Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/NOIjRWAEm41SIEcsx3wq0HkW7vw.roa
File: NOIjRWAEm41SIEcsx3wq0HkW7vw.roa (raw, json)
Hash identifier: CHi8ZguEkOEqMBZHIBown/6B5+XRCRO6YNarRmDmFeg=
Subject key identifier: 34:E2:23:45:60:04:9B:8D:52:20:47:2C:C7:7C:2A:D0:79:16:EE:FC
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690A497B536DDF27493DA9522B5B99
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/NOIjRWAEm41SIEcsx3wq0HkW7vw.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 89.187.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:49:7b:53:6d:df:27:49:3d:a9:52:2b:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34e2234560049b8d5220472cc77c2ad07916eefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:3f:09:43:b0:43:19:ee:00:c5:68:5a:35:
e9:30:8d:54:d8:e4:2b:54:14:99:84:1c:15:23:ad:
84:4c:ca:24:18:50:36:fd:ae:91:58:72:38:a1:6a:
38:ee:d2:c6:d2:6e:a0:22:6c:68:d9:b0:30:97:b6:
43:51:f7:ec:71:df:86:0f:5c:74:bd:43:fd:c1:6e:
a6:40:ed:1d:e3:5f:b5:9e:2d:d0:62:db:b4:50:7c:
7d:06:d5:6a:08:d5:f7:de:8a:e6:82:61:8b:d4:b1:
1d:e5:58:ca:72:b6:2a:0e:2d:2c:5a:f0:1b:29:a6:
3a:b4:c1:d0:67:03:9b:6b:0b:1e:97:87:94:6d:e9:
57:d3:d1:fa:f7:48:b2:95:83:e3:9e:bc:5f:87:b5:
70:28:13:36:06:29:69:44:29:a8:00:2d:24:28:ed:
ea:84:e9:9f:7a:8d:0a:d0:2c:4c:fc:46:5c:85:ed:
61:90:98:70:1e:fa:61:01:fe:5d:62:65:9c:c6:7b:
b3:45:1e:9c:06:1f:a0:b6:3f:a0:56:f9:23:75:3c:
f6:6b:c6:47:86:87:b1:fe:4c:47:5b:87:45:a7:55:
b5:25:ec:4c:8d:b0:cb:5d:ba:61:cc:de:a9:1f:79:
8a:ab:f3:a3:bd:81:9c:a9:68:6d:02:ce:9c:7d:9e:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E2:23:45:60:04:9B:8D:52:20:47:2C:C7:7C:2A:D0:79:16:EE:FC
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/NOIjRWAEm41SIEcsx3wq0HkW7vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5c:f0:7c:d3:46:98:91:3d:ef:00:15:9a:58:45:b1:26:cd:
d2:1b:95:2a:67:8c:b9:3c:68:9c:6c:9e:8f:35:6e:2c:3b:5e:
3d:0b:2f:a3:ad:88:02:12:85:cc:2c:ea:ab:da:93:5c:b7:13:
e4:15:40:7a:33:85:32:bb:ad:da:19:86:ee:4c:d8:bc:56:66:
a9:d7:2e:ab:6a:f3:9b:af:56:a0:60:e6:ee:e7:e6:36:2d:95:
75:f7:1c:af:5f:20:c3:95:86:b3:10:35:2c:2b:5c:b0:a4:b6:
d9:92:de:9c:ca:88:e5:79:24:37:d0:2d:d3:cd:f4:fa:7b:6c:
38:75:d1:64:2f:52:bc:a5:44:c7:ff:a5:28:8c:a3:f1:bf:6e:
17:70:48:ae:5b:26:0d:d1:54:1b:19:5c:ec:4a:40:e5:9c:5f:
04:19:b3:df:7f:18:3a:a5:59:46:83:21:a9:a1:75:cd:1e:ee:
6f:39:27:73:21:7b:62:43:15:e0:f5:42:fe:9b:a8:44:cc:d9:
00:a4:46:eb:2d:0d:fd:a7:67:51:a2:de:d1:04:6a:44:76:fe:
47:fd:19:5a:c6:32:10:56:df:af:5b:b0:da:2a:bb:f9:e4:10:
bc:ce:82:99:57:c4:ec:b5:d5:8f:40:6b:5b:57:c1:f5:97:ce:
4e:fe:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:39 2026 by rpki-client