Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/5eCm7YiekLnQx2Yrufz0DKOe4t8.roa
File: 5eCm7YiekLnQx2Yrufz0DKOe4t8.roa (raw, json)
Hash identifier: A4yzIFhcFavgDz/cnTf1E1mu+4JZXUZX4YW5ffY43Tw=
Subject key identifier: E5:E0:A6:ED:88:9E:90:B9:D0:C7:66:2B:B9:FC:F4:0C:A3:9E:E2:DF
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 01A02382C56FF3F06FCB53639B922242BF41
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/5eCm7YiekLnQx2Yrufz0DKOe4t8.roa
Signing time: Fri 21 Aug 2026 08:49:27 +0000
ROA not before: Fri 21 Aug 2026 08:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36384
IP address blocks: 89.207.224.0/24 maxlen: 24
89.207.229.0/24 maxlen: 24
2a00:79e1::/32 maxlen: 32
2a00:79e1:800::/42 maxlen: 42
2a00:79e1:abc::/46 maxlen: 46
2a00:79e1:f00::/40 maxlen: 40
2a00:79e1:f000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:82:c5:6f:f3:f0:6f:cb:53:63:9b:92:22:42:bf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Aug 21 08:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5e0a6ed889e90b9d0c7662bb9fcf40ca39ee2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:ea:df:7f:eb:45:88:24:29:bc:9a:17:24:
5b:99:2a:86:34:67:54:9f:30:ef:09:e0:b0:35:86:
f5:ce:57:de:d1:5b:5e:d6:be:28:96:45:2b:9f:c8:
5c:f0:b6:86:e9:83:09:67:97:16:2a:d7:62:52:1c:
65:8d:91:98:05:60:61:25:22:6b:51:6d:c9:9d:6a:
79:d8:f2:e3:b9:7d:04:51:94:06:8d:e5:3d:23:a0:
09:90:95:ff:da:17:00:91:6a:45:43:5c:30:dd:97:
b6:86:d2:15:e7:73:54:c8:ad:bb:47:ea:8a:ca:a7:
8b:74:f9:36:76:1b:d9:b7:d2:0f:13:6c:48:d3:0c:
b9:d4:8c:db:7d:e9:58:9e:f6:d8:b4:8a:a7:bf:8c:
ef:5d:d9:e8:b8:be:bb:39:7b:6f:fd:31:83:30:fa:
1e:3c:d8:66:53:30:e0:e7:53:19:4e:62:0f:42:55:
c5:cc:5c:61:ee:26:e4:a0:fe:ca:bc:a7:a7:77:9e:
e9:7c:8a:b8:f4:a3:83:a4:95:54:14:48:c1:d1:5b:
4a:1d:ea:fd:1e:af:02:36:09:fc:fe:bf:61:2c:c3:
68:e2:8c:a7:99:31:be:11:99:67:77:a5:01:50:5b:
dc:d6:d5:af:62:4f:da:05:77:00:ec:21:e6:c1:b8:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:A6:ED:88:9E:90:B9:D0:C7:66:2B:B9:FC:F4:0C:A3:9E:E2:DF
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/5eCm7YiekLnQx2Yrufz0DKOe4t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.224.0/24
89.207.229.0/24
IPv6:
2a00:79e1::/32
Signature Algorithm: sha256WithRSAEncryption
8c:80:61:34:f5:b5:79:5e:65:d7:fb:e9:a5:fc:6e:d0:29:a6:
3c:c7:7c:b2:b1:78:a6:0b:24:2d:a0:35:17:4c:f3:e6:29:61:
7b:64:62:76:2b:f6:ca:44:98:35:cb:80:d4:12:3a:00:21:06:
f8:02:e2:c1:d1:80:eb:9f:88:54:56:00:39:97:e4:de:01:c9:
87:4e:a9:95:de:d6:8d:ba:1b:47:b2:e1:a3:cb:0e:5c:7a:57:
8e:56:45:66:b3:b0:71:8f:95:df:39:79:2e:16:e2:35:67:b4:
83:4e:98:a5:06:97:ac:d8:9b:95:3e:58:87:1d:3a:01:74:4d:
b6:fc:7d:31:92:d1:b4:f8:e7:e6:4c:4b:16:91:89:b0:c5:e5:
fe:db:7e:5a:41:9a:e6:09:28:eb:b8:c1:d3:ea:17:e3:c2:4f:
18:d5:93:fb:62:ed:41:be:54:18:b4:77:91:6a:d6:f6:f0:dd:
b2:22:da:a7:62:e3:85:ae:60:4f:1e:4f:12:69:8d:13:e5:2c:
23:7b:27:3b:3c:a8:41:02:05:6c:20:94:cc:2d:7b:2f:9e:f3:
c9:a7:03:a4:68:78:0b:c2:59:56:93:1f:ca:75:d5:ac:98:79:
3f:ed:0a:e8:cb:cb:c7:3f:d0:fa:8f:ac:64:c9:34:28:87:27:
6f:0a:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:57:30 2026 by rpki-client