Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/89WPlfkkc05_6rSyYr01d6iL07s.roa
File: 89WPlfkkc05_6rSyYr01d6iL07s.roa (raw, json)
Hash identifier: qZxALk2fLy2ASMVHpfE7WhY50o6yK3WVbwwYzlaY3Gg=
Subject key identifier: F3:D5:8F:95:F9:24:73:4E:7F:EA:B4:B2:62:BD:35:77:A8:8B:D3:BB
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F1EED1CEBB06FB07D264B2AE8AD76F548
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/89WPlfkkc05_6rSyYr01d6iL07s.roa
Signing time: Wed 01 Jul 2026 18:24:43 +0000
ROA not before: Wed 01 Jul 2026 18:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219378
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 128
2a0e:4005:ff10::/48 maxlen: 48
2a0e:4005:ff12::/48 maxlen: 48
2a0e:4005:ff13::/48 maxlen: 48
2a0e:4005:ff20::/48 maxlen: 48
2a0e:4005:ff41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:ed:1c:eb:b0:6f:b0:7d:26:4b:2a:e8:ad:76:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 1 18:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3d58f95f924734e7feab4b262bd3577a88bd3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:12:65:46:95:c9:a5:e8:3d:51:e8:d4:e5:
44:f8:60:32:9c:79:88:71:0d:1a:33:06:4c:94:75:
04:c5:61:1b:4c:f5:69:f1:da:1a:2b:99:9d:5e:a7:
9a:ba:80:50:6c:bc:36:af:3c:a9:fb:9c:b8:96:0a:
78:04:79:a8:bc:e8:55:0b:42:e2:05:2a:47:df:df:
fe:a4:bd:2a:08:17:5a:67:27:d7:cb:f1:70:d8:0f:
99:3f:8b:79:26:d1:b8:a8:e6:09:4b:ce:15:9d:9b:
66:cc:0b:b4:e1:58:78:8f:75:31:82:b5:6d:05:20:
53:3e:c1:10:76:4a:9d:b9:01:18:62:e4:4a:6d:b6:
b5:43:9d:d3:f7:b8:97:26:9a:f8:99:13:e3:28:d4:
ae:9f:14:08:9d:ad:bd:69:78:a7:6b:f2:a6:1b:d8:
07:4e:2f:6f:70:88:20:77:60:0a:61:64:ae:87:3e:
1a:e2:45:1f:9c:ba:8c:6e:5d:7b:ca:cf:26:27:f8:
79:ce:ba:87:b1:82:35:42:76:58:a9:47:0a:7b:ee:
ee:68:50:9c:f0:a3:4e:d2:c1:85:11:26:38:24:dc:
4f:7c:30:50:75:49:f9:50:ce:04:9c:38:81:ad:16:
5d:1a:68:22:10:82:77:82:3d:f6:f8:0a:a5:29:09:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:8F:95:F9:24:73:4E:7F:EA:B4:B2:62:BD:35:77:A8:8B:D3:BB
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/89WPlfkkc05_6rSyYr01d6iL07s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
1b:ac:ca:8a:10:4e:ce:7f:c7:c8:8d:5d:16:20:f1:59:2f:de:
4d:d4:2c:40:c8:0c:3e:93:a8:3f:db:6f:06:ab:de:0a:4e:d5:
f0:60:71:a7:96:87:e3:c8:d7:27:e7:26:4d:1e:8d:aa:72:d4:
58:01:95:cc:5a:df:3d:ee:66:37:2f:b6:e1:3b:e8:f0:f8:68:
11:d6:f0:ae:fd:24:d5:47:fe:de:97:20:2c:9c:9a:82:d9:5c:
d4:7f:28:49:a5:6f:f9:50:82:8d:07:b9:c4:34:c3:96:c6:e8:
79:a8:21:ec:19:1b:1b:a5:54:90:6a:fd:d5:28:55:41:16:34:
9f:7a:d0:77:16:7f:ed:83:7f:c0:76:06:99:d4:e8:e3:cd:5e:
11:3b:bd:a8:5d:ec:fe:ec:d8:0b:39:e8:e3:c2:b1:6c:68:40:
42:af:cc:29:9d:34:eb:13:70:1b:03:4f:63:97:15:1a:fe:ed:
83:68:a4:6c:49:d8:0c:70:31:1e:30:20:1b:96:85:a3:3e:1d:
36:ac:ad:4f:6b:b7:58:22:e2:ab:ac:bb:dd:e8:eb:26:1c:91:
e9:3a:01:52:98:08:ad:35:14:d1:b6:f2:64:13:9b:83:4d:ad:
a5:50:f0:a1:4e:6a:74:10:81:80:b5:58:5a:72:86:96:20:f5:
53:b9:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:40 2026 by rpki-client