Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/eK9OmboXC5uvrtJ3b6BpcC1GS30.roa
File: eK9OmboXC5uvrtJ3b6BpcC1GS30.roa (raw, json)
Hash identifier: YjvptjokdNhdeY1Kb6nYvQci4/asTAZHpZOJ5uFvMUw=
Subject key identifier: 78:AF:4E:99:BA:17:0B:9B:AF:AE:D2:77:6F:A0:69:70:2D:46:4B:7D
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F0292B3692DAEAAFDB2CC9B3985D1CCA1
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/eK9OmboXC5uvrtJ3b6BpcC1GS30.roa
Signing time: Fri 26 Jun 2026 06:16:36 +0000
ROA not before: Fri 26 Jun 2026 06:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:92:b3:69:2d:ae:aa:fd:b2:cc:9b:39:85:d1:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 26 06:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78af4e99ba170b9bafaed2776fa069702d464b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:31:de:d7:a3:37:b5:61:e9:7a:40:95:82:
4b:f5:01:03:19:0f:99:1a:32:ea:6c:64:6e:37:e0:
e7:e1:2f:29:1d:4a:cb:d9:cd:8b:87:e4:4d:be:2e:
a6:37:55:d7:c2:27:63:dd:0d:01:1a:80:8b:39:b4:
23:76:16:62:61:e1:2a:0b:13:3c:c6:28:3d:10:b6:
b3:f6:ad:ec:7d:69:cc:5a:3f:f7:1d:8a:fb:d6:8c:
63:87:c6:f5:13:63:49:58:cc:b0:8b:f5:b6:ba:3c:
0c:16:13:95:bd:89:0a:25:dc:8a:1a:55:ef:9c:cb:
83:d7:51:78:f6:75:b9:1b:58:fd:7d:9e:68:4c:51:
b9:20:0b:14:d7:85:f6:38:a2:3d:e6:d4:54:9e:89:
13:e4:e3:ab:aa:e8:a6:c2:7a:09:af:19:5e:ad:02:
1e:25:b4:52:2d:14:af:7c:69:ca:2c:5f:58:f8:37:
71:93:9d:9f:57:c9:fa:ce:28:b3:42:9c:62:3c:7e:
f7:d7:f1:1e:bf:30:12:c4:ce:e7:f3:b5:d1:81:0d:
75:49:de:4a:1d:87:fd:83:77:9c:e7:bd:b9:1b:b6:
bf:60:9b:32:42:68:57:92:36:f3:e0:9a:b6:81:1b:
9c:f9:6d:60:7e:fe:51:19:78:f1:af:32:46:4b:cc:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:4E:99:BA:17:0B:9B:AF:AE:D2:77:6F:A0:69:70:2D:46:4B:7D
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/eK9OmboXC5uvrtJ3b6BpcC1GS30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:58:09:c8:63:58:f0:84:9c:d6:2c:aa:50:68:bd:0e:07:55:
1c:23:a3:79:1a:b3:95:d2:b1:64:55:bd:32:84:66:fe:03:9e:
a4:77:5c:4e:6e:8f:32:bd:33:39:0d:05:23:30:47:5a:b2:9c:
71:c1:32:7d:ab:09:ea:7c:1c:a4:ed:8c:b0:71:bc:9f:df:c6:
83:fb:12:c6:40:4c:23:23:a9:cd:05:ef:a1:6c:ea:92:45:29:
18:30:51:e1:1a:08:cb:8e:19:90:1e:60:23:bc:a5:b3:8f:3a:
40:72:50:76:bc:c0:4b:bc:eb:ba:bd:57:e5:d0:9a:32:61:6e:
4d:58:e2:4f:c1:b9:8a:32:79:8c:b7:21:c7:2f:1e:b6:73:b2:
b0:f7:e1:53:0d:f7:f8:6e:ac:f0:02:e8:96:96:72:a3:db:43:
f9:35:28:19:34:00:e6:93:df:97:76:17:3a:3f:5d:14:36:86:
32:da:6b:30:61:9a:70:a0:1a:5f:17:19:cb:25:26:60:23:b3:
c6:46:e3:aa:4e:e5:2d:ab:29:92:8f:d7:40:5c:74:3b:be:2e:
2a:b6:bf:92:e1:d5:59:6b:76:43:53:40:2f:35:13:31:15:f6:
43:00:79:43:f6:7b:d2:de:c7:ea:1e:c8:c0:1c:a1:1d:f6:bc:
12:d5:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:20:06 2026 by rpki-client