Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/KIFEYeD6SHFBJkr-zp6dyS8NyeU.roa
File: KIFEYeD6SHFBJkr-zp6dyS8NyeU.roa (raw, json)
Hash identifier: 3H0es/CaDLi/ifN8K7Dm8H3ezYmSQ4qOYfgRYbakg3Y=
Subject key identifier: 28:81:44:61:E0:FA:48:71:41:26:4A:FE:CE:9E:9D:C9:2F:0D:C9:E5
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F2369073FD961D6A2291C263F628719A4
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/KIFEYeD6SHFBJkr-zp6dyS8NyeU.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20001
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:3f:d9:61:d6:a2:29:1c:26:3f:62:87:19:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28814461e0fa487141264afece9e9dc92f0dc9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:49:96:d3:c4:e7:05:0c:82:18:f1:c1:af:
b5:22:b1:20:fe:69:d2:9f:e7:9d:91:65:c7:16:3c:
98:72:2a:9f:80:1d:2e:78:28:f5:e0:72:85:47:b6:
4a:f7:fb:8d:d7:0e:8b:f6:37:14:7b:05:7b:89:3c:
1e:45:c7:be:54:ff:35:5b:1d:db:1c:e4:97:e2:dd:
eb:59:79:f3:22:36:af:60:17:34:f1:44:bb:d3:a6:
36:e9:86:87:0b:6f:f0:cc:83:59:0d:a9:7c:3f:0f:
5e:2c:77:ce:21:a5:78:25:08:97:90:4f:e3:ee:48:
89:ad:cf:4b:06:06:f8:ed:91:37:a2:5a:a7:1c:32:
dc:78:79:f4:c8:80:d7:7a:c9:46:f6:23:5c:09:3a:
46:e3:66:89:b9:0f:74:ea:21:86:16:43:45:d2:07:
86:11:a8:c4:39:09:0c:21:a1:11:a4:cc:17:02:07:
fb:fe:c8:8f:56:62:08:d1:28:1b:a2:36:b6:a3:cb:
c2:b4:bd:56:78:77:4d:d9:97:0a:c6:30:75:85:1c:
8c:78:7a:ca:61:83:22:c5:c6:17:bd:f0:63:1b:17:
b0:a4:0f:53:b8:50:69:36:30:76:57:e9:82:36:8f:
54:34:5d:dd:56:95:ae:e1:7d:c9:65:91:86:23:c3:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:44:61:E0:FA:48:71:41:26:4A:FE:CE:9E:9D:C9:2F:0D:C9:E5
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/KIFEYeD6SHFBJkr-zp6dyS8NyeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:27:4a:6b:47:ce:2b:cc:76:5e:87:99:a7:44:3c:5e:f9:b3:
ec:01:b3:3b:17:a9:1f:56:f5:9d:3c:d7:33:17:73:83:26:c7:
46:25:be:52:8e:ac:68:d9:38:7e:a6:58:73:a6:74:34:eb:91:
41:dd:38:10:da:e1:53:e2:c8:32:92:d9:dc:23:50:4d:1d:c4:
e0:b3:21:51:22:74:07:48:c4:43:4b:96:49:41:a0:5e:57:f5:
fa:6a:a9:5d:12:e0:15:82:97:ea:f1:9c:04:5d:64:8e:e9:8a:
d9:7f:1f:f7:46:e7:4f:b3:b4:9a:6c:74:1f:a3:eb:89:e3:bd:
f2:16:d9:4d:31:96:55:82:fc:08:c7:a5:fc:1b:3b:21:d2:85:
04:4f:05:c4:00:4b:20:b7:c6:79:8c:e5:55:98:65:e1:f7:b2:
bc:f9:26:b9:03:6f:94:4c:02:ad:06:02:63:30:81:7b:7c:4c:
80:63:f8:73:b7:47:46:28:45:e7:f9:a2:48:c8:86:ca:72:3c:
9e:6c:d9:b8:8d:f6:9f:cb:e7:dd:ba:08:9e:69:66:fc:df:4e:
14:bf:1d:cd:12:24:02:8e:3c:2b:54:b2:28:02:5d:e7:8f:69:
9b:4a:8a:d0:c2:84:30:0d:d9:fe:fc:a0:7d:8d:df:ce:50:90:
07:b1:a8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:43 2026 by rpki-client