Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1-GmG7rJmJled8NhgeYFDUrtZ2YA.roa
File: 1-GmG7rJmJled8NhgeYFDUrtZ2YA.roa (raw, json)
Hash identifier: h+B7wK6ShNDo1djuGRnv6Wkp+vBr7avEhkLC8qD62BU=
Subject key identifier: F8:69:86:EE:B2:66:26:57:9D:F0:D8:60:79:81:43:52:BB:59:D9:80
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A05D1DD9E70CF1E9EC97EED1A0FCDC90BD
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1-GmG7rJmJled8NhgeYFDUrtZ2YA.roa
Signing time: Tue 01 Sep 2026 13:17:12 +0000
ROA not before: Tue 01 Sep 2026 13:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1d:d9:e7:0c:f1:e9:ec:97:ee:d1:a0:fc:dc:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 1 13:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f86986eeb26626579df0d86079814352bb59d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:6e:b1:de:09:f6:b2:a0:98:2c:20:7a:8d:
b8:95:89:a5:d5:7c:a2:d0:3a:b6:88:cf:f3:51:cc:
d2:a1:af:67:71:8d:de:e6:34:70:1e:3b:f9:7d:17:
ab:b9:a6:43:5d:54:52:59:ab:24:70:44:a9:6a:92:
a0:76:3a:86:08:84:de:28:90:52:3a:cd:61:c0:ec:
8d:ea:db:69:ec:d2:a5:ae:0f:95:0d:d9:13:4e:37:
b9:05:df:85:d0:63:e6:79:ef:0e:4c:24:1f:b5:e8:
44:c9:2d:01:92:39:ab:e2:d4:f4:60:5b:fd:00:9e:
0e:6e:20:78:4d:be:aa:ad:e1:bb:e0:18:b8:49:2d:
59:70:18:bd:12:1d:1c:e8:fe:c2:73:a6:18:89:e0:
fd:a9:fa:70:57:3f:78:41:76:e5:f7:e3:69:ad:72:
ab:f7:81:c7:09:65:5a:d7:7f:fb:16:c4:2c:e9:52:
22:81:95:02:ed:59:0f:63:8b:68:f5:d7:5b:29:72:
17:5e:2b:e9:f2:23:8b:a4:b5:41:23:f7:d1:28:21:
a6:f7:0c:88:df:1c:0f:0d:55:15:3b:e0:fe:39:6d:
c0:a5:86:b8:ea:32:68:f5:8b:6e:76:70:de:c8:64:
e2:8f:7f:bb:73:f1:ea:01:04:14:36:39:32:90:92:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:86:EE:B2:66:26:57:9D:F0:D8:60:79:81:43:52:BB:59:D9:80
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1-GmG7rJmJled8NhgeYFDUrtZ2YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
29:83:79:e5:ed:fb:16:55:32:9b:79:62:18:93:a1:05:80:63:
1c:b9:4b:1a:35:b0:69:a3:fe:9b:2c:8f:66:bb:be:15:3a:02:
c0:36:df:e4:7b:b8:26:fd:43:f5:5b:7e:07:e0:84:c6:6f:73:
0a:45:d2:64:20:f2:44:70:85:3c:68:39:e7:85:12:74:a8:39:
97:7b:7b:6b:88:e2:a5:87:43:ca:33:e6:86:05:10:63:1c:aa:
44:9a:56:6d:eb:6d:82:67:78:01:12:9f:f8:fe:4f:e5:f0:e8:
d7:9f:a2:f7:b2:13:d0:7f:94:b9:f7:ba:c0:65:81:ea:6a:80:
cd:04:3f:8e:52:00:76:a8:26:95:d0:db:7f:2b:fd:a1:7c:de:
13:ff:f5:a8:c9:79:ad:a6:36:91:cf:18:30:7c:2b:da:dd:d1:
3e:34:8d:4f:23:33:23:ed:65:2b:7a:da:b1:1a:1e:9b:7c:c9:
de:aa:41:36:af:da:ae:02:2a:64:1c:bd:36:e1:10:dc:a7:ca:
16:c3:36:79:c0:40:2d:fa:30:3a:5e:d0:96:23:79:b0:d1:3c:
a4:99:d4:d8:cc:81:aa:c4:21:0e:da:fe:98:30:6f:b6:0d:90:
fd:6e:3b:2a:70:53:e9:7e:32:a1:d2:4e:a4:fd:70:a7:df:0a:
14:87:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 05:22:57 2026 by rpki-client