Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/f_wI7cWhOd7BlZtdC3usC5bf4RY.roa
File: f_wI7cWhOd7BlZtdC3usC5bf4RY.roa (raw, json)
Hash identifier: 7iIFk5ER5eDgqr6YzDXBOPaaWWI8Y6QRiFZ2F09wiO0=
Subject key identifier: 7F:FC:08:ED:C5:A1:39:DE:C1:95:9B:5D:0B:7B:AC:0B:96:DF:E1:16
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A0398403B4279F22E3BE095C7B398B8FEE
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/f_wI7cWhOd7BlZtdC3usC5bf4RY.roa
Signing time: Tue 25 Aug 2026 15:22:28 +0000
ROA not before: Tue 25 Aug 2026 15:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:84:03:b4:27:9f:22:e3:be:09:5c:7b:39:8b:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Aug 25 15:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ffc08edc5a139dec1959b5d0b7bac0b96dfe116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:6d:0d:72:f6:7d:5f:54:f0:20:ee:87:e5:
20:7b:c1:a1:74:31:2d:8b:ca:8e:25:c8:b8:21:96:
af:87:19:24:b4:41:1b:77:ff:e8:3c:7a:0e:84:5e:
77:9c:79:b6:ff:3d:ba:f9:4f:47:e5:db:9b:b8:85:
6d:68:e2:71:c7:33:94:37:0e:3a:95:c9:61:5c:23:
d3:bc:69:7e:db:c2:3c:d5:cd:2d:d5:d1:2f:af:ab:
35:3b:c5:a4:76:b7:8e:15:1b:df:70:23:25:a1:d4:
d1:10:c8:24:2d:77:d6:e5:3b:9a:d6:5d:94:d0:3a:
f2:1c:f2:7b:b4:8d:6e:22:31:87:44:f5:1a:75:88:
40:11:00:00:78:ab:a8:95:0f:fe:80:03:40:fa:08:
90:2c:c8:1a:db:30:84:df:85:78:61:24:a1:aa:2b:
cc:d0:ae:62:67:a5:e2:93:55:6d:30:2f:a1:73:5f:
7f:01:e4:d7:6c:e0:58:df:01:d6:a4:cc:ca:a2:ee:
70:80:b0:c9:f0:c3:32:17:74:90:be:66:7b:76:9f:
c4:16:6e:f9:22:d0:ac:66:de:cd:35:99:1f:c0:8d:
27:15:60:a4:60:a4:c6:35:72:16:0e:f6:51:84:4f:
7a:ec:f9:96:1f:91:49:3e:ac:36:18:3f:85:2f:c7:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:08:ED:C5:A1:39:DE:C1:95:9B:5D:0B:7B:AC:0B:96:DF:E1:16
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/f_wI7cWhOd7BlZtdC3usC5bf4RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.14.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7a:7d:7c:19:a2:93:33:4a:73:35:f9:64:54:75:6b:2b:5a:
db:43:56:a5:20:b6:be:4a:30:9a:fc:70:da:55:45:f8:fc:e6:
a8:e7:01:21:5b:c9:cb:71:15:f9:69:f3:43:1f:13:ba:c6:87:
db:b0:ba:d8:72:4c:8d:5b:b5:06:4b:37:af:17:1d:da:5f:d6:
36:0c:71:d0:eb:3b:b9:c5:43:92:ff:59:51:e8:91:b6:9e:be:
87:f6:28:84:ce:91:c9:6f:65:65:2c:78:bb:8a:9d:c3:67:45:
19:1c:d1:3d:44:b7:c7:6c:83:44:8b:86:65:f2:76:5e:89:3a:
e5:1d:94:87:de:97:38:b7:36:38:33:31:6a:97:37:a1:8d:6f:
55:c8:81:b5:2f:7e:aa:54:1b:51:96:89:d1:3b:7d:ce:49:be:
dc:87:19:69:c6:56:37:da:d5:1e:99:aa:29:59:22:22:77:63:
20:65:8d:a0:09:5f:94:d9:68:2d:6b:44:d5:73:19:77:db:cf:
5e:c4:64:88:a3:bd:9b:23:99:a4:98:2c:d0:0e:4f:a1:68:56:
c9:5e:58:97:75:46:8f:89:b9:b8:e6:5f:97:45:b3:9f:63:4c:
34:77:e9:d5:9e:06:6e:84:12:a1:d2:41:c6:4a:1e:ad:43:e6:
28:d0:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:32:21 2026 by rpki-client