Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/15YRYk0OOsur4nmbjHzqrTrzfeQ.roa
File: 15YRYk0OOsur4nmbjHzqrTrzfeQ.roa (raw, json)
Hash identifier: WZaueawVRKmmS1Xzndpi76+h8hyQuijG+xnuMLZ7DTo=
Subject key identifier: D7:96:11:62:4D:0E:3A:CB:AB:E2:79:9B:8C:7C:EA:AD:3A:F3:7D:E4
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0812BB5E4330CB32D4E49751323B175FF
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/15YRYk0OOsur4nmbjHzqrTrzfeQ.roa
Signing time: Tue 08 Sep 2026 13:18:40 +0000
ROA not before: Tue 08 Sep 2026 13:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 89.32.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:2b:b5:e4:33:0c:b3:2d:4e:49:75:13:23:b1:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 8 13:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d79611624d0e3acbabe2799b8c7ceaad3af37de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:0d:a4:b6:4b:90:65:9d:69:da:08:33:42:
12:a0:a0:cb:91:e4:c0:5e:aa:36:ee:8a:25:70:38:
3e:77:5d:54:fd:32:cf:59:b7:89:93:31:d7:7f:0d:
f7:cc:38:93:8f:53:5f:db:e8:c5:22:19:5f:2f:5f:
d0:54:ed:f0:e0:33:9e:32:5a:07:a9:d0:97:85:7e:
92:b1:e5:4d:24:ce:6a:27:a3:cc:fd:1f:1f:fc:b7:
b1:07:3b:1e:79:e3:0d:7f:47:34:59:12:eb:2a:ca:
5b:01:76:33:0b:8f:3d:c9:ae:d3:0c:02:59:f4:5d:
36:d4:1e:75:1c:4a:44:ed:26:5d:db:45:6c:cd:90:
e3:05:40:5d:b8:dc:18:82:a6:61:d9:ef:13:16:11:
4c:aa:f8:c3:04:e6:87:6d:b5:9b:68:9d:b3:64:f5:
14:83:79:34:51:43:82:5f:38:cf:a0:13:27:2e:83:
bb:7c:7b:bd:1c:ce:cb:db:a6:2d:d4:ae:b7:2a:70:
1a:ee:b0:8e:66:c1:9e:f4:f5:9d:06:2e:23:e8:3b:
46:7b:df:df:4c:ec:b2:a8:d7:bd:4e:f7:36:43:bf:
5e:50:8b:45:aa:4b:27:be:aa:34:38:ec:f6:3c:d8:
81:dd:22:db:89:9d:37:63:bf:6c:41:36:cf:1f:d6:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:11:62:4D:0E:3A:CB:AB:E2:79:9B:8C:7C:EA:AD:3A:F3:7D:E4
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/15YRYk0OOsur4nmbjHzqrTrzfeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.172.0/24
Signature Algorithm: sha256WithRSAEncryption
07:87:89:17:08:ee:01:68:ba:80:f2:15:be:88:04:d0:1f:8e:
60:1f:3a:0b:86:cd:e3:8b:b8:6b:ce:12:d6:ac:d3:d2:00:b9:
be:4b:1e:47:e4:cb:48:21:64:57:0f:47:47:43:5d:2e:b1:82:
c3:5e:7a:90:4c:ce:f2:29:28:95:c2:82:b7:83:cb:cf:f8:aa:
3f:69:0a:29:a9:f0:1d:8f:95:16:8b:c5:13:d5:4a:87:c4:ea:
ff:76:49:9b:5f:dd:71:4a:8d:06:d1:e5:84:d2:e5:93:09:45:
ea:6a:1e:e1:8a:e2:72:e2:cb:49:4b:d4:4f:33:d3:83:ab:04:
7d:bf:44:aa:da:2b:c2:85:d2:dc:ce:d7:01:02:48:e2:16:15:
dd:12:c3:a6:3e:f6:7a:ca:61:e0:22:50:3d:f6:9e:54:f4:3c:
80:27:c2:2e:1b:5d:2d:c9:f8:11:e4:ff:ba:a8:eb:7f:fa:fe:
c7:de:4e:29:f9:d7:4b:27:a4:43:50:d8:97:db:87:c1:e0:ee:
0e:ff:71:f7:76:c8:6c:51:0d:a8:ef:b2:72:67:c1:b5:7e:83:
97:4d:cb:1a:63:30:30:58:63:09:41:b2:ed:36:c0:50:72:28:
28:6c:f5:e6:c8:72:5c:15:a2:69:8a:9d:18:37:a8:56:bb:77:
c6:2a:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:36:14 2026 by rpki-client