Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/TYrgPZ844i3feIDl8HWkmHvPUJs.roa
File: TYrgPZ844i3feIDl8HWkmHvPUJs.roa (raw, json)
Hash identifier: /i/GkETlI0JbPMhOv4pwFF15e42Fx6N5ElCkjHF46RE=
Subject key identifier: 4D:8A:E0:3D:9F:38:E2:2D:DF:78:80:E5:F0:75:A4:98:7B:CF:50:9B
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A1154A811596C68D8F6EB5C37769A533F6
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/TYrgPZ844i3feIDl8HWkmHvPUJs.roa
Signing time: Wed 07 Oct 2026 07:36:06 +0000
ROA not before: Wed 07 Oct 2026 07:36:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 89.23.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:4a:81:15:96:c6:8d:8f:6e:b5:c3:77:69:a5:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 7 07:36:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d8ae03d9f38e22ddf7880e5f075a4987bcf509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:99:60:31:3a:36:fc:1a:d5:ca:10:d4:18:
32:33:b3:66:b5:94:26:89:84:4e:45:28:ab:fb:1d:
16:42:58:d8:d2:4a:16:b9:b4:be:f2:84:ea:4f:91:
0b:70:ef:9c:1e:6e:b6:1f:9a:cb:8e:cf:34:32:a1:
8e:e4:1f:0c:dd:64:a9:b7:e6:80:00:e2:2a:fa:89:
56:5d:68:72:c7:21:91:13:5d:32:76:55:a5:5e:60:
92:b8:8c:f8:58:7f:fe:b1:5e:b6:60:f4:e9:51:a7:
7c:68:cb:1c:7d:2b:bf:30:f8:7e:be:2f:01:bf:f5:
7c:15:da:23:37:77:74:87:3d:69:7c:3d:b3:a0:22:
3a:6c:fe:2a:3a:4a:f1:05:25:9d:7f:ad:02:49:10:
77:e2:a7:e1:ed:0a:ef:d8:26:e5:a2:31:ae:2b:61:
2d:ed:c7:fa:dd:ec:b3:a3:7d:73:74:1b:bd:a3:dd:
6d:3e:ea:76:1d:0b:f1:b1:af:3b:43:37:6f:be:a3:
dc:a9:0c:63:dc:80:b9:be:22:bf:fb:16:2a:ff:54:
d2:14:e0:1a:af:5f:38:d5:37:da:1c:da:e2:0d:41:
38:51:38:4d:5e:e8:a5:2d:9e:5b:b8:17:a2:22:b8:
f5:b4:9d:96:21:be:c5:b5:37:36:9d:16:16:bb:b9:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8A:E0:3D:9F:38:E2:2D:DF:78:80:E5:F0:75:A4:98:7B:CF:50:9B
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/TYrgPZ844i3feIDl8HWkmHvPUJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ca:01:43:26:0f:dc:5e:75:cd:37:0b:91:e7:dc:ae:4c:96:
71:c2:df:16:d5:a6:df:72:48:7f:1a:fd:52:94:06:cf:46:53:
ab:e3:d5:6f:b1:59:dc:2c:dc:f7:ef:19:18:ca:d1:4c:c0:54:
66:60:7b:1f:9b:22:b4:51:d8:6d:d8:49:d5:2d:ae:b2:76:ce:
9d:ac:3c:3a:2a:ae:2c:c1:91:18:b4:00:01:8f:6e:d1:1f:6c:
99:ec:2f:8f:9e:ce:3a:63:ee:bc:59:33:77:c5:16:5c:5d:02:
32:97:64:78:47:fb:ff:2f:7e:42:a2:c5:63:50:32:0f:1a:93:
39:a0:35:0a:74:56:94:d4:01:25:46:34:ff:07:5f:21:4c:04:
a9:1a:2c:74:d3:6a:2f:72:11:41:44:98:b1:77:59:57:a1:43:
52:a2:82:64:7b:2f:d8:12:cb:27:1e:31:e8:70:4c:3a:89:e7:
6e:aa:95:1c:ea:33:e0:82:6a:37:93:c2:c0:0c:f1:ba:28:26:
d6:02:31:28:ce:28:f6:92:48:f3:f4:e5:a8:26:61:21:e1:3f:
71:bd:96:8d:57:8b:9e:8b:67:c0:2e:36:b3:73:1b:97:90:a4:
2a:00:f1:e4:c3:24:ee:9f:c0:7f:b1:8e:84:3d:ed:9d:22:7f:
c0:d2:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:56:33 2026 by rpki-client