Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/inblab8u1fLg9ifVJrAXElmp3EE.roa
File: inblab8u1fLg9ifVJrAXElmp3EE.roa (raw, json)
Hash identifier: ll7khLF6PjY7VVN3ZnOStll+YMmYS9DVDVVZJBpjKrE=
Subject key identifier: 8A:76:E5:69:BF:2E:D5:F2:E0:F6:27:D5:26:B0:17:12:59:A9:DC:41
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EE9CA604B6B9665B2A9A097937B9A7424
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/inblab8u1fLg9ifVJrAXElmp3EE.roa
Signing time: Sun 21 Jun 2026 10:46:54 +0000
ROA not before: Sun 21 Jun 2026 10:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215649
IP address blocks: 89.144.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:ca:60:4b:6b:96:65:b2:a9:a0:97:93:7b:9a:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 21 10:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a76e569bf2ed5f2e0f627d526b0171259a9dc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:44:d6:12:32:27:4b:ec:21:0a:22:48:0e:
d0:81:d2:6e:a9:a6:ad:9c:6b:12:d6:9b:38:6e:14:
a1:ed:03:7f:b0:76:e9:35:85:17:c7:08:84:e9:ba:
db:b1:64:ff:6c:87:28:31:04:ef:47:63:39:9a:96:
f7:f3:ad:fa:6c:f6:e1:9b:51:eb:da:4e:0a:d1:17:
a0:ff:96:c0:22:14:27:e7:19:04:5a:7a:76:06:29:
40:a4:18:12:1b:49:c0:e3:0d:d7:8f:e0:0e:71:a3:
25:53:7d:a8:01:c0:4c:0f:ae:69:ea:8c:20:67:03:
f1:e2:2b:68:6c:18:be:6f:53:e4:52:96:68:62:b6:
b9:9a:71:22:90:1f:1c:34:83:cb:a5:2f:cc:98:3b:
81:13:0f:d7:7d:ce:e7:16:2f:5b:ea:96:2f:f6:12:
34:8f:15:2f:8f:95:c9:91:73:a5:ba:e9:5b:0a:05:
ff:4b:d9:97:49:11:8f:a0:2b:d0:1b:76:18:e4:e7:
9c:31:ad:8c:f3:86:29:9e:de:f2:65:a9:ff:d5:04:
b9:79:b8:fa:1e:48:f9:d1:69:ae:20:f9:53:06:74:
3c:70:fc:47:a7:b2:e2:92:79:d8:14:dd:a7:93:c8:
ea:3a:d9:ee:cb:3d:25:78:4d:e5:91:cf:6f:43:97:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:E5:69:BF:2E:D5:F2:E0:F6:27:D5:26:B0:17:12:59:A9:DC:41
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/inblab8u1fLg9ifVJrAXElmp3EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a2:42:d6:b8:d0:cd:a4:a7:19:5b:93:02:05:28:3c:15:97:
7c:17:7d:c3:e3:fa:a7:fb:39:31:ea:9d:06:46:ca:da:11:9d:
4d:69:8b:00:74:f3:b0:c7:1f:c3:95:37:1e:a7:0c:d7:d4:37:
d1:1e:01:26:6e:4f:d8:d5:86:be:7e:4b:60:4c:ed:52:d3:47:
cc:b6:27:24:71:b6:b6:f1:22:90:0a:55:e0:f3:c2:4c:9b:36:
7e:b2:06:d7:2c:48:c3:46:ef:52:84:c5:9e:4f:c6:61:20:11:
c5:5e:b6:90:b9:79:01:3e:e8:f7:10:c8:1d:de:b1:01:df:fd:
c0:be:ff:5b:bf:90:5e:6a:81:9c:0b:9e:2e:f7:97:6e:b3:ab:
29:6a:8c:68:24:d2:6e:66:62:ed:84:d0:09:1d:fd:fb:32:30:
e3:f6:20:14:df:da:6a:3e:bb:65:7f:80:b8:d7:fa:93:38:81:
60:41:14:45:37:4a:07:4b:fe:9f:93:2e:1c:e8:48:db:0a:e2:
3e:dd:47:bc:6e:4e:10:79:e8:94:1e:40:bb:07:87:4d:54:46:
a6:3c:b2:2b:66:e6:93:50:85:47:af:e3:58:ab:65:47:ac:6a:
e5:6a:59:2e:fb:6e:32:35:d0:e9:e6:ff:08:56:54:05:2c:f3:
49:99:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 02:54:15 2026 by rpki-client