Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fg3uKdTaCTzc6LT83l7Yr1GfcFc.roa
File: fg3uKdTaCTzc6LT83l7Yr1GfcFc.roa (raw, json)
Hash identifier: bqHkfTHcFH72H0HE9umgwseXvtSVKVVBq3GawpDgiSg=
Subject key identifier: 7E:0D:EE:29:D4:DA:09:3C:DC:E8:B4:FC:DE:5E:D8:AF:51:9F:70:57
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FF0FABB79BF2381F4D722F272A731A681
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fg3uKdTaCTzc6LT83l7Yr1GfcFc.roa
Signing time: Tue 11 Aug 2026 13:19:51 +0000
ROA not before: Tue 11 Aug 2026 13:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 89.202.146.0/23 maxlen: 23
89.202.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:fa:bb:79:bf:23:81:f4:d7:22:f2:72:a7:31:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 11 13:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e0dee29d4da093cdce8b4fcde5ed8af519f7057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:37:d5:7d:f8:5e:8c:b9:1b:b5:dc:11:a8:
b6:66:44:37:75:43:79:91:43:dc:00:8b:00:09:98:
23:95:5b:11:4b:7c:d0:05:b9:9e:e2:5b:7d:3d:28:
dd:11:5a:82:65:e9:bb:c2:10:26:49:ed:9f:b0:84:
79:0c:a8:0e:23:28:71:cb:08:75:f6:25:54:b0:54:
d4:5d:51:55:03:49:61:c5:17:e3:6a:90:f2:9d:bf:
45:1f:06:af:6f:fe:c0:10:52:22:8c:2c:e8:57:5a:
c7:b0:26:df:eb:93:62:5b:54:57:5d:57:69:5d:eb:
83:96:48:c0:47:fc:06:b5:ee:b7:54:80:e1:2e:58:
7a:eb:e1:8f:4c:ba:33:79:dd:6c:54:91:41:43:2c:
d3:b9:3b:42:04:83:b7:bc:d1:1c:7e:18:21:4c:c7:
38:75:20:7a:5d:6b:be:bc:d5:66:5d:ed:ec:db:25:
3b:f5:86:a4:9e:02:54:59:d1:73:82:c7:53:9e:20:
02:09:40:9f:5d:73:de:4e:ea:9f:9f:24:a2:b3:b7:
73:11:ee:2e:3b:43:f6:92:ff:af:2f:bb:11:1c:7a:
85:c9:e1:ea:7e:1f:d2:06:a1:5b:de:3c:fe:53:59:
f8:bd:a3:5d:30:55:a0:05:fd:ce:f3:91:7f:4f:5f:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:EE:29:D4:DA:09:3C:DC:E8:B4:FC:DE:5E:D8:AF:51:9F:70:57
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fg3uKdTaCTzc6LT83l7Yr1GfcFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.202.146.0/23
89.202.224.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:c5:7f:c2:66:ec:5a:21:e8:de:31:97:8c:e1:76:00:51:51:
cd:28:6a:4e:54:0c:df:63:d8:1c:a2:d7:32:e1:39:6f:68:d4:
9a:93:07:a8:e0:33:db:c8:71:4d:6c:a7:0a:a5:7d:07:9b:16:
46:45:83:08:5b:c6:74:3b:90:14:9f:6a:43:fa:1a:56:43:6c:
43:c1:b4:d8:cf:0b:09:79:6d:02:a5:44:96:4e:2b:9b:a4:eb:
3b:b7:2b:97:cc:2b:70:d7:6b:f0:79:70:2d:c9:e7:d0:61:38:
cb:f4:c1:eb:d8:b0:b2:17:c1:82:2c:ae:c1:93:47:e3:00:4e:
5c:62:89:a7:ac:ba:bd:9a:29:71:bb:51:76:68:7f:ff:ea:d1:
f1:56:a1:1d:cf:a3:a9:b5:99:4c:22:4b:61:44:20:80:20:f0:
f6:98:9f:ea:09:84:cf:b3:bb:d6:0a:57:7f:b4:32:bc:ce:1c:
24:82:4b:18:85:ae:f3:83:1a:e2:dc:91:4b:b7:e1:f1:9c:c1:
23:8b:b8:86:d2:f3:1d:18:c9:55:d6:9c:83:e4:e2:6f:4b:b9:
cc:a0:ae:e9:ba:f1:fb:ac:3d:38:28:d3:65:94:f2:2f:9f:98:
db:0b:5d:86:60:72:d1:23:10:64:cb:36:11:b6:25:74:5e:5e:
79:1f:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:52 2026 by rpki-client