Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/3BmNySI_DdRd6oX7QmbSgdqH-0w.roa
File: 3BmNySI_DdRd6oX7QmbSgdqH-0w.roa (raw, json)
Hash identifier: hDzs1TQUTUCA6bjaix/vT+4JIMdUhG1ZRbVLbHLO45M=
Subject key identifier: DC:19:8D:C9:22:3F:0D:D4:5D:EA:85:FB:42:66:D2:81:DA:87:FB:4C
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F236903C44EEDC367A15229AC7D473582
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/3BmNySI_DdRd6oX7QmbSgdqH-0w.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.16.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:03:c4:4e:ed:c3:67:a1:52:29:ac:7d:47:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc198dc9223f0dd45dea85fb4266d281da87fb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:01:7a:44:79:7f:55:70:9b:28:b0:1d:e8:
d2:db:99:24:ef:66:03:55:fd:73:4c:58:4b:c2:90:
8d:5f:9b:bb:89:f9:10:9b:e3:c8:61:3b:a0:5e:2e:
86:2e:64:a6:04:c4:d8:3d:54:49:f3:9d:7f:fd:56:
6d:2f:af:68:06:ba:80:c9:b5:5f:69:66:11:f4:b3:
71:90:40:90:80:f1:1c:6f:a2:80:63:ce:43:d1:ff:
56:3c:15:fd:44:c9:ff:b7:fc:8e:b1:25:5b:c7:5e:
ea:1c:7e:ef:e3:ef:33:8e:87:73:91:59:bc:dc:02:
c2:72:0b:bc:27:00:28:7c:9f:ca:bc:cb:10:49:18:
79:a6:24:9c:20:90:0e:c9:75:ef:2f:55:4b:47:22:
5a:a4:1f:d3:dc:da:4e:e3:8e:b6:59:30:06:5a:da:
6e:3a:fc:ba:83:e1:f8:77:6d:39:c5:74:97:c1:24:
81:c2:31:7d:cb:ff:c8:68:93:cb:36:8c:8c:61:2d:
bc:a9:ba:0e:77:d5:56:87:56:d2:0e:b9:c9:0c:3f:
04:3f:fb:01:c4:d2:79:cc:32:b9:81:ef:e3:20:27:
ca:d8:11:7c:56:f4:7c:fb:72:3f:ff:ab:7d:24:8c:
78:fa:ca:40:5c:40:a9:c1:04:e9:7a:9c:ed:38:e0:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:19:8D:C9:22:3F:0D:D4:5D:EA:85:FB:42:66:D2:81:DA:87:FB:4C
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/3BmNySI_DdRd6oX7QmbSgdqH-0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.16.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d3:7d:28:db:77:72:aa:fc:c0:41:ff:57:19:1f:cf:f7:eb:
53:04:f9:89:6a:d5:88:b5:bd:0e:c2:01:d1:f1:d9:22:ac:1f:
a0:53:13:35:f6:14:82:c1:48:fc:cf:66:ed:3b:f4:cc:37:f0:
19:dc:dd:7c:e8:af:8a:1f:d4:c6:83:c3:a3:4a:55:f9:81:f3:
6b:a5:c4:d0:e6:b8:56:00:03:e3:6b:e6:ff:c5:cf:34:56:a5:
67:00:dd:3f:71:27:b3:fb:2c:d8:9b:fd:d5:c7:b4:13:4b:16:
c3:75:fb:4a:26:80:8b:fa:bb:56:f0:10:07:c9:20:aa:08:77:
6e:5b:98:3e:01:89:1c:35:f1:c1:08:6e:aa:f9:b9:ec:24:82:
04:31:77:09:6e:76:07:0e:7f:1e:80:ef:f0:ab:8a:0e:73:19:
e2:e6:91:bf:a9:90:0c:c9:d6:e3:bc:f9:b3:66:ef:09:46:91:
c0:f1:4a:20:42:8a:de:2d:31:45:d2:2d:57:b1:bb:1c:19:15:
15:87:34:39:69:71:e6:e6:fa:fd:4d:90:b3:f5:1d:fa:5f:e8:
9c:10:4a:c7:46:46:7f:14:be:93:29:d0:df:fd:17:5c:1b:ea:
52:34:f5:80:c6:a2:53:9b:16:81:a9:0d:07:38:41:db:f5:e9:
c3:9b:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:11:06 2026 by rpki-client