Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/l2cRV4HI9hlxJTmUldB6635hEXI.roa
File: l2cRV4HI9hlxJTmUldB6635hEXI.roa (raw, json)
Hash identifier: JZ2ru/Hao2ygJiUeWr57rISCtf84sgqtw4sOdK0mPdw=
Subject key identifier: 97:67:11:57:81:C8:F6:19:71:25:39:94:95:D0:7A:EB:7E:61:11:72
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F2369096517E2C59B23B20F5A20E0733E
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/l2cRV4HI9hlxJTmUldB6635hEXI.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42689
IP address blocks: 89.187.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:65:17:e2:c5:9b:23:b2:0f:5a:20:e0:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9767115781c8f6197125399495d07aeb7e611172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:55:4e:39:0d:96:09:30:3d:2e:6b:cd:2a:
60:0a:d7:bf:76:00:c8:82:0e:e8:f4:c6:72:b3:eb:
2f:44:49:8d:25:70:0d:96:99:ab:a0:2c:93:60:69:
d4:48:26:b7:9d:3f:e7:e7:aa:da:04:87:ea:f6:86:
4d:7a:88:f8:2b:93:dc:25:83:a5:39:0d:6d:6e:93:
b4:c6:78:14:52:70:92:0f:f0:d7:b9:89:3a:28:ea:
2f:b1:74:53:22:5a:a4:42:16:9b:5e:eb:64:9a:7e:
b0:62:8d:a2:25:8a:02:b2:e2:7e:e6:6c:a9:64:41:
46:d0:2e:df:3b:6b:b9:91:77:2e:5e:31:9e:2b:ba:
d7:8f:42:ae:ce:a9:8d:50:d8:64:9d:6e:0f:01:ba:
d3:16:a7:85:38:46:6c:79:91:2e:89:0a:ad:d6:46:
aa:42:40:c5:e5:73:0c:0c:d4:ed:fa:e0:2b:15:29:
71:4a:49:4c:71:4f:ff:69:c3:8b:78:9d:ca:79:d3:
d3:86:a1:d7:70:b2:2d:6c:a2:c4:c4:29:a9:56:c4:
ca:25:7f:79:5f:3e:ec:cb:f0:24:c6:e9:25:e4:bf:
86:ad:9e:f4:3c:af:ff:aa:aa:74:b9:87:58:d1:b5:
3a:2d:af:54:e0:b5:32:12:19:84:1a:d8:61:10:1b:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:11:57:81:C8:F6:19:71:25:39:94:95:D0:7A:EB:7E:61:11:72
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/l2cRV4HI9hlxJTmUldB6635hEXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.4.0/24
Signature Algorithm: sha256WithRSAEncryption
74:75:b2:00:04:5d:9e:74:fa:62:ae:4d:1f:7f:77:99:97:f6:
d7:8b:64:f7:cc:92:76:fd:cd:fd:3c:7e:a5:17:96:68:44:a3:
28:09:06:a1:a3:7c:68:2c:30:60:25:8d:bb:e9:f7:1d:07:14:
91:f3:85:fe:1f:d9:3f:e1:5f:f3:71:6e:7f:1c:b9:72:09:a0:
6b:67:c8:65:32:d7:54:3e:ca:df:ef:f2:e1:6f:1d:34:a1:fc:
e7:f6:71:77:b9:83:62:b8:55:48:ac:d7:f9:96:f3:4c:e5:2b:
d4:24:01:fa:54:54:ca:fe:9c:37:d2:de:98:55:0b:1c:e8:3c:
ba:1e:d7:53:1b:98:78:36:7f:f9:52:59:cb:f5:4f:9a:46:0e:
eb:f8:81:d2:b1:75:7f:9b:c9:ae:97:5d:03:3c:41:bb:17:cf:
61:06:3e:05:7c:8c:85:36:bf:7b:57:bd:52:9a:45:ec:34:25:
00:63:96:3f:01:c5:94:e6:f7:6d:29:39:de:e8:fc:53:80:94:
73:93:17:42:04:d5:6d:e5:97:c1:c9:96:af:73:23:b9:d7:2b:
c0:12:a2:04:db:20:6c:b6:dc:7b:d9:18:c1:13:e6:cc:32:5d:
2b:35:b9:0a:84:60:c3:c8:29:24:da:49:fb:67:59:db:f8:47:
50:b3:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:40 2026 by rpki-client