Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/23lKamEeJHiGz7Kfn-vVx9ONIS4.roa
File: 23lKamEeJHiGz7Kfn-vVx9ONIS4.roa (raw, json)
Hash identifier: 6qSsbUjIvNUXcAg3dXx4AV4tSipluzB4BcgS9769SHs=
Subject key identifier: DB:79:4A:6A:61:1E:24:78:86:CF:B2:9F:9F:EB:D5:C7:D3:8D:21:2E
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E8D395C9312883EAF7AF567A29ECDA60D
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/23lKamEeJHiGz7Kfn-vVx9ONIS4.roa
Signing time: Wed 03 Jun 2026 11:23:27 +0000
ROA not before: Wed 03 Jun 2026 11:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 189.74.112.0/24 maxlen: 24
189.74.113.0/24 maxlen: 24
189.74.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:39:5c:93:12:88:3e:af:7a:f5:67:a2:9e:cd:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 3 11:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db794a6a611e247886cfb29f9febd5c7d38d212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:14:12:a9:5d:f6:d5:7d:88:f4:eb:03:5f:
b0:69:2f:9d:d8:82:9e:1c:52:62:a9:2f:14:f3:41:
f0:67:fd:f9:df:d2:d4:64:f6:74:87:29:f4:e6:3d:
f4:94:bb:79:21:8f:48:9d:05:7a:e9:6d:af:e9:23:
9f:b8:40:54:29:f4:c8:88:67:b6:0d:bb:b5:26:28:
84:d5:ee:0d:7c:67:0a:bf:41:b1:1d:e3:14:20:1f:
94:8b:31:4a:c9:f5:89:1b:1e:e8:a1:c9:d5:ca:eb:
46:41:d4:6e:2c:02:91:92:95:b4:a2:13:fb:af:f8:
67:1a:72:f6:51:23:42:0f:58:c4:ec:c6:d9:74:06:
93:1b:f8:48:ba:cf:5a:4e:21:4b:2e:c4:ad:e8:aa:
e7:90:e7:65:98:32:9c:dc:3d:1e:1a:ca:a2:9d:cd:
5d:b1:2f:33:f4:23:18:5e:c9:be:68:20:1c:d3:05:
17:86:d3:65:0f:3b:f8:f0:73:4a:d8:15:08:87:a1:
a7:b9:a2:09:fb:e7:83:79:6c:4a:27:01:f9:c1:f2:
8e:d1:9b:2f:a3:a2:76:b1:9d:20:30:02:88:99:e9:
75:4c:01:d2:5d:bb:80:ee:1a:10:88:4d:4c:bb:41:
02:fb:dd:c9:c1:8d:0d:a6:c0:c9:21:6f:59:ff:ba:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:4A:6A:61:1E:24:78:86:CF:B2:9F:9F:EB:D5:C7:D3:8D:21:2E
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/23lKamEeJHiGz7Kfn-vVx9ONIS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.112.0/23
189.74.119.0/24
Signature Algorithm: sha256WithRSAEncryption
44:73:e0:fa:f6:ce:66:86:ab:ee:61:d6:b1:7a:96:60:20:62:
80:69:2c:2a:19:66:a2:a5:0a:fd:c0:3f:fa:48:7a:c0:fb:78:
5d:66:44:9b:0b:e7:2c:f8:f1:69:d0:7f:32:71:12:dc:6d:55:
18:cb:14:15:45:e1:3a:95:71:d3:4c:b7:83:f3:89:da:1f:65:
3d:ac:0d:b5:dd:f6:87:8a:3e:be:bc:e5:bb:51:dc:0a:93:10:
34:1a:89:16:28:3c:5d:0c:bd:67:6c:e8:30:8d:d8:00:5c:28:
42:cb:7f:b5:ab:9e:2b:6f:02:d0:b6:f3:f1:2c:3a:8d:a6:8b:
15:ac:52:3d:b5:1b:f3:1d:9c:52:e0:98:36:3f:44:80:be:3d:
62:54:5c:e4:a1:12:0e:76:41:4e:04:b2:de:da:66:a5:00:b8:
e8:10:0d:4d:1a:8d:5c:13:ed:de:5a:04:f1:99:f5:91:69:8b:
fd:a8:52:af:76:a9:f0:52:6f:c3:6f:62:dc:d1:6f:e0:e6:bc:
7e:70:99:b2:13:d3:b9:e3:47:cd:38:65:a7:4c:d9:d3:fd:24:
85:6b:64:37:59:08:56:5a:93:9d:5e:33:24:2c:70:bd:f8:31:
52:bb:94:bc:ab:96:0b:75:c2:80:3b:7d:bf:3e:af:b7:90:ae:
8e:83:65:dd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6NOVyTEog+r3r1Z6KezaYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDEwOGYwZTg1ODY4YzJiYmU3ZGI2ZDczNzcwMzRjMTMx
ZWIyMjQwHhcNMjYwNjAzMTEyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjc5NGE2YTYxMWUyNDc4ODZjZmIyOWY5ZmViZDVjN2QzOGQyMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw4UEqld9tV9iPTrA1+waS+d2IKe
HFJiqS8U80HwZ/3539LUZPZ0hyn05j30lLt5IY9InQV66W2v6SOfuEBUKfTIiGe2
Dbu1JiiE1e4NfGcKv0GxHeMUIB+UizFKyfWJGx7oocnVyutGQdRuLAKRkpW0ohP7
r/hnGnL2USNCD1jE7MbZdAaTG/hIus9aTiFLLsSt6KrnkOdlmDKc3D0eGsqinc1d
sS8z9CMYXsm+aCAc0wUXhtNlDzv48HNK2BUIh6GnuaIJ++eDeWxKJwH5wfKO0Zsv
o6J2sZ0gMAKImel1TAHSXbuA7hoQiE1Mu0EC+93JwY0NpsDJIW9Z/7pf+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNt5SmphHiR4hs+yn5/r1cfTjSEuMB8GA1UdIwQY
MBaAFJXRCPDoWGjCu+fbbXN3A0wTHrIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvMjNsS2FtRWVKSGlHejdLZm4tdlZ4OU9OSVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBvUpwAwQA
vUp3MA0GCSqGSIb3DQEBCwUAA4IBAQBEc+D69s5mhqvuYdaxepZgIGKAaSwqGWai
pQr9wD/6SHrA+3hdZkSbC+cs+PFp0H8ycRLcbVUYyxQVReE6lXHTTLeD84naH2U9
rA213faHij6+vOW7UdwKkxA0GokWKDxdDL1nbOgwjdgAXChCy3+1q54rbwLQtvPx
LDqNposVrFI9tRvzHZxS4Jg2P0SAvj1iVFzkoRIOdkFOBLLe2malALjoEA1NGo1c
E+3eWgTxmfWRaYv9qFKvdqnwUm/Db2Lc0W/g5rx+cJmyE9O540fNOGWnTNnT/SSF
a2Q3WQhWWpOdXjMkLHC9+DFSu5S8q5YLdcKAO32/Pq+3kK6Og2Xd
-----END CERTIFICATE-----
Generated at Thu Jun 4 08:56:08 2026 by rpki-client