Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EIvOWtW6dt2j1EQ6-n-vIK2yVuk.roa
File: EIvOWtW6dt2j1EQ6-n-vIK2yVuk.roa (raw, json)
Hash identifier: AHuxpGgQTf6A+4/7eWRNHt1Sk1/WJk1d7miyzHa7A1k=
Subject key identifier: 10:8B:CE:5A:D5:BA:76:DD:A3:D4:44:3A:FA:7F:AF:20:AD:B2:56:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0F1837CD4BF117477F27260ED78A0A417
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EIvOWtW6dt2j1EQ6-n-vIK2yVuk.roa
Signing time: Wed 30 Sep 2026 08:52:01 +0000
ROA not before: Wed 30 Sep 2026 08:52:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 89.144.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:83:7c:d4:bf:11:74:77:f2:72:60:ed:78:a0:a4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 30 08:52:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=108bce5ad5ba76dda3d4443afa7faf20adb256e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:82:13:22:b7:37:06:11:8f:38:69:d6:8d:
e7:3d:b1:a2:b7:9f:bd:01:21:53:47:d0:a2:51:47:
f5:9f:28:89:57:0e:00:95:17:81:2e:da:88:41:c6:
40:ac:18:0e:63:cd:5d:6c:fa:ec:3b:67:97:3e:27:
83:38:21:40:d5:e2:e4:3b:9a:4a:51:1b:09:50:16:
a9:49:db:03:22:4b:34:de:ab:cb:43:b0:43:3f:e6:
dd:cf:8b:80:e3:4c:de:1b:94:0a:ab:20:e5:ba:c6:
4d:f2:a3:a7:e1:aa:f7:64:be:3e:f6:67:be:fb:7a:
df:ce:30:6b:a7:06:a7:6a:9e:a5:4b:eb:22:d9:ab:
2b:df:cc:b1:df:37:cc:5e:5c:39:03:04:3d:78:66:
e8:c6:1d:c1:8e:ac:b8:8b:43:5a:38:f3:6d:36:32:
06:7a:30:8a:5f:c8:68:81:88:c0:f9:38:a8:96:fd:
10:8e:2f:c5:4b:ae:3c:72:27:08:da:3e:b6:db:74:
cf:24:ae:be:25:b3:3a:ed:6d:9b:7d:26:d0:2d:6e:
f5:b5:13:88:c2:56:a2:97:1c:60:9b:ea:1f:4c:7a:
f6:d5:53:54:b8:d9:76:b5:46:7c:02:82:b4:be:8f:
43:3f:c4:e6:47:36:40:fe:8f:b7:65:1a:15:77:81:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:CE:5A:D5:BA:76:DD:A3:D4:44:3A:FA:7F:AF:20:AD:B2:56:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EIvOWtW6dt2j1EQ6-n-vIK2yVuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.55.0/24
Signature Algorithm: sha256WithRSAEncryption
11:92:91:4f:16:14:f9:3a:54:9a:b9:4d:30:66:b4:19:a9:bf:
e5:ce:92:38:9f:9d:f9:30:49:47:a4:cf:b9:14:eb:9d:93:c6:
48:67:a3:9d:fc:c0:2f:78:98:9e:ff:6d:90:19:b6:6f:e2:e2:
00:01:0e:84:ee:2b:82:4f:13:88:78:9b:a9:1c:26:e0:eb:a4:
e0:62:c7:89:fb:56:72:1a:a7:32:9c:34:aa:f2:7a:cc:9a:b1:
ae:b6:bf:18:6c:b2:9d:00:c0:98:4d:8a:55:d3:cd:c5:5c:e4:
b7:f6:a2:2c:c7:97:29:cb:60:d0:0e:a1:9b:7e:b5:37:17:37:
f7:dd:ea:7f:47:74:3c:b0:c6:f6:4d:df:be:ba:25:5e:f9:c6:
76:a0:31:08:dd:57:a2:77:a1:34:6c:dc:46:81:78:73:ed:dd:
56:87:d9:56:8d:64:7b:e4:07:59:ad:03:af:b3:d4:f3:05:e6:
f1:08:9b:88:f1:86:79:70:bd:dd:10:2d:59:28:d4:34:ec:08:
79:a8:7d:a9:3c:33:54:e0:88:4e:1b:10:75:32:a2:1f:53:f6:
82:e7:93:f9:fa:eb:d8:4f:b8:cb:7e:ff:84:b7:62:b5:dc:b6:
dd:6c:47:38:6c:ab:a3:80:83:e5:96:af:49:2d:99:b4:77:e8:
61:e2:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:01 2026 by rpki-client