Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jOb6nPZKS6kkrN0evTVKCiKvEBU.roa
File: jOb6nPZKS6kkrN0evTVKCiKvEBU.roa (raw, json)
Hash identifier: JMWO3lwolpjva4XPF9kfLQ6Upw3YQ04pGv1Vx8jGpq8=
Subject key identifier: 8C:E6:FA:9C:F6:4A:4B:A9:24:AC:DD:1E:BD:35:4A:0A:22:AF:10:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F0C6B14AFE17EA34C4CAB5132CB71BF9F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jOb6nPZKS6kkrN0evTVKCiKvEBU.roa
Signing time: Sun 28 Jun 2026 04:09:31 +0000
ROA not before: Sun 28 Jun 2026 04:09:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 89.144.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0c:6b:14:af:e1:7e:a3:4c:4c:ab:51:32:cb:71:bf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 28 04:09:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ce6fa9cf64a4ba924acdd1ebd354a0a22af1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:02:71:53:42:99:89:ef:9a:6d:96:a0:f6:
01:6c:f0:3f:fc:2b:c9:fd:ac:a7:ef:b9:fc:98:c4:
7f:6a:81:92:7e:a7:60:49:f3:e8:6c:c4:4e:fd:5f:
06:b0:9c:dd:1f:69:93:64:01:5c:fb:cd:a8:c6:22:
f9:98:20:0d:e2:4e:d8:bf:84:01:88:52:9c:0a:49:
e5:12:b1:ad:0b:c0:d8:5c:b1:48:ee:ee:f4:67:ca:
45:f1:3a:17:a1:f9:2d:36:1b:3f:58:68:57:5e:d3:
c8:d9:73:f2:97:e5:ea:41:1a:00:56:be:e1:d0:17:
e3:4c:4f:be:74:74:99:8c:31:45:6f:61:d0:73:23:
e3:a5:88:2f:28:92:4f:9d:69:8c:7f:e8:f6:78:ad:
9f:3b:00:31:38:0c:98:59:2f:8a:ce:29:9e:8f:d8:
80:e5:f7:6b:3b:7a:bb:8e:4a:58:58:68:8b:71:01:
0c:6f:91:4f:ba:35:e0:94:63:35:1d:5d:0d:bf:29:
55:26:57:68:f6:cf:7a:92:1b:d4:01:0a:a6:96:70:
87:77:67:62:c4:f5:4a:da:5f:93:4c:28:e1:bf:d4:
5e:05:54:0a:47:dc:bd:cf:f7:4c:eb:be:0d:ff:83:
6f:3d:ad:7b:59:a8:cd:65:72:a9:33:5e:34:71:75:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:FA:9C:F6:4A:4B:A9:24:AC:DD:1E:BD:35:4A:0A:22:AF:10:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jOb6nPZKS6kkrN0evTVKCiKvEBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.55.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fb:33:98:b4:8e:2f:f3:e2:9f:be:2c:12:c9:78:12:44:73:
8e:99:84:c1:50:c5:19:9a:a9:51:99:24:b9:20:ed:cd:b7:40:
64:6f:0d:c3:a0:50:30:c9:bc:a8:bc:94:61:72:65:2c:37:ca:
65:fa:b6:f6:4d:a8:24:f3:ba:c6:04:b0:03:bf:ab:a8:43:f0:
3f:e6:55:47:28:01:c7:64:2f:36:d5:25:1c:53:07:1e:84:43:
9a:76:10:56:2b:f8:7c:49:9d:91:2c:37:6c:c5:1f:e3:97:07:
3b:db:fb:85:21:ca:6f:f4:df:9f:5b:b9:69:83:69:75:ff:97:
c0:63:f7:a9:73:e4:90:0d:66:0f:c6:f4:55:63:b8:14:45:c3:
4e:7f:49:14:0c:1a:f9:f2:91:25:99:6e:6b:6d:bf:86:33:94:
5d:b4:f5:27:f8:3f:8d:e3:52:a1:fb:53:bd:35:cb:20:5d:9e:
fe:c1:74:62:9c:fb:22:34:af:19:0c:41:d4:25:50:aa:3b:c9:
da:66:e2:d0:5a:e1:5a:15:66:fb:38:90:23:13:0b:35:ca:3e:
a5:b5:e8:d3:5c:8e:0a:75:3c:88:e7:50:c3:3c:cb:08:ae:c7:
2d:ed:8c:13:0a:47:18:6a:99:25:d1:ba:98:7e:27:f3:8a:4f:
84:dc:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:25 2026 by rpki-client