Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PNi7VeP1FzRDvpUx0cTVWXBAj3w.roa
File: PNi7VeP1FzRDvpUx0cTVWXBAj3w.roa (raw, json)
Hash identifier: SURNLahzoBtytQs0cdSU7zxKOobgp1NFq2Jap/+oluU=
Subject key identifier: 3C:D8:BB:55:E3:F5:17:34:43:BE:95:31:D1:C4:D5:59:70:40:8F:7C
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A10B8DADC0B05290E698A7DD64BE271A40
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PNi7VeP1FzRDvpUx0cTVWXBAj3w.roa
Signing time: Mon 05 Oct 2026 10:13:16 +0000
ROA not before: Mon 05 Oct 2026 10:13:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39810
IP address blocks: 89.187.0.0/23 maxlen: 24
89.187.2.0/24 maxlen: 24
89.187.3.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
2a10:e400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:8d:ad:c0:b0:52:90:e6:98:a7:dd:64:be:27:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Oct 5 10:13:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cd8bb55e3f5173443be9531d1c4d55970408f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:8c:a2:46:35:2d:fe:05:6c:0d:d7:29:6e:
29:e0:65:cc:df:71:44:31:36:74:64:9e:19:b0:12:
6d:0e:ba:7a:7c:89:7b:4b:24:60:cf:b3:9a:cd:8c:
af:2f:06:77:14:9f:0e:d2:77:41:aa:f1:9c:99:a8:
33:88:59:ae:d5:14:b7:59:17:9b:b1:c9:1f:0b:3f:
77:7a:f3:3d:c5:17:38:71:3e:67:07:c8:a9:fb:3b:
17:5c:d0:7e:51:81:69:2e:0d:a1:31:f6:23:45:2a:
7f:d8:1b:ac:bf:55:33:50:5d:5b:1d:6e:c2:e4:33:
4a:c9:36:9a:76:a0:f3:c9:ee:2e:ec:1e:a4:0a:da:
99:9f:08:82:a1:98:49:37:38:09:bd:e5:fb:df:90:
3d:6d:53:40:fc:8b:e6:da:12:3d:5c:47:9c:ce:7d:
e2:f3:30:66:33:0d:43:60:60:8d:62:6c:1d:1e:91:
44:35:af:a1:51:5b:49:f6:6a:e4:67:54:92:fb:e2:
90:30:53:ee:36:25:ed:87:fb:09:b2:25:10:6d:ac:
0d:53:59:b8:bb:bb:e8:61:dc:14:08:80:b2:b6:1e:
03:67:c0:a7:30:41:dd:99:5e:d4:28:01:45:53:3a:
b7:1d:2b:b4:21:3a:4d:74:fe:b1:7f:d8:da:f6:35:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:BB:55:E3:F5:17:34:43:BE:95:31:D1:C4:D5:59:70:40:8F:7C
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PNi7VeP1FzRDvpUx0cTVWXBAj3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0/22
89.187.30.0/24
IPv6:
2a10:e400::/29
Signature Algorithm: sha256WithRSAEncryption
03:e4:e9:35:28:13:67:71:19:18:e5:8a:5e:56:01:f4:c4:c1:
07:e8:b0:eb:f4:e5:c7:60:90:c4:5f:fc:e4:96:fc:e3:ab:72:
a3:f8:b9:d4:e2:fd:e3:ce:d5:55:62:e5:19:33:f5:d8:ea:1b:
6b:b6:6c:d5:51:e7:de:40:e1:64:a6:b5:97:6a:ee:f9:78:e5:
7a:4a:dc:d5:7c:cc:a5:da:7f:53:88:b0:8f:d9:92:54:7d:2d:
e5:88:84:bd:0a:e7:1a:1b:2a:83:9b:0d:8b:6a:b6:db:43:51:
b1:96:9b:c4:6d:87:1c:71:fe:37:c3:f9:f2:a3:2d:af:14:e9:
12:16:40:91:53:18:9d:ec:50:78:21:04:12:b0:f5:0c:81:d6:
18:ed:c2:77:74:80:ac:8d:71:e9:97:13:8f:b2:ef:b5:bd:b2:
d8:76:4d:60:3a:5c:cd:af:cc:f9:f4:49:5f:5e:99:83:93:5e:
33:53:11:92:58:6c:5b:14:7b:9a:0a:cf:b5:8d:84:61:aa:b7:
b2:82:34:d8:54:2c:44:ec:26:71:c1:f3:85:91:51:29:7c:f1:
9b:d4:4c:e3:46:40:ec:9c:3a:e3:b3:40:6b:d8:7a:4a:1e:70:
42:f6:e3:cc:e4:82:9a:21:f5:93:c2:36:ff:64:1d:c3:e1:bb:
4d:94:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:14:17 2026 by rpki-client