Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/utUevuDgeUoR1lotJkQ97MT4kgs.roa
File: utUevuDgeUoR1lotJkQ97MT4kgs.roa (raw, json)
Hash identifier: CAcQUSD5UZ7UYp1lsnetUmd02Owc41UKmuUVj4LtvGk=
Subject key identifier: BA:D5:1E:BE:E0:E0:79:4A:11:D6:5A:2D:26:44:3D:EC:C4:F8:92:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0EEA18E5572958734709034054BCB90C7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/utUevuDgeUoR1lotJkQ97MT4kgs.roa
Signing time: Tue 29 Sep 2026 19:26:00 +0000
ROA not before: Tue 29 Sep 2026 19:26:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219418
IP address blocks: 89.106.75.0/24 maxlen: 24
2a02:2fc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:a1:8e:55:72:95:87:34:70:90:34:05:4b:cb:90:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 29 19:26:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad51ebee0e0794a11d65a2d26443decc4f8920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:bc:c2:60:e5:29:be:48:1a:1f:f5:d0:fb:
d5:dc:3f:1c:8f:95:71:eb:81:01:71:e1:dd:8f:0d:
92:1e:19:ab:0c:9c:cd:b0:8e:3d:88:d9:5b:7d:9a:
9a:64:ca:9a:69:05:aa:3a:a1:f3:e6:2d:1c:80:71:
50:0e:88:99:5f:c5:46:ae:f1:2a:79:f8:39:7a:d7:
bc:fc:eb:87:97:3e:64:de:53:96:9e:11:d9:60:a6:
56:8b:50:b4:5d:1c:c1:3a:37:91:e9:f0:97:f3:a0:
ab:73:4c:18:92:8f:32:a9:72:39:be:56:de:46:02:
01:86:3e:8b:2e:1d:60:5b:c8:dd:be:b6:0d:f6:ad:
7f:cf:8c:eb:62:f4:7c:de:99:bd:84:50:39:59:51:
06:49:30:0d:01:37:12:da:c5:60:d4:14:84:f6:f9:
40:25:a3:2f:3d:d1:b9:74:1b:53:80:bc:f2:5d:04:
06:f3:f8:ce:90:77:60:9c:45:2b:10:05:17:8a:a3:
d6:b6:a1:40:cc:77:9f:3b:ff:45:76:39:24:84:4f:
a2:5e:14:ff:35:00:29:38:23:25:1e:95:6d:7f:0c:
1f:a8:2c:c7:9e:39:d7:da:f7:95:2b:0a:60:77:2f:
57:ec:2d:d3:2c:78:1c:74:18:65:d8:04:a7:fc:75:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:1E:BE:E0:E0:79:4A:11:D6:5A:2D:26:44:3D:EC:C4:F8:92:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/utUevuDgeUoR1lotJkQ97MT4kgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.75.0/24
IPv6:
2a02:2fc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
0e:3e:96:00:53:4d:28:10:b1:31:40:57:67:58:12:a2:e4:90:
f8:cd:5c:16:36:db:d5:db:cb:cd:72:18:1c:13:0d:ba:90:35:
cd:22:9b:f6:b8:bb:32:6b:c7:a9:ee:3a:aa:21:5c:2a:a2:98:
34:2b:bb:23:89:13:26:45:31:63:2d:db:99:48:a9:cc:63:e8:
cf:72:89:c1:90:50:a4:81:ab:e4:4d:1b:e8:13:3d:68:92:21:
3b:0a:4c:61:d7:7e:f1:2e:a1:39:19:77:ad:2c:3a:2d:87:98:
bd:90:40:2e:e3:be:36:85:fb:3f:95:7f:08:59:2c:1e:bb:2f:
af:ce:2d:ce:a0:70:39:88:be:33:4f:d1:a5:5a:fa:d1:63:3b:
1d:b1:6c:b9:8b:e7:21:b1:84:27:9a:83:15:4a:dd:70:01:34:
2f:78:25:3a:f8:8e:47:01:7b:d3:00:68:04:0b:f4:e8:5e:20:
eb:59:a6:bf:02:f3:5c:0d:ed:15:c8:3d:d4:8b:d0:74:ee:dc:
84:20:db:7f:1f:2b:4f:e7:4e:2e:0e:0c:15:8e:69:05:9f:f4:
f4:01:2b:f6:b8:f9:7c:5f:fb:d8:01:62:ad:77:2c:41:a4:82:
40:95:bf:e9:3b:73:64:96:c5:a5:5b:f8:c1:d1:71:56:35:7a:
35:17:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:17:08 2026 by rpki-client