Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/j5XXmlGGY1dqOLF0DNHKK3ZRzkA.roa
File: j5XXmlGGY1dqOLF0DNHKK3ZRzkA.roa (raw, json)
Hash identifier: AiHtZhjIv2Oz/tKHfl8zkrHe8iUj0cOjhIMgLwQ0U6Y=
Subject key identifier: 8F:95:D7:9A:51:86:63:57:6A:38:B1:74:0C:D1:CA:2B:76:51:CE:40
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E6A86538A0DE90C11E5797E20EB800D47
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/j5XXmlGGY1dqOLF0DNHKK3ZRzkA.roa
Signing time: Wed 27 May 2026 17:40:48 +0000
ROA not before: Wed 27 May 2026 17:40:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35682
IP address blocks: 189.74.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:86:53:8a:0d:e9:0c:11:e5:79:7e:20:eb:80:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: May 27 17:40:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f95d79a518663576a38b1740cd1ca2b7651ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:26:e4:95:f4:8b:f0:d3:ae:96:4d:b8:8d:
de:89:85:ce:bc:72:a9:fa:10:56:74:e8:69:59:c8:
de:73:80:e7:eb:a8:14:80:3c:21:7c:6e:eb:37:98:
02:f2:98:22:d3:44:21:23:2a:ec:57:56:c4:e7:b1:
df:e1:b0:f9:69:b6:42:5e:c6:44:7c:a3:a6:42:22:
46:4a:6e:f6:d4:1c:9d:72:ff:80:94:e4:d4:20:14:
c4:0e:5c:20:5e:7c:00:6f:f0:86:b1:db:89:6b:b6:
a7:2f:05:a1:2d:5f:49:31:7f:b5:7e:b7:5c:ad:6c:
da:a3:82:fd:8d:78:ba:e3:e8:de:ea:4e:c3:72:c3:
fa:59:c0:5d:39:c0:86:a6:58:fa:04:63:73:42:42:
ae:cd:08:1b:e7:f6:0a:ac:10:44:d9:45:58:53:57:
b1:a7:36:6c:47:c3:7c:38:9f:4c:a1:d2:0d:84:ff:
f6:f1:0b:ed:6b:5a:c5:3f:95:bc:62:2c:60:59:dd:
a6:d2:51:d5:9a:c1:98:31:ab:a4:6a:0d:05:73:4e:
af:52:98:d7:b6:6c:bc:f5:95:6d:10:10:04:2a:fe:
78:4a:f4:1d:27:e8:70:03:c6:ae:dc:e9:a7:dc:a1:
7e:73:af:06:a1:28:6f:c5:bf:4b:3b:65:4e:72:bc:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:95:D7:9A:51:86:63:57:6A:38:B1:74:0C:D1:CA:2B:76:51:CE:40
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/j5XXmlGGY1dqOLF0DNHKK3ZRzkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.96.0/21
Signature Algorithm: sha256WithRSAEncryption
af:5b:f7:6e:d0:b9:9b:9e:b0:29:d7:a4:a3:3a:eb:6c:55:54:
be:92:ba:15:db:5e:12:0a:39:dd:2c:48:09:3c:4f:c8:86:98:
98:5e:47:e1:b4:94:e8:07:ec:2b:b7:5c:8c:e7:b3:30:80:d1:
f6:45:3c:ff:f2:15:eb:12:8b:06:8b:ae:23:2e:20:db:11:ca:
99:26:6e:1e:4f:28:ee:a7:d0:2f:84:ab:b5:fa:01:ba:9f:88:
fa:d5:90:8d:d1:df:6c:7d:f5:fa:5e:e1:66:9f:e0:60:a1:ff:
99:fe:8f:97:2a:3a:f2:20:ed:70:b3:3c:00:11:7b:c8:1a:12:
49:5f:7e:6e:7f:eb:d3:26:5a:dd:60:9e:70:16:ab:e3:46:28:
41:bc:39:eb:2e:11:74:51:04:ac:39:d0:85:eb:cc:6a:d5:6c:
03:fa:d3:98:6e:34:ea:56:75:6b:42:02:cf:78:fc:a8:02:7e:
0a:3e:70:13:79:bf:56:2c:46:5e:04:31:c4:4c:5e:e1:7e:50:
12:37:4d:dc:41:07:78:5f:e0:10:4a:e2:23:98:75:49:a2:04:
f2:99:44:64:4d:8e:94:0b:93:5d:b5:d9:40:5d:c2:c4:26:4e:
c6:62:ca:eb:ed:66:63:fe:e4:4d:3c:a4:12:37:1b:2a:be:a9:
40:6c:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:56:45 2026 by rpki-client