Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tW40rr1Pntra6PPgqQAgkX5Z5Xs.roa
File: tW40rr1Pntra6PPgqQAgkX5Z5Xs.roa (raw, json)
Hash identifier: Qx0mkOtIV/lSjj4EYeb1L2TJSLzRTogUFVPwRsFgF24=
Subject key identifier: B5:6E:34:AE:BD:4F:9E:DA:DA:E8:F3:E0:A9:00:20:91:7E:59:E5:7B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0BE7A17C177757ADAE209697F6A9BFB84
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tW40rr1Pntra6PPgqQAgkX5Z5Xs.roa
Signing time: Sun 20 Sep 2026 11:01:07 +0000
ROA not before: Sun 20 Sep 2026 11:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219206
IP address blocks: 89.251.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:7a:17:c1:77:75:7a:da:e2:09:69:7f:6a:9b:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 20 11:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b56e34aebd4f9edadae8f3e0a90020917e59e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:34:8c:4d:53:36:66:f4:18:98:87:cc:da:
8d:ce:23:56:51:40:d2:38:b9:db:87:e9:bc:7c:f5:
38:4b:67:97:2f:e2:d7:6a:90:c4:4a:00:06:b2:43:
40:0b:4b:08:77:81:f2:9c:ba:d4:0e:68:6d:94:7c:
85:f9:9c:6c:3b:fa:db:31:97:14:44:62:85:f7:7b:
57:ff:c3:db:49:3a:5a:8e:02:7c:13:43:80:d2:d2:
6b:ef:47:8b:de:c8:00:71:33:a3:0a:6c:a0:b1:a2:
e8:a5:7f:56:dd:bf:f3:e3:dc:c6:03:cb:aa:0c:93:
2d:c0:d7:69:f4:e6:c2:3c:a9:01:0c:c9:58:0c:fc:
25:97:e7:6a:2a:5f:86:13:57:79:a7:c5:7b:b6:a8:
3d:31:96:2f:fc:7c:92:8a:90:24:e2:bf:d2:b3:1a:
3c:dc:39:77:b6:52:0d:01:06:d6:75:f7:7c:bc:29:
d4:42:63:40:8a:d4:8e:04:a2:dc:e7:b9:7d:94:88:
1d:19:a7:5c:d0:e9:89:78:38:4d:c7:d7:dd:73:0a:
61:7b:87:6c:16:d8:04:4f:11:a8:3a:16:18:d3:9f:
e3:8a:42:74:f5:fb:bf:9f:ff:bc:94:17:2a:bf:82:
76:42:ff:13:00:b7:54:8f:ca:87:f3:c3:98:3d:24:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6E:34:AE:BD:4F:9E:DA:DA:E8:F3:E0:A9:00:20:91:7E:59:E5:7B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tW40rr1Pntra6PPgqQAgkX5Z5Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f5:75:a2:f3:61:cc:78:92:15:ad:64:ee:15:82:52:c7:e0:
94:d4:36:97:5b:28:de:3e:86:4b:a4:a3:df:63:88:9b:36:b9:
91:c1:61:d4:b0:3e:58:97:6f:3b:54:1e:40:bf:05:b6:c1:07:
1d:f7:1f:8d:fc:40:e6:eb:08:2b:fd:e4:be:33:1f:1d:ba:0b:
f1:3d:cf:5f:f0:b5:6c:63:3a:a7:66:a4:7d:4b:5e:37:13:7a:
66:57:64:bd:3d:ae:25:24:90:17:e2:e6:27:83:15:87:9f:c9:
19:9d:7e:d3:fd:fa:18:c2:95:8c:00:52:17:89:51:6c:ec:fb:
1b:47:20:96:91:0e:3b:be:14:a8:3e:9a:91:05:87:1e:c2:f5:
6b:73:3c:5c:88:a0:f0:eb:72:b1:cd:3a:9a:ae:04:bd:59:ae:
0f:ce:24:0e:23:90:c1:54:94:01:45:00:43:ec:36:a3:7c:0d:
26:d0:06:18:7e:55:74:3b:79:13:fc:a3:9f:6f:ac:ac:8e:56:
d5:a9:cd:76:9d:eb:c2:26:19:55:78:8c:c3:c7:ae:4f:6d:82:
7c:38:af:2b:d6:30:f9:47:17:3c:fb:f2:a5:b3:56:9c:be:64:
3e:84:e4:03:16:7a:b7:9e:2d:29:db:c3:04:bd:95:ee:01:04:
3c:06:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:34:58 2026 by rpki-client