Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jg1IB7BJ2iE6sEn99fSkiHhsZaw.roa
File: jg1IB7BJ2iE6sEn99fSkiHhsZaw.roa (raw, json)
Hash identifier: ooDSgBbYLVyKv1sQ2T5V9+R0CZ4z8VnNQdJE7OtHKqM=
Subject key identifier: 8E:0D:48:07:B0:49:DA:21:3A:B0:49:FD:F5:F4:A4:88:78:6C:65:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F83247F033FF67414CEFB282A177A7169
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jg1IB7BJ2iE6sEn99fSkiHhsZaw.roa
Signing time: Tue 21 Jul 2026 05:27:14 +0000
ROA not before: Tue 21 Jul 2026 05:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197371
IP address blocks: 89.144.0.0/24 maxlen: 24
89.144.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:24:7f:03:3f:f6:74:14:ce:fb:28:2a:17:7a:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 21 05:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e0d4807b049da213ab049fdf5f4a488786c65ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:9d:cb:58:81:35:84:82:16:27:3d:d3:99:
88:fb:44:93:3e:3d:bb:91:2e:cd:4f:dd:50:54:bf:
08:f9:60:19:b9:c7:98:e6:6d:30:e3:0b:10:1d:3a:
48:1d:d6:8f:91:0a:56:ae:15:c7:e1:6a:b5:2d:55:
e4:d6:07:f3:73:a4:f4:d9:49:6c:da:fd:2d:09:a9:
60:ba:92:1d:a5:15:17:a2:24:5e:21:62:3e:e2:d8:
60:b7:b3:58:51:50:57:e1:da:29:d5:a2:fe:8b:05:
09:e7:3e:cb:17:71:40:14:97:36:5d:64:15:d4:b4:
11:05:b0:e4:91:a0:75:e1:be:14:ec:db:36:3e:b9:
71:88:97:77:fa:9f:1a:7d:b3:83:97:fd:86:05:d2:
17:1f:53:fc:02:16:f7:27:e9:91:55:45:46:38:60:
03:64:7b:c4:67:ef:97:21:f0:2f:8d:7b:36:0c:26:
13:fd:c0:9d:0b:f6:34:19:8c:2f:62:dd:06:0e:3b:
d5:da:f2:e6:a1:91:84:96:b7:27:79:02:12:b6:65:
f6:5d:38:db:ba:2c:0c:d1:3e:c1:ac:c8:af:f5:2f:
d3:92:95:d1:f9:e1:3b:44:21:12:05:9c:97:c2:34:
67:5d:eb:90:7e:de:08:dc:1f:f9:ef:70:75:9c:f3:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0D:48:07:B0:49:DA:21:3A:B0:49:FD:F5:F4:A4:88:78:6C:65:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jg1IB7BJ2iE6sEn99fSkiHhsZaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.0.0/23
Signature Algorithm: sha256WithRSAEncryption
30:86:50:3f:7e:38:a3:d6:39:25:3c:84:95:83:53:62:1b:f7:
55:6a:e2:8c:31:50:02:b6:62:e3:1a:84:4e:e9:6d:36:6b:7a:
12:d6:88:5b:b5:b7:76:23:d7:9d:e3:ad:f7:a5:59:b7:1c:e0:
6f:82:ad:3d:0c:92:92:c1:5c:a2:fc:a5:67:06:15:f0:c9:c9:
3b:31:1f:08:f1:70:a2:04:b7:74:78:ca:84:23:ee:4d:76:31:
3e:f7:84:eb:58:15:bf:27:f6:ad:af:b4:09:26:59:f9:6a:22:
ac:2d:80:22:d4:27:71:d2:0c:1c:0a:ea:6c:05:ef:26:5e:c3:
2b:23:b3:14:ba:ad:32:a7:2a:48:39:b3:bb:c3:63:35:6a:03:
f4:f4:1b:28:60:f0:24:ba:67:f0:bf:21:d5:5a:58:e0:05:7a:
9f:45:d2:72:2f:70:eb:dd:32:9b:4b:20:01:d2:d3:fa:2e:62:
7d:00:9e:46:27:f9:05:7d:e5:7b:2c:df:e6:43:04:04:af:06:
72:80:6f:5c:34:82:c2:2f:39:8c:95:28:c5:57:ed:bd:fb:36:
a7:99:f8:7d:89:03:40:58:32:d4:12:04:e3:88:0a:a7:46:21:
47:17:bd:2e:f7:a0:f5:50:55:16:a2:6b:d4:e8:a8:72:ac:cc:
49:57:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client