Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1A91pKpU9I7Mk_GUkXNgnpdItF4.roa
File: 1A91pKpU9I7Mk_GUkXNgnpdItF4.roa (raw, json)
Hash identifier: RzD4XipS3griymwGTJoGcFd/jAQjBj35UT0RuFVQLmU=
Subject key identifier: D4:0F:75:A4:AA:54:F4:8E:CC:93:F1:94:91:73:60:9E:97:48:B4:5E
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F0292B31EFE15BB70DBA3F3AD4AE3B4B7
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1A91pKpU9I7Mk_GUkXNgnpdItF4.roa
Signing time: Fri 26 Jun 2026 06:16:36 +0000
ROA not before: Fri 26 Jun 2026 06:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.82.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:92:b3:1e:fe:15:bb:70:db:a3:f3:ad:4a:e3:b4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 26 06:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d40f75a4aa54f48ecc93f1949173609e9748b45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:5b:aa:ec:ac:01:ae:3e:50:8d:b3:0b:0a:
5f:b9:b5:40:bc:1a:f9:57:da:4f:52:4e:89:0b:c9:
c6:64:4f:ea:1d:42:f0:bd:33:1a:c0:64:03:8b:f1:
49:78:4d:79:bc:a0:41:0e:4c:7d:07:dd:1c:03:2a:
4d:9f:8c:83:f4:fd:d4:ae:f6:d1:b0:0f:19:89:cb:
54:28:f7:53:7b:45:0a:40:fb:ae:ba:42:d7:42:14:
82:cc:7d:da:5a:85:dd:73:de:0f:b0:8c:f0:3d:9c:
6f:a6:4c:78:61:36:e2:be:a7:c5:23:b3:35:08:dc:
51:de:5e:fa:83:6d:3f:f1:13:ee:c3:f1:31:46:bd:
8f:41:0e:4e:db:74:a4:a7:26:64:f1:40:20:4e:65:
ee:ff:22:6a:74:42:55:ba:52:c2:2c:61:03:f0:03:
4f:96:f2:19:22:84:0f:f2:b9:a9:99:6f:4c:60:ed:
84:2a:32:b1:b2:c9:ec:d5:54:d1:4f:17:9b:f5:8b:
de:4a:30:31:a0:30:ed:c1:78:68:56:45:50:e8:ea:
9e:61:e7:b1:c1:14:85:d0:64:d4:cd:df:11:f0:1c:
26:5e:f8:6a:f5:a6:ae:37:9d:a0:90:9d:7f:ca:b3:
5f:4c:48:88:53:dd:d0:9a:b5:54:03:1b:20:90:4e:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:75:A4:AA:54:F4:8E:CC:93:F1:94:91:73:60:9E:97:48:B4:5E
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1A91pKpU9I7Mk_GUkXNgnpdItF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
89.23.93.0/24
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
48:55:bf:e2:ac:c2:9e:b5:83:89:eb:a5:b3:79:6f:d5:3a:b5:
b8:62:29:7f:87:89:ba:82:17:39:08:4d:df:30:19:2d:6a:55:
eb:da:08:9e:64:b5:58:6a:55:02:fe:62:5a:47:d4:86:e9:28:
5b:3a:32:32:8b:bb:18:82:0e:94:1b:4a:b3:f8:1c:18:c1:1e:
cd:a1:6c:c7:d7:6c:44:82:79:27:a0:f5:4f:31:76:c6:07:14:
df:71:8b:9a:6d:e8:2e:2f:84:ed:76:0d:fa:e0:57:d5:ff:c3:
3f:e4:df:ae:ea:0c:9c:91:dd:e5:3c:48:45:8c:0d:e6:09:d1:
f5:0e:e0:cc:7f:9b:52:e6:a7:4a:67:f2:75:9b:33:f8:b0:18:
c1:c7:77:cc:f9:03:80:0e:84:db:b3:11:13:ef:9c:59:cc:3c:
82:10:6e:fe:e0:03:f5:3d:b3:cb:65:4c:02:a7:db:31:2a:64:
11:89:00:64:25:02:e1:ea:5c:00:f1:62:e7:08:81:89:f9:32:
16:4f:ed:8a:34:2e:30:16:ad:10:3e:ea:8e:71:7e:29:87:45:
b5:f0:73:53:1c:88:ec:16:2f:6e:51:86:71:ed:34:06:ba:43:
11:40:5d:a7:1d:0c:2f:59:73:12:29:64:35:f4:1b:cf:b7:16:
d8:9b:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:07 2026 by rpki-client