Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/c47FHa_pW7rAV2JZM1ESCUAR2UQ.roa
File: c47FHa_pW7rAV2JZM1ESCUAR2UQ.roa (raw, json)
Hash identifier: UxYUFF6M8U2kzRSRtegeMxbOpzj5C3T9onZcMOELSFI=
Subject key identifier: 73:8E:C5:1D:AF:E9:5B:BA:C0:57:62:59:33:51:12:09:40:11:D9:44
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019ECEE28BB3057D543B9CFA840753D1F1B9
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/c47FHa_pW7rAV2JZM1ESCUAR2UQ.roa
Signing time: Tue 16 Jun 2026 05:23:33 +0000
ROA not before: Tue 16 Jun 2026 05:23:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ce:e2:8b:b3:05:7d:54:3b:9c:fa:84:07:53:d1:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 16 05:23:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=738ec51dafe95bbac0576259335112094011d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:0b:95:6a:da:5c:3c:21:3f:64:a7:a2:d5:
2f:72:05:d0:91:7c:da:71:d1:f2:ef:7f:15:fb:94:
62:b5:d7:6a:b1:39:8b:e5:23:6b:ad:1b:19:5a:63:
f3:9d:70:78:a9:2b:40:fa:38:43:5f:23:d7:5d:ee:
5e:44:72:46:ce:cd:90:4d:3b:4e:cf:45:4f:61:34:
51:e5:e4:ef:3e:2a:75:0c:f9:8b:02:49:d4:90:b9:
26:a9:6f:cf:79:2a:4a:3c:1a:e1:08:cc:a7:34:9f:
02:52:52:24:c2:00:59:b7:15:2c:75:28:ca:d5:31:
bd:64:e2:45:ec:73:e0:d1:b2:a5:b4:b1:50:01:94:
70:e6:8c:a8:b7:2e:41:9d:ba:fb:1a:e0:a7:dd:32:
4d:59:46:a2:73:52:3b:f7:f2:75:0a:00:59:8d:2b:
eb:bc:e0:b1:0d:fc:15:a0:8e:b8:70:fc:44:29:cd:
84:15:a6:ec:bf:84:5c:a7:13:fe:15:61:d5:cd:f5:
89:e0:6e:c4:23:c0:8d:10:82:f1:10:82:70:96:98:
b5:1e:1d:b9:2a:b2:4f:a0:4f:55:51:45:22:bb:0c:
05:ae:f5:d8:2d:31:0e:17:79:77:e6:17:e5:70:a1:
9c:c2:81:23:3b:5d:86:16:6c:6a:a0:a5:ab:6c:af:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:C5:1D:AF:E9:5B:BA:C0:57:62:59:33:51:12:09:40:11:D9:44
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/c47FHa_pW7rAV2JZM1ESCUAR2UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
59:53:27:fe:a8:d0:bb:19:ed:2c:37:a5:5d:06:32:32:85:c0:
bf:9a:96:c4:bb:87:ab:2b:ce:35:85:63:42:ae:fb:d2:c1:9f:
13:0a:5a:f2:58:d0:fc:cd:66:87:1f:28:68:28:c4:01:1b:0c:
1a:56:e3:e0:77:28:e8:22:b3:e7:94:4f:03:a0:2b:2b:ba:6c:
6b:27:e7:48:a0:6b:10:cf:00:61:41:d5:0b:7c:4c:46:f7:20:
d8:f0:8b:f1:53:05:9f:ec:2b:a9:1c:66:73:4a:87:e3:53:67:
27:01:de:4d:68:58:7e:1c:49:b1:bc:56:88:cf:6b:b2:6b:b5:
51:8b:63:e2:be:df:f8:e0:d0:40:a0:9a:c1:d7:cf:a7:ea:3b:
7b:c0:15:87:a1:98:a2:65:23:04:00:63:99:e4:22:f8:f4:c8:
55:20:59:97:69:90:e8:e3:89:a0:49:5e:4d:16:8b:88:00:4c:
df:ef:92:99:d5:53:1d:26:90:52:15:9f:50:d3:4b:25:33:e9:
e6:c5:d8:37:fd:15:07:71:da:81:38:ca:82:5f:49:65:ad:74:
eb:4d:52:6d:9b:69:da:39:96:f4:41:26:94:3c:32:8e:6b:ee:
b5:3b:00:d0:81:29:6d:59:df:2b:a4:84:fa:f1:ba:8b:83:5e:
c9:3d:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 00:11:34 2026 by rpki-client