Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/SfRsrLEsUiEwqxIOKQuNS0heqfA.roa
File: SfRsrLEsUiEwqxIOKQuNS0heqfA.roa (raw, json)
Hash identifier: +pkGQCVOLhfWDLFU4iVkdzRAKBg74Yy7MMivMXemS1o=
Subject key identifier: 49:F4:6C:AC:B1:2C:52:21:30:AB:12:0E:29:0B:8D:4B:48:5E:A9:F0
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690DB2B9BDA9F81F0BCBA64DD33CDB
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/SfRsrLEsUiEwqxIOKQuNS0heqfA.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206129
IP address blocks: 89.187.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:b2:b9:bd:a9:f8:1f:0b:cb:a6:4d:d3:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49f46cacb12c522130ab120e290b8d4b485ea9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:d1:dd:06:42:71:de:a6:f3:f0:03:a6:60:
ed:b9:62:39:86:8d:62:0d:65:d6:67:a7:d4:b0:8d:
1d:3c:a6:90:92:e2:d6:8a:1b:ec:68:3b:91:a5:ed:
0c:17:55:fc:ef:6b:80:09:0b:8b:84:02:80:ed:c4:
df:95:32:33:85:ef:ff:3d:24:a0:2f:32:32:0a:3e:
5c:5a:7b:76:7e:8d:cb:41:24:1b:66:b1:8e:76:9c:
e6:d9:54:b7:f5:18:da:b5:57:20:23:63:53:0f:12:
29:39:be:04:19:e5:8f:64:30:00:dc:9a:f0:59:b9:
06:24:72:1a:84:30:a6:66:b1:cd:84:5d:5b:e8:a1:
7b:75:9e:17:11:c7:81:d8:fc:90:9b:df:e5:f1:a2:
d5:f3:5b:8f:f9:cd:41:ee:ce:23:45:31:64:a7:17:
06:12:cf:63:c3:c3:a3:54:b7:87:d2:16:9e:33:fd:
79:f0:6b:36:30:15:77:0a:8b:1d:49:88:57:69:3f:
4b:16:78:c0:43:60:58:90:8d:7f:b0:f1:4c:f8:92:
3f:8f:8a:a4:71:9e:f8:96:f4:82:15:cf:04:fd:d5:
81:f1:2e:b0:84:04:9a:fb:62:68:60:df:72:a1:a7:
55:57:4e:44:7b:d7:c3:ea:c0:2e:8a:b8:f6:72:93:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F4:6C:AC:B1:2C:52:21:30:AB:12:0E:29:0B:8D:4B:48:5E:A9:F0
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/SfRsrLEsUiEwqxIOKQuNS0heqfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.7.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1d:d9:94:1b:9f:95:93:44:32:c8:f7:9b:f8:d3:3d:d8:b5:
b9:e0:dd:3c:75:21:b8:88:b3:ab:10:0d:57:3e:b8:d3:66:5d:
ab:a4:fb:76:8f:55:f5:dc:15:59:58:f7:f4:c1:c9:7a:c1:37:
e7:39:8d:dd:be:a0:40:d7:15:3f:ba:cc:d2:4e:94:68:68:3e:
d6:77:a2:35:9b:e4:c9:3f:fe:16:fb:02:46:0c:20:0a:0a:86:
19:3b:56:b1:3c:34:43:47:e0:6a:b4:78:07:8b:e0:62:11:77:
f8:a0:4b:25:50:bd:ca:46:65:da:18:35:fd:c5:2d:35:f7:6a:
52:1a:93:87:84:1a:34:5c:51:45:61:dd:8c:07:11:8a:a9:9a:
46:b1:17:7e:af:19:22:51:b1:85:b3:cd:09:64:e6:44:7a:a2:
22:8b:f0:40:5d:52:ad:56:c5:7a:22:10:b3:29:70:7c:88:d2:
00:bb:a5:06:c4:0e:71:7a:fc:77:23:45:e1:7d:86:61:24:d0:
6a:26:6d:4a:8d:f1:75:c7:0f:fb:89:72:d1:16:28:06:88:90:
e3:ff:5c:43:54:27:e0:4b:9b:38:97:0b:b2:f0:32:6c:8d:42:
70:cb:da:9d:35:db:df:5a:dc:e6:3b:b7:d3:03:f2:7f:bb:e7:
25:d5:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:19 2026 by rpki-client