Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/q-F7XVsknMenmt3s2y2Ap35uUE8.roa
File: q-F7XVsknMenmt3s2y2Ap35uUE8.roa (raw, json)
Hash identifier: siGI/MtxVLJmJ0az6ijylHxWAmUH0lFrzl8X3qiS+vk=
Subject key identifier: AB:E1:7B:5D:5B:24:9C:C7:A7:9A:DD:EC:DB:2D:80:A7:7E:6E:50:4F
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F2369087E4F5EA3FC814F2D90D12B4C4B
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/q-F7XVsknMenmt3s2y2Ap35uUE8.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39810
IP address blocks: 89.187.0.0/23 maxlen: 24
89.187.2.0/24 maxlen: 24
89.187.3.0/24 maxlen: 24
2a10:e400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:7e:4f:5e:a3:fc:81:4f:2d:90:d1:2b:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abe17b5d5b249cc7a79addecdb2d80a77e6e504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:d4:be:ee:4c:20:07:d4:c7:1b:ac:d9:49:
f2:c7:a0:81:8c:d0:69:76:a2:db:21:35:26:72:65:
7b:d0:f1:1a:14:2f:82:91:ed:19:04:72:6f:c1:2a:
17:4e:d1:1e:a8:bc:46:a2:00:f7:01:9d:27:ff:09:
c4:58:69:9d:80:2d:3a:c9:ea:95:ed:ad:13:36:88:
79:27:f4:a8:3d:b5:27:3e:07:ba:dd:1e:4e:aa:1b:
75:ab:63:3e:87:48:9c:52:ac:68:27:65:2a:c0:4f:
ac:c3:75:d2:9a:63:29:2b:1f:86:e9:9a:d5:45:c1:
95:d6:4d:05:cb:05:39:c2:58:65:cf:33:7c:86:07:
37:e4:3a:a3:f0:bc:be:b8:b5:0e:8c:b8:f5:0a:0a:
5c:6c:aa:d1:2a:ba:e2:92:03:2c:73:3b:51:a1:53:
69:f5:48:72:1d:5a:3e:0d:85:14:fa:8e:31:2c:e9:
f9:37:c6:25:9e:61:cf:3b:40:2c:ec:d4:6d:80:d2:
a8:4a:52:f8:64:e7:9c:6a:9d:a3:73:14:9b:99:49:
49:d9:13:7b:6f:21:16:bc:29:3d:8d:b9:28:cc:e7:
a2:22:19:47:7a:2e:60:ec:14:8b:f0:cd:98:2c:b1:
7c:d3:dc:ad:11:80:e0:45:86:2e:c9:3e:b2:c6:ea:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E1:7B:5D:5B:24:9C:C7:A7:9A:DD:EC:DB:2D:80:A7:7E:6E:50:4F
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/q-F7XVsknMenmt3s2y2Ap35uUE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0/22
IPv6:
2a10:e400::/29
Signature Algorithm: sha256WithRSAEncryption
40:ac:1e:41:c8:e7:e4:b9:df:48:9e:a3:e4:1d:8c:d9:96:a4:
da:14:92:92:79:07:2c:f5:83:3c:42:07:6a:9a:f1:7c:b7:be:
60:f8:17:e3:19:7d:ec:cf:af:c5:0b:99:15:bb:54:26:78:bf:
85:5f:d5:4f:7c:00:a3:a2:ac:59:d1:ff:88:24:9e:0c:ba:ad:
fb:f8:7f:6e:bc:ba:42:d6:10:8f:15:08:d3:90:23:e1:4a:d9:
1e:49:f2:1c:94:ac:7c:17:6e:02:48:6a:17:ae:12:31:bf:43:
a4:64:97:10:2c:e3:85:f4:5c:b1:92:f5:81:cb:0c:01:ba:14:
5f:1a:ec:8b:48:db:e7:47:23:97:a2:64:cd:71:e0:e9:9b:ec:
6b:e8:c4:ff:ef:a6:a3:2c:30:85:e1:f1:f0:71:b1:7b:a8:9d:
74:04:3f:24:f5:9a:ac:fb:42:fe:f8:3c:75:d5:b9:7a:6c:85:
81:a8:be:8b:da:9f:57:ac:dc:ee:dc:4a:0b:16:f9:bd:cf:be:
b0:77:51:94:6a:f5:77:87:3c:37:e5:2f:36:ab:7f:b4:b7:98:
0a:73:74:a8:e3:c8:4d:18:5e:79:01:aa:a1:20:bb:a7:ff:d2:
36:ea:14:75:6f:a3:a0:1a:dc:4f:b3:30:0b:71:c9:d1:60:c1:
fa:66:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:08:56 2026 by rpki-client