Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/SsTihHkTWMRsLxTTINAAylBThUA.roa
File: SsTihHkTWMRsLxTTINAAylBThUA.roa (raw, json)
Hash identifier: 96AgIFV4aTxAWUeVAUnP7UuZ/Zk9flkLRNvl13jkv/c=
Subject key identifier: 4A:C4:E2:84:79:13:58:C4:6C:2F:14:D3:20:D0:00:CA:50:53:85:40
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F390876A766C61910DF8624499A706326
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/SsTihHkTWMRsLxTTINAAylBThUA.roa
Signing time: Mon 06 Jul 2026 20:04:43 +0000
ROA not before: Mon 06 Jul 2026 20:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:08:76:a7:66:c6:19:10:df:86:24:49:9a:70:63:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 6 20:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ac4e284791358c46c2f14d320d000ca50538540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:f3:32:66:5c:52:c5:f2:a0:37:be:92:74:
7d:2e:f5:f1:b2:ac:e4:6c:ac:ac:cb:87:56:fd:51:
ad:04:4e:79:b7:fc:53:49:f3:d2:51:2f:9c:ec:42:
85:4a:5c:cd:93:19:24:c7:9d:75:33:f3:6d:7c:ed:
a3:56:59:be:3f:b3:15:2a:e4:75:f7:ef:88:98:68:
76:73:91:eb:f7:d1:6b:b5:fd:ec:d2:79:1c:8c:a9:
30:43:12:5b:79:7d:21:28:34:9e:5f:65:2d:82:00:
d5:a7:17:58:fa:9e:38:9d:0b:99:4f:39:29:bc:60:
23:c2:a2:84:68:13:74:f0:71:1c:94:f4:51:1d:e1:
36:61:73:e3:5f:44:6f:bf:ff:4a:c5:f2:53:dd:95:
de:be:36:49:29:f9:c7:22:5d:66:89:4a:dd:c5:58:
37:bc:89:05:ac:e2:9e:60:9e:74:dd:eb:28:de:e1:
25:2f:42:0a:1d:45:46:91:7e:64:49:df:bc:c2:91:
39:d3:3c:d7:bc:cc:ed:7e:33:76:db:7e:c4:57:2e:
c7:5d:31:60:77:0e:4b:2d:c3:10:32:5c:5c:59:5f:
3e:7b:72:0f:d9:5b:11:0b:a7:8c:9c:fe:d1:60:66:
4b:ea:ae:ee:ca:b2:d5:a0:a1:9a:73:7a:7e:dc:ec:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:E2:84:79:13:58:C4:6C:2F:14:D3:20:D0:00:CA:50:53:85:40
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/SsTihHkTWMRsLxTTINAAylBThUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2a:c1:48:f3:eb:fe:39:2e:76:50:cb:fc:37:4f:fa:dd:0a:
08:37:67:36:35:92:52:06:c4:8d:d3:1a:94:b0:dc:87:68:95:
3f:27:59:14:75:cd:fb:9a:23:1e:9a:96:6b:3d:80:c5:f2:18:
5d:20:bf:d2:1f:f6:5f:5b:cb:1b:21:c2:bd:c6:0c:f6:d5:dd:
08:0c:92:d4:8f:9d:f2:17:a1:25:0c:74:12:dd:88:ab:08:6c:
0f:61:d6:7d:86:14:62:8a:a7:a9:aa:1e:79:e5:12:03:bc:a8:
00:bc:67:3a:d8:ae:31:7a:4b:87:d6:ae:b5:b8:d0:f4:9e:e8:
53:07:c2:31:15:2f:91:57:c5:2c:96:55:58:93:54:05:22:13:
34:05:1c:55:ad:e1:ca:e4:ca:24:35:99:6b:97:59:c3:af:83:
d8:0d:ac:00:83:cd:f3:ad:08:10:ee:fd:0e:de:dc:9b:85:73:
3b:2c:74:d2:3f:28:6d:57:30:cd:e4:b1:28:e1:e2:45:90:3a:
70:f2:90:8f:b7:ec:32:07:56:fb:34:14:f8:85:24:8f:39:42:
e2:2c:89:c4:25:e5:63:de:d3:e1:34:c8:99:f6:4f:02:e6:ef:
23:f3:27:d4:96:a2:14:f1:fb:1c:a6:e6:c5:8d:d5:b6:d1:21:
ff:67:28:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ85CHanZsYZEN+GJEmacGMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYwNzA2MjAwNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWM0ZTI4NDc5MTM1OGM0NmMyZjE0ZDMyMGQwMDBjYTUwNTM4NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm7zMmZcUsXyoDe+knR9LvXxsqzk
bKysy4dW/VGtBE55t/xTSfPSUS+c7EKFSlzNkxkkx511M/NtfO2jVlm+P7MVKuR1
9++ImGh2c5Hr99Frtf3s0nkcjKkwQxJbeX0hKDSeX2UtggDVpxdY+p44nQuZTzkp
vGAjwqKEaBN08HEclPRRHeE2YXPjX0Rvv/9KxfJT3ZXevjZJKfnHIl1miUrdxVg3
vIkFrOKeYJ503eso3uElL0IKHUVGkX5kSd+8wpE50zzXvMztfjN2237EVy7HXTFg
dw5LLcMQMlxcWV8+e3IP2VsRC6eMnP7RYGZL6q7uyrLVoKGac3p+3OyvqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErE4oR5E1jEbC8U0yDQAMpQU4VAMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvU3NUaWhIa1RXTVJzTHhUVElOQUF5bEJUaFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsUMA0G
CSqGSIb3DQEBCwUAA4IBAQBxKsFI8+v+OS52UMv8N0/63QoIN2c2NZJSBsSN0xqU
sNyHaJU/J1kUdc37miMempZrPYDF8hhdIL/SH/ZfW8sbIcK9xgz21d0IDJLUj53y
F6ElDHQS3YirCGwPYdZ9hhRiiqepqh555RIDvKgAvGc62K4xekuH1q61uND0nuhT
B8IxFS+RV8UsllVYk1QFIhM0BRxVreHK5MokNZlrl1nDr4PYDawAg83zrQgQ7v0O
3tybhXM7LHTSPyhtVzDN5LEo4eJFkDpw8pCPt+wyB1b7NBT4hSSPOULiLInEJeVj
3tPhNMiZ9k8C5u8j8yfUlqIU8fscpubFjdW20SH/ZygO
-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:45 2026 by rpki-client