Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sEmX9vS82TED31rrphDi3fQD99k.roa
File: sEmX9vS82TED31rrphDi3fQD99k.roa (raw, json)
Hash identifier: EP2FzEc+MCffZSb8rmtXb7lBpREY5drpXvxbctexGgA=
Subject key identifier: B0:49:97:F6:F4:BC:D9:31:03:DF:5A:EB:A6:10:E2:DD:F4:03:F7:D9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FD0179D7C117380F4195C4FFCD7E923A4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sEmX9vS82TED31rrphDi3fQD99k.roa
Signing time: Wed 05 Aug 2026 04:03:56 +0000
ROA not before: Wed 05 Aug 2026 04:03:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58087
IP address blocks: 89.144.37.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:17:9d:7c:11:73:80:f4:19:5c:4f:fc:d7:e9:23:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 04:03:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b04997f6f4bcd93103df5aeba610e2ddf403f7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:4d:b9:05:80:7d:c4:b9:a5:30:6a:44:14:
ad:90:02:59:87:16:30:57:85:f3:80:cb:44:d6:48:
41:a7:2b:e1:84:cc:91:89:2a:53:af:99:eb:87:88:
5c:5c:16:05:e1:fc:6d:3d:76:8e:d0:22:b4:af:b2:
9d:df:08:f0:83:26:1b:ba:56:e2:f0:c0:6a:e6:c7:
05:50:94:ad:35:b1:7c:1f:37:78:ba:f5:73:68:26:
d7:b2:2e:c3:ad:fd:fb:6f:1a:3d:83:d7:3f:8d:29:
85:1f:9b:63:eb:cb:5c:d0:ae:20:5f:61:63:11:30:
ea:3b:0d:0d:84:db:ec:e5:5a:35:cb:d9:3d:cc:80:
42:c3:d4:cf:f7:84:c6:d3:f2:56:8b:25:9d:4d:7a:
42:94:4e:01:b3:37:b2:4f:fc:85:7a:c5:86:11:42:
2e:5a:42:ae:5c:6c:9d:f2:8b:f0:9e:f4:28:79:fd:
37:5e:fc:71:e4:79:8c:7a:f1:d8:04:16:dd:20:ea:
2e:72:41:d9:cd:70:40:2b:31:0e:15:d0:0f:61:23:
7e:01:1d:59:1c:01:0b:64:99:92:41:ce:f0:e1:17:
93:5c:32:82:14:d9:4b:08:3a:4d:05:a0:2a:86:9e:
45:2c:cb:e6:43:35:2b:c4:ff:68:1e:69:6c:9e:74:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:97:F6:F4:BC:D9:31:03:DF:5A:EB:A6:10:E2:DD:F4:03:F7:D9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sEmX9vS82TED31rrphDi3fQD99k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.37.0/24
94.249.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6c:33:cd:4a:6c:9e:37:49:cd:00:85:ad:cc:5c:b1:f0:b5:
21:ef:4c:43:35:2f:9f:73:ca:92:7a:e6:93:fe:f3:94:35:1f:
ac:3a:bd:8c:0f:fd:7c:79:be:4c:cf:dc:3b:c8:0c:4f:29:ba:
be:8c:6b:49:5a:9d:94:52:40:38:91:92:c7:aa:e2:3b:d5:ba:
63:88:3f:78:ba:3c:c0:e0:d0:f7:40:8b:dc:6d:1a:02:c1:c6:
3e:37:46:ff:8d:17:bd:e8:6b:e3:fc:19:26:b5:c9:e4:8e:04:
3f:fc:fc:1a:25:da:f4:fb:b4:07:17:d7:14:37:cf:de:5d:97:
fa:44:a1:23:ed:18:60:9d:ff:68:9c:34:d7:6a:3a:b2:25:f7:
5b:28:75:92:8c:0f:e4:36:19:1a:df:7c:0c:78:83:c4:d8:9e:
08:71:ea:d9:21:1b:a6:fe:0f:18:6b:50:25:87:f5:bb:33:f3:
82:5a:1d:4d:09:a8:f4:01:dc:58:45:10:17:88:d5:90:7f:3e:
66:c4:3b:4f:6c:4f:d8:4f:8c:b8:9e:21:71:2c:30:c2:47:7c:
a8:41:86:a0:91:21:f4:8f:ca:de:9a:71:45:8c:32:76:b5:7a:
88:83:f7:bb:e4:0a:e4:5b:8b:ee:a0:44:70:48:2c:dd:eb:cb:
6c:c3:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:56 2026 by rpki-client