:65:66:e8:6b:57:fd:be:14:9d:09:0c:
85:8f:66:c6:8f:e3:79:47:63:3b:b4:34:af:92:b6:
bb:27:39:87:1e:f1:48:fe:10:ec:2b:88:5b:64:db:
ad:b1:3a:cc:3c:8c:23:c0:a7:07:45:9d:4f:14:5c:
bf:35:05:8e:3a:21:25:8d:82:d7:6a:10:5d:a8:68:
0a:ef:3e:0a:a2:d2:fa:79:ee:e1:67:3f:84:91:27:
e9:d3:88:68:af:6c:6a:55:27:1f:59:96:48:fc:cb:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:31:55:AB:33:27:48:EF:67:0A:D8:F6:F4:0E:9A:B8:09:27:9E
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ff:68:1f:ee:37:ba:e1:8f:77:5d:70:d7:03:08:ee:c8:de:
20:c7:e6:4c:72:d4:0e:b1:8f:00:35:a2:3b:c7:a7:9e:11:f0:
b7:9f:be:96:35:45:a4:4b:c8:8b:af:c7:3d:26:13:f8:8f:76:
a3:27:f7:94:8e:0f:59:f9:ee:6a:bd:08:4f:29:be:ae:a5:1f:
d9:22:7a:a0:a3:aa:c3:21:3f:72:d1:71:08:7c:96:48:a7:2d:
74:1e:86:cf:f9:65:69:69:82:ed:42:46:b4:3e:13:af:6d:50:
85:43:5e:c5:cd:4d:8e:71:7d:09:be:35:ad:7e:92:06:2a:e9:
7b:aa:e7:05:bc:fb:3e:1d:e9:36:ab:2f:8a:91:46:59:69:98:
ea:68:71:9d:e1:b3:b1:63:59:b4:c6:32:62:5c:5d:1c:d3:2a:
d2:2b:7f:68:ff:2a:3c:71:e8:38:54:08:fe:01:8f:3e:61:d0:
7e:7d:fa:bb:9c:a5:22:1c:aa:fd:48:45:63:33:44:24:a8:c4:
5a:3e:de:f1:a3:5d:0c:ab:83:18:00:7b:dc:72:71:75:ca:46:
96:cf:8f:bb:7f:80:f8:0f:f5:28:5b:52:fa:48:4c:2b:68:fe:
b3:02:f0:e6:e6:da:55:84:62:d1:16:81:e7:00:8e:a7:73:a7:
90:e1:80:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:54:14 2026 by rpki-client