Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/S0OELMP6EzoZK8ot5riUrk9_JCw.roa
File: S0OELMP6EzoZK8ot5riUrk9_JCw.roa (raw, json)
Hash identifier: +FNJerXmMm5J/+flZ9aVrnzlhqaHGcyeSkXvsdwJmG0=
Subject key identifier: 4B:43:84:2C:C3:FA:13:3A:19:2B:CA:2D:E6:B8:94:AE:4F:7F:24:2C
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A0D878DBFC710E9570425FA96147CD6003
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/S0OELMP6EzoZK8ot5riUrk9_JCw.roa
Signing time: Fri 25 Sep 2026 12:09:54 +0000
ROA not before: Fri 25 Sep 2026 12:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.13.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:78:db:fc:71:0e:95:70:42:5f:a9:61:47:cd:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Sep 25 12:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b43842cc3fa133a192bca2de6b894ae4f7f242c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:39:51:90:d3:b7:9b:c0:dd:73:4c:01:32:
74:59:ce:d6:11:5e:d7:8c:1d:47:11:d5:2a:bf:20:
d0:3b:89:83:26:43:a7:66:67:21:20:d9:3d:54:c2:
cc:2c:46:4b:7f:ed:0b:8d:49:5c:b2:bf:cf:10:f0:
2e:98:2c:bb:e6:f8:cc:f7:2f:8c:d6:27:2d:4d:79:
d6:35:75:d8:7e:b8:51:c2:cf:51:12:14:a2:e1:50:
78:d6:bc:ca:6e:c6:f3:07:61:1d:a5:4b:34:93:21:
29:c5:4a:ba:63:eb:fb:ee:fb:e9:6e:c4:af:d0:53:
09:50:73:79:9c:98:80:03:13:a3:10:67:2f:92:e3:
56:cf:44:cb:1b:e4:16:de:e6:8a:c1:76:62:09:dd:
0b:a6:d0:8c:b3:0a:85:31:fb:88:2d:8f:92:de:0c:
d7:e2:cb:8b:06:a6:a2:89:31:f0:73:d8:0c:a4:e5:
ff:ff:6a:5e:86:1b:f6:f8:fe:79:f5:3a:e7:3d:61:
c9:a1:11:57:1e:04:23:42:87:6a:25:3c:69:59:62:
79:69:94:fd:bc:61:b9:d2:43:39:56:43:a5:86:7c:
90:0d:33:dc:e9:80:b9:bb:10:f1:3a:d1:7b:0d:80:
6b:14:1b:1b:7b:4a:7c:70:82:39:99:b3:f5:3f:25:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:84:2C:C3:FA:13:3A:19:2B:CA:2D:E6:B8:94:AE:4F:7F:24:2C
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/S0OELMP6EzoZK8ot5riUrk9_JCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0/24
89.187.16.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:30:6b:75:4b:a7:0d:e9:65:fb:ea:62:20:ad:04:65:ae:fc:
6a:6c:85:28:8a:e9:f7:e8:96:0c:f6:fc:bd:fe:d6:6e:be:4e:
dc:75:39:f6:01:d9:ba:22:8d:a5:33:09:d0:eb:cc:ac:f8:5f:
be:d5:05:af:b0:b1:9d:d8:93:08:0a:21:59:dd:fc:30:26:0a:
a8:7f:89:fe:6d:ca:f2:ac:e7:55:47:2a:8f:22:50:b4:d7:32:
37:74:f3:1b:5d:6a:cf:63:9e:d4:85:23:a0:f6:f3:ab:4e:a4:
3f:04:7c:02:cd:17:3d:4c:43:7f:3b:b3:a1:6c:8c:99:cd:b6:
08:97:95:fa:fb:e1:fc:18:b7:a1:9b:64:e7:58:3d:86:fe:17:
f5:d9:90:14:c1:f3:65:ee:c0:a4:f3:78:5c:d3:b8:b8:7b:8c:
a1:15:53:16:58:e9:4a:6c:9d:0c:b7:80:9d:40:57:0f:90:e7:
dd:7c:2a:ef:07:40:a4:1a:bc:21:d2:53:35:f7:79:b7:f1:3d:
04:4f:82:5e:75:ca:fe:af:80:0d:39:1d:9c:a2:3a:b5:ff:e4:
0c:fe:a2:a6:f6:9e:35:e6:41:5c:12:e4:a5:9f:22:ef:8d:2f:
1d:3a:cd:e0:54:0e:61:91:4e:f6:c7:7d:b1:de:bf:b7:ea:27:
01:8a:ff:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:45 2026 by rpki-client