Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/T9xKLaEfwa27egSs7I-Yj0B1ExA.roa
File: T9xKLaEfwa27egSs7I-Yj0B1ExA.roa (raw, json)
Hash identifier: WyvAhCf++dJ9iafppGBeGXiyB+JbXqAXXej7xMhH/rg=
Subject key identifier: 4F:DC:4A:2D:A1:1F:C1:AD:BB:7A:04:AC:EC:8F:98:8F:40:75:13:10
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A0F0D66CF8AAF90B0977BA40936734C60F
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/T9xKLaEfwa27egSs7I-Yj0B1ExA.roa
Signing time: Wed 30 Sep 2026 05:42:59 +0000
ROA not before: Wed 30 Sep 2026 05:42:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 189.13.1.0/24 maxlen: 24
189.13.2.0/24 maxlen: 24
189.13.3.0/24 maxlen: 24
189.13.4.0/24 maxlen: 24
189.13.246.0/24 maxlen: 24
189.13.247.0/24 maxlen: 24
189.13.248.0/24 maxlen: 24
189.13.249.0/24 maxlen: 24
189.13.250.0/24 maxlen: 24
189.13.251.0/24 maxlen: 24
189.13.252.0/24 maxlen: 24
189.13.253.0/24 maxlen: 24
189.13.254.0/24 maxlen: 24
189.13.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:d6:6c:f8:aa:f9:0b:09:77:ba:40:93:67:34:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Sep 30 05:42:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fdc4a2da11fc1adbb7a04acec8f988f40751310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:b9:b5:72:e5:c8:70:3c:14:47:ab:13:9e:
bc:d3:24:5b:f5:26:ae:c2:3c:5c:df:f8:54:1f:ed:
59:9a:98:e2:de:e9:40:70:c1:65:80:5f:1d:af:0f:
3f:cb:97:bc:2c:93:6d:5b:a8:9c:bf:7d:44:59:da:
17:3d:bb:4f:a8:84:d4:b1:65:81:a2:19:23:09:a6:
78:b3:d1:a3:15:29:1e:5d:80:43:07:11:87:bc:0d:
b6:92:6b:e7:06:6b:ed:be:0f:4c:8e:e9:c4:18:e6:
98:f4:cb:5e:77:9d:c0:ce:45:fb:ae:09:7b:50:96:
1d:d0:3c:86:bf:2a:63:27:39:16:f0:96:bb:cb:4c:
74:1d:3b:64:70:ac:a4:e5:f7:9c:f1:d1:cf:a1:72:
7c:d6:4d:65:e1:ac:0e:d4:8d:78:de:32:84:f1:0a:
06:47:a2:d4:9e:1c:bb:b0:00:3d:04:aa:4c:dc:1e:
66:bf:8e:58:ed:56:ca:a9:c2:b0:29:92:23:d6:c1:
4a:c3:a6:5c:68:e9:c4:b9:78:2a:c3:52:fe:53:bb:
03:44:66:5d:ab:af:b1:1b:29:a9:2d:eb:60:7f:8b:
78:6a:19:db:18:1a:5c:99:2e:5f:7f:17:68:e7:5f:
7f:58:4e:e0:69:64:c3:8a:1d:6a:d9:bc:77:08:dc:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DC:4A:2D:A1:1F:C1:AD:BB:7A:04:AC:EC:8F:98:8F:40:75:13:10
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/T9xKLaEfwa27egSs7I-Yj0B1ExA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.1.0-189.13.4.255
189.13.246.0-189.13.255.255
Signature Algorithm: sha256WithRSAEncryption
18:b5:90:45:a2:94:17:4a:8b:4d:64:3d:66:45:88:41:29:51:
a0:19:b5:98:f6:1b:29:87:b0:7a:47:3a:37:72:72:94:ed:b2:
50:87:51:1a:86:9e:c6:3e:6d:85:dc:1d:d9:0c:d6:92:c1:52:
c3:cf:a0:02:fa:ac:7f:9a:da:32:18:05:a1:99:99:0a:07:53:
cf:38:ab:5e:c6:44:25:bb:c7:0b:4a:40:c2:75:96:2f:55:d8:
cb:0e:b5:39:13:75:da:5d:59:45:34:9e:7a:bc:7d:ad:49:0f:
71:0e:41:30:49:5f:51:17:cc:61:13:e3:69:f3:ec:9a:1d:71:
75:8a:db:64:ad:11:1f:5e:5c:b4:e1:5c:9a:33:56:53:67:d0:
93:ee:7c:43:a8:2d:dd:05:45:62:11:47:0f:85:47:9c:7d:35:
12:7c:e5:3c:c1:b6:3e:40:56:0b:75:2d:15:5d:bb:da:a4:15:
7b:3e:aa:79:f0:af:a4:25:ea:b4:60:5a:3d:5e:03:25:07:3e:
52:6e:60:bd:a8:6b:e4:b0:39:6f:b4:49:d7:9a:66:fa:80:7d:
a1:ff:84:14:54:d8:33:e6:b2:44:b2:7a:32:23:00:b3:58:c4:
06:80:69:6b:7e:c6:02:bd:08:2b:72:23:f9:d3:95:d8:1a:17:
9c:07:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:02:22 2026 by rpki-client