Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/qImnzIpgBL-dVquZAYp2GDz314Y.roa
File: qImnzIpgBL-dVquZAYp2GDz314Y.roa (raw, json)
Hash identifier: 6GMDFF9ShZwfpdHnLvVQ3bd6Lwk62X4yIC2jD4hAJPE=
Subject key identifier: A8:89:A7:CC:8A:60:04:BF:9D:56:AB:99:01:8A:76:18:3C:F7:D7:86
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A1BA74FCE168A6B060211C3AFC7BFA8D31
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/qImnzIpgBL-dVquZAYp2GDz314Y.roa
Signing time: Sun 08 Nov 2026 09:19:51 +0000
ROA not before: Sun 08 Nov 2026 09:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.94.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:74:fc:e1:68:a6:b0:60:21:1c:3a:fc:7b:fa:8d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Nov 8 09:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a889a7cc8a6004bf9d56ab99018a76183cf7d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:84:0b:88:5f:7f:7e:39:9e:d3:cd:02:1b:
74:59:8c:fa:28:77:0f:13:e6:74:bb:10:07:b7:3f:
ec:2f:29:a7:90:59:a0:ed:6d:15:ff:32:77:ec:78:
88:d2:ab:3d:82:ae:e8:7e:16:47:a5:d2:07:ed:d3:
96:11:c3:b1:94:f6:cc:fc:f6:c2:17:ed:5f:e1:4c:
8b:f0:92:1e:26:e4:03:b1:d4:df:74:84:9b:75:8c:
88:13:b5:44:51:a9:3f:28:f6:aa:07:df:74:51:c9:
52:3e:f1:54:0d:00:86:88:bb:7b:2b:11:61:22:cf:
66:68:9d:77:d0:41:4c:3e:b3:0d:e5:0a:d3:e4:84:
23:65:8b:68:71:8d:40:4d:a0:a2:e9:f3:7f:ee:be:
3c:c1:9d:d2:de:20:16:f6:9f:dc:a4:51:2f:85:ee:
8f:62:e2:08:f0:54:5a:7b:5b:f9:75:90:38:be:e0:
45:1d:ab:12:fc:5d:c5:b2:54:22:40:02:5c:09:a1:
1f:90:ca:92:8e:e5:fc:cc:12:1c:15:01:82:d0:ed:
2b:85:9d:23:32:b2:1b:b6:fb:6e:0a:78:31:7d:01:
12:a9:9a:ce:f1:a7:b8:0c:67:42:7f:52:a2:c6:4a:
e9:50:e1:64:30:8b:10:01:96:27:ee:c7:76:cb:d1:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:A7:CC:8A:60:04:BF:9D:56:AB:99:01:8A:76:18:3C:F7:D7:86
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/qImnzIpgBL-dVquZAYp2GDz314Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.94.0/24
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6b:77:f8:41:b0:2f:38:54:21:b1:b8:c6:3a:fd:7f:a8:6f:
c1:7d:81:6c:0d:8b:4f:73:b4:8f:ea:39:01:b5:08:3f:02:b8:
bc:f9:06:1d:84:3a:d6:14:96:3d:1b:fd:52:e2:9c:f5:2c:d3:
43:dd:e8:e7:19:5f:77:51:bd:06:11:85:4b:d6:ff:f3:3d:5d:
5f:89:4c:c4:17:68:55:f4:f8:3b:37:ec:50:9a:49:12:d4:5b:
7a:dc:52:40:78:fb:0f:5e:6e:6f:2b:9c:cb:92:83:ca:e4:e5:
fa:09:2f:a6:f9:2a:9c:29:33:24:6b:2c:96:fe:a3:b1:6d:c1:
8c:b2:90:75:7e:68:b5:c5:2b:14:66:84:d4:ea:2a:1d:d9:fa:
89:ea:b3:d2:61:97:7c:e1:83:e9:30:c5:9c:c6:30:db:b9:96:
12:c0:51:31:00:59:35:7e:d5:7a:96:68:d8:56:ce:ca:c0:99:
c1:a2:17:07:73:14:38:88:34:f9:01:11:9b:24:8e:42:d7:6a:
4b:24:9e:a2:14:ca:fe:c6:aa:1a:26:63:36:06:b2:8f:05:fe:
42:47:1b:8f:ae:22:58:29:f7:2f:14:51:eb:8e:75:f9:b4:67:
cc:5c:38:60:c3:47:d6:b6:86:74:1d:30:be:b6:46:fd:86:2d:
43:0c:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:23:00 2026 by rpki-client