Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/USCyYDc9_jmWAHBSYh19MgBqXGQ.roa
File: USCyYDc9_jmWAHBSYh19MgBqXGQ.roa (raw, json)
Hash identifier: hdm8LQv+BTww9kaSC0fYI2NEBibovRqnxFvsoiWELbg=
Subject key identifier: 51:20:B2:60:37:3D:FE:39:96:00:70:52:62:1D:7D:32:00:6A:5C:64
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0EC3B35E811E443A3B5D6802AC02D612E
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/USCyYDc9_jmWAHBSYh19MgBqXGQ.roa
Signing time: Tue 29 Sep 2026 08:14:58 +0000
ROA not before: Tue 29 Sep 2026 08:14:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.93.0/24 maxlen: 24
89.23.94.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:3b:35:e8:11:e4:43:a3:b5:d6:80:2a:c0:2d:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 29 08:14:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5120b260373dfe3996007052621d7d32006a5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:6d:b5:fd:65:52:90:3d:c9:32:44:cf:df:
ff:d0:c2:52:37:67:dd:95:13:c7:d3:e2:8b:71:18:
a4:05:3e:03:44:b7:f0:b0:e1:5e:a9:72:95:ef:a9:
28:77:9e:3d:c1:39:4d:1a:c5:e3:c4:b4:33:b2:e9:
b9:c4:e0:0d:61:3a:14:30:ef:b1:f5:08:21:49:07:
07:67:3e:22:e5:cb:a8:6c:07:16:c7:67:ad:51:d2:
c3:4a:7d:46:b4:a7:b4:95:dd:55:01:a7:d5:00:69:
af:d2:3a:04:47:ec:62:5c:61:77:c6:ff:9e:b7:e5:
d8:4a:83:59:a7:03:a2:97:4a:e2:b8:bb:6e:5b:f5:
78:0d:9d:7b:7d:15:d6:c6:f3:83:23:af:59:a2:be:
a2:a6:e4:ab:ed:fe:58:5c:6a:06:0e:6a:ac:e3:38:
3d:76:e7:c4:b2:70:ec:f3:86:36:a9:14:f3:f0:08:
b0:31:81:ce:91:51:1b:77:df:cc:86:7a:c2:6c:e8:
e3:52:c4:5b:17:4b:5b:af:95:b2:ca:dd:30:f2:e0:
b6:73:e9:2f:98:01:b7:be:97:12:4e:dd:f8:27:ab:
00:24:8b:ed:86:c9:58:c1:5e:4a:3a:d5:1e:78:3e:
4c:7c:32:ed:f7:ef:ac:1d:10:ec:47:37:f8:3e:44:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:20:B2:60:37:3D:FE:39:96:00:70:52:62:1D:7D:32:00:6A:5C:64
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/USCyYDc9_jmWAHBSYh19MgBqXGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.93.0-89.23.94.255
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4e:76:f1:ed:37:0b:6f:d1:45:6f:e2:40:d3:1d:84:e6:7d:
bf:25:91:6d:a4:fd:0b:2b:70:33:58:41:85:36:1b:03:52:98:
e8:fc:f7:37:4d:44:da:ca:93:35:20:c7:df:93:13:58:31:56:
a4:c2:5b:14:2a:40:63:b8:3a:dc:86:ea:1b:d1:df:50:70:68:
bd:b0:59:86:09:47:68:b3:50:ba:bc:87:19:1f:a9:52:d7:4b:
d1:eb:78:35:b4:32:ec:7c:86:d4:18:bc:c8:b5:9d:db:1e:22:
75:34:53:56:35:7f:bb:f6:de:1e:aa:70:ab:bc:a0:c8:17:1b:
f2:17:ab:a2:d6:05:8f:e7:a1:01:fe:fb:f4:7f:f2:50:f1:a1:
64:54:94:13:a2:8a:64:0a:ff:9e:80:b8:ed:ed:64:25:8d:3c:
90:ea:b0:7f:9b:2c:8a:2c:41:b3:ab:1a:94:72:2c:6f:5b:55:
2f:79:ab:80:27:d2:e8:61:eb:a8:b2:98:46:50:8b:34:a7:75:
99:7b:af:55:c5:26:e9:db:62:10:22:77:e6:b3:a3:a8:2c:bd:
47:63:a2:01:6b:fc:d8:fe:30:be:4e:69:7b:12:a3:4a:89:3a:
33:7c:e9:6e:58:d7:c5:59:6a:6d:a5:84:9a:90:1d:fc:9e:37:
ac:3b:03:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:00:18 2026 by rpki-client