Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa
File: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (raw, json)
Hash identifier: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=
Subject key identifier: 83:86:CC:09:1D:48:D8:0F:BA:09:74:B1:D1:6F:F6:97:75:8A:1C:D8
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691AE4A83C8551477BFBF10FA8CB78
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9050
IP address blocks: 89.39.0.0/24 maxlen: 24
89.39.1.0/24 maxlen: 24
89.39.2.0/24 maxlen: 24
89.39.3.0/24 maxlen: 24
89.39.4.0/24 maxlen: 24
89.39.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:e4:a8:3c:85:51:47:7b:fb:f1:0f:a8:cb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8386cc091d48d80fba0974b1d16ff697758a1cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:10:bb:8f:d4:6a:ba:b8:7e:f6:ba:03:45:
b3:4c:e8:e4:db:39:48:65:22:5a:9f:fd:63:65:cb:
e8:b1:f7:63:39:a2:72:a1:c9:b4:fd:01:4e:8e:59:
a3:58:30:41:51:b6:a9:3f:73:02:f4:bd:62:c1:76:
85:fd:c3:f9:09:cb:1b:11:b3:0a:67:a0:bc:f7:a1:
9c:80:3e:d1:76:5f:f0:bc:f4:73:21:e0:9d:a0:c6:
5c:93:72:14:cd:38:a5:02:34:dc:93:da:a2:f7:fd:
0e:18:f3:7d:0d:d2:c4:fe:65:eb:78:97:16:54:5f:
59:6e:75:94:c3:2f:d6:ea:36:1d:6d:53:45:57:99:
42:68:83:4a:35:7b:cc:d7:42:67:d4:b2:cd:6e:f6:
02:1a:7b:c1:15:fa:09:f2:ae:b0:6b:83:3c:bb:25:
58:7c:9d:55:2e:d7:fb:75:16:3d:39:cd:ad:27:29:
98:d4:c9:1e:61:3d:a6:42:84:d5:51:24:df:40:65:
02:83:0b:5d:db:c1:0a:ff:23:9b:d5:19:9c:43:5e:
e0:c5:b6:26:47:e2:8e:1c:5f:96:bb:35:af:94:68:
ad:8a:b2:c7:81:98:88:91:a4:19:48:73:09:02:98:
cb:31:75:d6:37:e3:20:dd:f5:4d:4a:ae:88:4a:a3:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:CC:09:1D:48:D8:0F:BA:09:74:B1:D1:6F:F6:97:75:8A:1C:D8
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.0.0-89.39.5.255
Signature Algorithm: sha256WithRSAEncryption
6b:cb:ba:db:2c:7c:16:5a:b9:4b:d0:da:f6:95:df:36:d0:d8:
0d:40:36:94:12:98:4b:40:f8:7d:f2:6b:80:05:ea:00:01:04:
54:32:40:8c:b4:92:ed:60:ea:7b:5e:5d:96:3f:eb:2b:a6:e5:
03:af:2a:dd:0e:eb:02:98:f8:a9:8c:fa:37:e6:e8:a9:f9:b2:
e2:56:2d:6d:42:1e:9d:f2:c6:bc:95:c5:e3:85:16:26:c2:b2:
c2:4e:12:12:87:a0:b4:87:5c:80:00:33:f7:e2:db:d8:11:a9:
c6:bf:fd:d6:7f:4d:1f:fa:e2:7a:0f:5d:b8:4a:89:90:40:96:
c8:1b:b1:9b:f4:d5:20:45:44:36:be:b6:77:bc:64:da:81:b7:
c0:a6:f9:ff:a9:2c:54:ab:95:bb:7f:55:2f:4c:7a:61:66:63:
59:91:10:63:10:c1:d3:1d:f0:79:7a:cc:c9:e1:15:57:32:68:
00:d6:80:1c:06:77:35:d5:0b:49:ed:bb:df:d0:a0:b1:16:d5:
cb:21:54:da:42:a4:24:47:cb:1c:cf:53:91:b7:06:06:9c:ea:
2c:54:b9:91:54:1e:7b:39:1c:6d:87:fe:a1:31:7c:d4:8c:7e:
42:cc:87:21:ae:8e:3f:ed:b8:98:a5:9b:9a:cb:55:51:df:9b:
b0:27:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:17:02 2026 by rpki-client