Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/X-2N1a5UxbTy8UiT9fJ_Ncm8URk.roa
File: X-2N1a5UxbTy8UiT9fJ_Ncm8URk.roa (raw, json)
Hash identifier: nD4QapFvX1Fl/0WBxavjE2vvK1teC2/+MXL6kQWr5E0=
Subject key identifier: 5F:ED:8D:D5:AE:54:C5:B4:F2:F1:48:93:F5:F2:7F:35:C9:BC:51:19
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019ED5CC7A125AB6EFD9344B4CF242B4F441
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/X-2N1a5UxbTy8UiT9fJ_Ncm8URk.roa
Signing time: Wed 17 Jun 2026 13:36:48 +0000
ROA not before: Wed 17 Jun 2026 13:36:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210599
IP address blocks: 89.124.254.0/24 maxlen: 24
89.124.255.0/24 maxlen: 24
2a14:f280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:cc:7a:12:5a:b6:ef:d9:34:4b:4c:f2:42:b4:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: Jun 17 13:36:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fed8dd5ae54c5b4f2f14893f5f27f35c9bc5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:b3:fe:e0:aa:b3:53:f7:60:ce:49:a7:d6:
56:fa:6a:cb:2f:c0:ea:5b:58:63:03:39:32:67:67:
4e:27:79:18:b0:bc:bd:96:b9:2f:18:dc:bd:e3:95:
4c:29:8a:29:f1:ed:82:23:ad:9d:70:e5:22:73:7d:
1a:4b:3b:6b:a2:1b:f0:88:45:e9:f2:e8:8c:5b:4c:
e5:74:a4:ce:8f:39:33:57:a1:6f:03:ea:b6:29:62:
ad:a7:f0:e8:fc:ef:3f:78:b6:bf:4d:07:5b:6b:79:
8b:4c:94:5e:f6:a8:61:c3:80:57:d6:e3:10:bf:8b:
60:a3:8a:ff:08:77:70:91:3a:7e:42:c7:a1:b3:44:
63:1f:06:ea:26:93:bc:d4:52:6a:4a:22:bc:28:62:
5a:37:fe:46:5b:fe:0b:b9:bc:d1:98:1b:6c:90:62:
40:b7:ae:bf:37:67:65:a7:b9:0b:1e:aa:a8:fa:37:
1b:c5:d1:df:53:cd:80:ca:f4:bf:95:4b:93:b3:b5:
f9:0f:01:d2:2c:29:3e:1a:f5:ad:d4:42:26:cb:39:
df:a1:44:32:dc:43:e6:d9:82:eb:7b:ee:3a:e8:05:
a1:98:d4:fc:03:10:e3:6b:4a:af:b1:94:79:64:ea:
c0:e0:3b:51:42:ca:e6:30:ab:90:4b:ab:f4:28:4a:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:8D:D5:AE:54:C5:B4:F2:F1:48:93:F5:F2:7F:35:C9:BC:51:19
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/X-2N1a5UxbTy8UiT9fJ_Ncm8URk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.124.254.0/23
IPv6:
2a14:f280::/32
Signature Algorithm: sha256WithRSAEncryption
17:b3:91:67:d1:1b:47:e8:f0:0c:5d:6d:76:2d:10:69:0d:e8:
29:b4:dd:10:ec:66:73:ce:b6:01:7d:1d:5d:70:45:a5:ff:b2:
30:8c:6a:e9:4f:e6:7f:a7:bd:1a:8b:05:ee:16:63:4d:27:14:
c9:fc:48:c3:47:56:de:57:75:06:73:37:55:a3:27:38:83:4a:
b8:c6:b0:85:3e:30:e1:5e:f6:46:59:f8:09:88:3e:cd:52:37:
b3:e7:70:9f:36:fb:db:90:0e:94:75:83:80:6e:94:89:8c:53:
d3:e7:bf:fe:20:b8:06:0d:ac:8f:3c:e0:7d:c1:7b:24:1c:96:
fc:42:e1:a5:0f:4f:0a:61:77:47:9d:ea:fb:78:5a:43:b5:c0:
d8:2c:73:18:87:e6:99:59:4c:96:b1:40:06:61:be:0d:12:e5:
36:ec:41:12:52:d3:07:0c:36:8c:0f:c9:c1:5d:da:78:1a:4d:
0c:4d:95:54:cd:5d:52:2d:c6:c7:84:16:95:88:7a:2e:de:d9:
be:e8:cd:f1:1a:7b:b6:ba:3f:0f:16:a6:74:c7:c8:e5:f3:05:
90:41:c7:3a:df:52:8f:6b:7d:6e:ec:84:29:c4:73:d0:4f:b7:
50:c7:f4:29:5c:99:cd:ed:e6:d7:68:1e:2f:f9:3d:30:71:c9:
de:47:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:00 2026 by rpki-client