Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/tVcASFvEiGFm6nWir4C7lFtQEF0.roa
File: tVcASFvEiGFm6nWir4C7lFtQEF0.roa (raw, json)
Hash identifier: A5IABFvg9g6SNLwiRTqQZQH2y8OgkpXB1xoUma3zyQw=
Subject key identifier: B5:57:00:48:5B:C4:88:61:66:EA:75:A2:AF:80:BB:94:5B:50:10:5D
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A10AEAB60D8747BA07E5EC6386EE033203
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/tVcASFvEiGFm6nWir4C7lFtQEF0.roa
Signing time: Mon 05 Oct 2026 07:15:16 +0000
ROA not before: Mon 05 Oct 2026 07:15:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40115
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:ea:b6:0d:87:47:ba:07:e5:ec:63:86:ee:03:32:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 5 07:15:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b55700485bc4886166ea75a2af80bb945b50105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:8e:14:a5:5c:10:60:0b:58:53:b6:7b:dd:
71:e0:bc:4b:c3:f9:2c:61:e5:e1:f7:01:83:e0:2d:
8c:60:38:c5:85:f2:af:c3:b4:4d:7b:53:ce:df:37:
03:73:a5:69:b3:29:5f:bf:e5:3f:1a:d2:e8:70:60:
f2:a8:25:0c:4c:bb:c3:0f:48:a0:82:01:19:ad:6f:
7d:d8:59:de:f3:39:aa:90:ec:2a:71:fb:79:1f:16:
a5:32:1f:fc:f0:a2:4d:79:6e:44:17:7e:7f:65:35:
01:a3:ab:07:d8:76:47:6f:c3:aa:1b:c3:ec:d7:88:
1d:0b:66:e5:34:5e:91:1d:b0:82:f7:33:33:f6:8d:
2c:0f:f0:e6:b1:e6:d7:2f:06:48:8c:b8:73:7f:e2:
43:3e:2f:f2:53:c8:5f:8d:44:57:33:fd:3f:bb:f5:
6e:74:1f:05:66:e3:e6:ab:07:3b:a1:25:e2:c2:e0:
08:6c:f6:18:78:06:60:8d:f6:3e:d2:48:1c:32:96:
c1:b5:e0:95:1d:40:d0:d1:67:6d:6d:bf:3e:d6:b1:
3e:f1:2d:ee:55:46:14:f5:49:a1:70:6e:ec:6d:b9:
f5:d0:cf:25:ec:e5:2d:f4:c7:30:82:01:e2:93:09:
43:3f:cd:6c:be:7e:00:76:1c:d5:80:b6:cc:0b:a8:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:00:48:5B:C4:88:61:66:EA:75:A2:AF:80:BB:94:5B:50:10:5D
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/tVcASFvEiGFm6nWir4C7lFtQEF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:ac:83:d9:2e:69:29:c3:97:20:42:0b:69:42:4e:3b:52:
33:3c:2e:a3:d2:37:9a:7b:52:c3:09:cf:f7:b6:ac:59:a9:db:
ff:4f:7d:ed:1c:16:2b:1b:bf:24:5b:89:48:9b:c4:d8:d9:97:
60:7b:58:6f:6c:f6:04:a2:92:28:ab:66:92:12:cf:81:14:1f:
23:a8:92:96:7b:3e:2d:62:95:ce:11:e9:eb:ae:12:c5:23:20:
ba:31:9c:ed:de:7e:8b:11:0b:27:36:9c:f2:83:ce:11:f4:6e:
67:1b:fd:e3:af:a7:fc:fb:2b:af:cf:f3:bd:8c:aa:05:29:2c:
4d:21:c7:5f:22:1d:82:8c:33:1c:77:29:00:6d:d2:5a:94:d7:
75:4d:d5:27:b9:2d:c4:be:01:2b:9b:f6:1c:cf:71:aa:31:ad:
56:02:22:0c:71:a5:eb:ee:a3:c6:64:a0:4d:30:28:67:aa:8b:
01:11:5f:58:f0:09:ae:5a:60:a1:13:c7:ee:8a:0f:b2:48:63:
ea:3a:6b:67:59:e2:d3:a8:df:4b:04:e9:05:1b:e5:3a:58:b8:
6d:57:ba:15:5b:c9:1e:eb:da:90:f9:a4:e9:5c:00:30:fd:9e:
3c:b6:0f:8f:c0:04:99:57:76:85:2b:01:23:cc:21:c7:ce:1e:
42:48:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:46 2026 by rpki-client