Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dSJnVGiL9mGiGKWlKzGvFN2NkZc.roa
File: dSJnVGiL9mGiGKWlKzGvFN2NkZc.roa (raw, json)
Hash identifier: Js0p9KSJdrUD9Kz9ywxzaAdr08VBoHP5hakQURk2tgc=
Subject key identifier: 75:22:67:54:68:8B:F6:61:A2:18:A5:A5:2B:31:AF:14:DD:8D:91:97
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019CB8618E4EDADFEE51ACB36901B43C6E0F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dSJnVGiL9mGiGKWlKzGvFN2NkZc.roa
Signing time: Wed 04 Mar 2026 10:25:26 +0000
ROA not before: Wed 04 Mar 2026 10:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 89.21.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:61:8e:4e:da:df:ee:51:ac:b3:69:01:b4:3c:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 4 10:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75226754688bf661a218a5a52b31af14dd8d9197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:d1:ad:64:a6:45:b9:4b:a5:89:ed:b1:c3:
3a:ed:d7:74:87:9d:b8:1d:4f:8b:41:cd:c7:dd:de:
95:8f:4e:11:66:1b:08:ed:2c:18:44:58:72:61:08:
e0:70:92:0c:a3:79:c4:98:f2:5b:6f:59:1d:6f:13:
92:d4:65:09:9f:dc:89:4b:2e:5b:fd:87:28:21:9f:
5d:76:c5:d5:ba:68:52:ae:eb:00:69:e7:3f:e6:12:
fe:95:99:18:5f:cc:92:47:69:0b:fb:37:8e:cd:76:
99:a9:b1:e2:e5:76:ce:fc:a6:17:c6:74:c8:33:28:
45:82:c6:01:d8:fe:c7:e6:71:fc:ac:62:05:91:a7:
33:e8:f6:67:80:06:f2:92:62:48:5b:70:c3:c8:fa:
15:04:96:91:c7:d3:23:5f:21:5d:b6:8e:1d:61:d5:
d5:49:73:90:04:3f:06:d1:87:e1:79:a0:1f:00:46:
68:22:a0:4b:51:00:7f:51:fa:5d:d6:a1:6b:e9:6a:
25:11:bc:4f:1f:26:37:ba:77:0e:e4:55:66:02:11:
8e:1c:c1:da:cc:cb:02:84:88:b7:89:18:83:bf:a6:
9a:a7:c6:76:c9:53:0e:68:23:96:ce:47:44:70:4b:
70:38:90:39:db:fa:b7:0b:6c:23:54:2d:8b:c4:11:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:67:54:68:8B:F6:61:A2:18:A5:A5:2B:31:AF:14:DD:8D:91:97
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dSJnVGiL9mGiGKWlKzGvFN2NkZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2d:26:fc:f8:a5:8c:4d:ba:77:ce:49:6e:5d:e0:97:a7:62:
ef:49:1b:d8:ae:a3:d2:37:a0:6f:a5:93:ea:27:13:39:a5:94:
44:8d:df:b9:ae:b4:13:16:8b:ed:8f:99:fe:11:81:f9:3c:c4:
73:cd:c3:0f:b3:f7:11:3d:50:4f:11:c9:1e:ce:8e:ff:04:71:
2a:44:70:51:3c:0c:77:1d:53:d6:15:14:53:52:ef:3f:1c:4e:
37:6c:d1:18:e8:ca:9a:53:6b:a7:c6:13:d8:b8:2c:00:98:d2:
fe:50:5e:f9:ba:3e:40:0a:29:52:00:cb:6a:e6:52:c1:d2:63:
60:cd:e4:0d:50:91:15:fc:b2:a2:5b:e4:7e:dd:db:8f:5a:11:
dd:06:64:9e:5a:6e:3b:f4:c7:4b:de:ad:d9:7f:61:ef:7b:c2:
74:47:d8:de:5c:8f:97:c8:67:b3:35:0a:ff:95:4b:c5:61:92:
5a:74:b1:31:94:7e:ab:2d:9c:b6:4d:38:c9:09:fd:59:e5:bf:
71:b5:97:b4:cc:1d:b9:5b:2e:fd:de:0f:10:a8:f7:f4:dd:15:
e5:4e:3e:68:f7:2d:c4:f1:79:ad:40:b1:9c:c4:a9:6a:1d:15:
ee:77:70:bb:f5:18:00:e9:45:9a:ef:26:cd:68:6c:d9:ae:70:
32:d3:92:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:43 2026 by rpki-client