Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/1-hw9-y6IHtmvlWAJWIDpYnnWoFQ.roa
File: 1-hw9-y6IHtmvlWAJWIDpYnnWoFQ.roa (raw, json)
Hash identifier: kF21rWELkJiunT4cUKx7QqTUjhqxvlAqUOuc0t748GM=
Subject key identifier: FA:1C:3D:FB:2E:88:1E:D9:AF:95:60:09:58:80:E9:62:79:D6:A0:54
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F2369044D8C556643F7B842BEC85B9754
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/1-hw9-y6IHtmvlWAJWIDpYnnWoFQ.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:04:4d:8c:55:66:43:f7:b8:42:be:c8:5b:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa1c3dfb2e881ed9af9560095880e96279d6a054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:2c:75:17:84:de:06:41:1d:be:3f:8e:7c:
29:06:0f:83:74:22:ba:16:f7:e8:86:43:e1:12:2e:
0f:bd:27:bd:df:a1:af:79:81:1e:a5:c3:8a:8e:74:
da:14:4e:e1:bb:8f:8c:ab:16:04:39:fe:ea:84:41:
bb:69:2c:fe:59:2a:ad:34:94:1a:7f:f3:62:3e:30:
f8:11:97:c9:51:8c:cd:d4:04:68:6b:6e:94:6a:33:
34:a1:6c:f7:e3:a6:6b:66:48:b9:e2:fc:06:02:f3:
68:29:1a:47:cb:03:4b:a3:b6:37:0b:7d:b9:3f:47:
da:a7:77:d9:a8:e4:81:a5:9e:35:2a:b9:2f:ad:90:
91:56:b4:52:02:99:53:38:90:f7:1e:f9:f3:06:79:
59:da:82:e2:1d:82:d8:8b:4e:38:16:33:fa:14:85:
43:96:ff:99:1e:a1:10:03:9a:e6:1e:db:72:1b:1d:
9b:2a:05:78:7c:6f:54:12:3a:cf:c9:4e:1c:2f:9d:
d7:78:6e:d1:63:10:8c:ac:56:64:87:ab:48:ab:71:
9b:89:4f:9d:8b:66:4f:13:16:8c:5b:54:cc:67:ae:
f7:90:d8:79:53:c5:fb:36:85:12:e8:4c:1d:de:b6:
3a:10:b9:a4:bc:83:61:d8:bd:a5:66:1c:13:03:2d:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:3D:FB:2E:88:1E:D9:AF:95:60:09:58:80:E9:62:79:D6:A0:54
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/1-hw9-y6IHtmvlWAJWIDpYnnWoFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9e:24:cf:27:7e:6b:6c:e3:26:1c:ee:a6:36:e0:b1:9b:db:
c1:10:93:1d:6e:6e:6f:14:d2:07:d3:4a:17:2f:32:82:e8:27:
58:d3:ec:1c:bc:5a:70:0d:0d:c2:bc:69:f7:ce:6e:96:e8:1b:
8a:ac:56:e7:44:64:0a:9b:bf:2c:86:93:78:83:36:eb:fb:42:
68:f3:6d:31:b4:56:ad:ce:dd:4c:a0:d3:81:f6:d3:07:02:a3:
f1:0d:73:76:a5:bd:d3:9f:54:38:4c:f8:3e:be:e3:65:a1:fd:
09:1f:34:7d:60:0c:dd:9e:a3:49:af:02:ea:18:a4:dc:1b:2a:
e1:bc:2d:d1:f1:dc:c1:12:19:f9:83:5f:de:60:88:02:35:47:
4c:60:8f:b5:89:63:f7:5b:38:3b:33:9d:63:e9:d6:78:b3:1b:
e5:f3:78:78:96:a1:16:62:04:12:84:41:48:c9:30:72:14:36:
34:78:48:51:48:08:a3:99:40:47:53:9e:6d:cc:49:45:ad:18:
f6:9d:b9:05:2c:74:2d:40:3e:b1:db:fa:0f:9d:c5:44:7a:54:
44:cb:39:16:2b:57:aa:6a:3a:04:ec:45:ec:42:07:b8:11:ad:
89:48:6e:b9:c5:74:dd:1f:a0:e5:b7:32:de:6e:dc:99:d1:d7:
2f:d3:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:41 2026 by rpki-client