Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/iApuGi_yN70ddsneitWgGIBzS7Y.roa
File: iApuGi_yN70ddsneitWgGIBzS7Y.roa (raw, json)
Hash identifier: BZeCu7LtSac48EJr+KAGSTcuzr5rIu5wtwXlCgLUmOU=
Subject key identifier: 88:0A:6E:1A:2F:F2:37:BD:1D:76:C9:DE:8A:D5:A0:18:80:73:4B:B6
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0E20E7BB53EA56BB2DE1C19BDDF08528D
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/iApuGi_yN70ddsneitWgGIBzS7Y.roa
Signing time: Sun 27 Sep 2026 08:49:55 +0000
ROA not before: Sun 27 Sep 2026 08:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153997
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:0e:7b:b5:3e:a5:6b:b2:de:1c:19:bd:df:08:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 27 08:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=880a6e1a2ff237bd1d76c9de8ad5a01880734bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:b3:05:65:5e:3a:ad:64:61:2e:39:5e:a2:
a2:01:5a:36:63:ed:17:f7:cc:52:dc:94:b5:9f:36:
33:98:e4:cd:b4:71:64:c8:88:7c:a5:da:83:a8:56:
85:8b:ce:ed:c5:a4:63:59:eb:64:c2:a3:dc:70:39:
61:20:b9:1a:47:8a:51:98:8a:4e:e2:da:9b:ae:fd:
09:de:44:e9:f0:e3:72:1a:19:d0:73:20:c4:00:db:
85:b1:b0:fd:78:d5:f9:90:14:1d:1e:59:63:68:31:
f3:db:8b:21:20:d5:14:b8:31:25:14:cd:e3:76:16:
bb:ec:24:e0:f3:b9:ae:a2:69:be:55:f5:65:d0:bc:
a7:85:6d:d8:2a:16:3a:41:80:45:18:bf:64:9f:85:
70:fc:32:ed:7c:c8:ff:57:25:8c:92:5a:14:8b:93:
25:91:75:c1:fa:8d:97:7a:d8:21:37:26:40:4d:60:
80:b0:f6:85:89:77:d3:85:67:3d:8b:40:c6:99:fd:
90:14:6a:62:14:eb:b0:d6:ab:3d:d5:c9:3d:0f:de:
e6:20:4f:7b:b0:e7:4e:5f:2a:98:00:d9:e9:83:d2:
de:b9:bd:44:49:37:52:7d:99:c4:5e:e5:b4:96:ff:
cc:9e:02:f4:a1:db:6b:0d:d4:f4:aa:3b:cd:05:81:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:6E:1A:2F:F2:37:BD:1D:76:C9:DE:8A:D5:A0:18:80:73:4B:B6
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/iApuGi_yN70ddsneitWgGIBzS7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8e:4a:66:08:80:cc:8b:e5:c7:52:55:e0:39:87:74:25:95:
07:62:37:17:15:69:f3:ad:9c:1f:92:d4:73:19:98:06:a3:bb:
1a:a5:38:f6:b8:06:1f:ab:5d:ed:82:17:4b:1f:0e:c7:cb:53:
39:aa:7e:17:13:9b:2f:ba:7d:38:2d:11:88:b5:31:2e:ba:8a:
06:a2:76:58:02:34:64:a3:c4:dc:2a:01:8c:56:40:2e:14:ba:
58:81:8b:1f:78:ca:5e:3f:69:69:83:d6:af:76:c0:de:b0:5d:
7e:80:5c:ea:dc:e0:b0:9a:db:e1:bb:46:04:f1:c1:f2:f5:5f:
63:7e:56:ee:f0:02:46:20:89:5c:d8:ac:4e:75:0c:1f:05:fb:
7c:b4:f9:49:32:f1:7d:3d:b6:01:04:c4:3f:b7:1c:be:d0:59:
3e:36:40:dc:4e:e2:3c:14:e8:d1:52:25:0f:9b:89:24:f7:1e:
ce:41:53:94:36:17:bb:01:a1:02:86:b0:03:29:9f:eb:08:eb:
c8:24:db:1f:74:e1:bc:20:ac:80:23:83:8d:b1:dc:5e:99:94:
9b:0f:41:d7:ed:f3:58:55:2f:19:e9:b7:11:74:37:c6:99:35:
62:26:2c:90:1b:1f:f1:15:6b:76:52:1a:b8:b0:a6:c6:32:53:
6d:c2:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:30 2026 by rpki-client