Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa
File: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (raw, json)
Hash identifier: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=
Subject key identifier: 8B:93:0E:A8:86:92:C9:73:F4:59:FD:F4:EC:96:7E:1F:D7:CF:09:4F
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691D5C561E2D08E3A6F231E10E697E
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36224
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:5c:56:1e:2d:08:e3:a6:f2:31:e1:0e:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b930ea88692c973f459fdf4ec967e1fd7cf094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:c5:15:38:7c:39:ac:72:3e:50:79:5d:c3:
98:4a:b3:e9:34:f4:47:aa:03:0d:b1:31:f6:0c:54:
44:3c:1c:0d:a8:d6:7a:bf:99:13:4c:e1:b8:c5:3d:
34:a5:e4:3c:de:28:fd:03:5a:c1:92:4f:4c:04:92:
33:21:9c:6f:b0:08:8e:73:3b:b4:84:e4:24:7e:86:
ba:6f:4a:76:cd:19:14:54:ae:9d:f8:5e:4d:05:c3:
94:34:1b:35:cc:7a:5c:53:af:b1:d0:c8:51:ae:1b:
fe:b4:55:5c:2e:9b:4d:fe:a5:38:f7:bb:56:53:12:
85:a0:36:6b:26:45:88:fb:82:9b:ac:de:90:4e:e1:
3e:08:e2:05:37:a4:f6:ae:b5:51:03:8d:db:e7:10:
63:29:e4:67:82:6b:88:8e:03:60:d2:5a:23:6b:5a:
f1:4b:86:d2:d5:c8:b1:6b:83:3f:10:70:84:05:26:
f4:ee:17:2b:92:39:a3:03:1a:f2:58:80:8a:ac:6e:
cf:d4:80:fd:aa:19:b4:ca:bc:cb:5c:ff:27:70:2a:
87:05:28:e6:23:60:2b:c1:b4:7d:b5:6c:39:7f:b9:
59:03:33:66:27:31:c7:67:61:7c:32:0c:69:7b:6d:
2f:4c:2b:cd:0d:f0:61:db:aa:46:01:f4:c5:92:df:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:93:0E:A8:86:92:C9:73:F4:59:FD:F4:EC:96:7E:1F:D7:CF:09:4F
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cc:53:45:75:2f:22:da:5c:83:e9:4b:90:08:5d:2a:8c:0a:
ec:29:ff:00:db:c0:c3:b7:2d:44:5e:4b:7b:14:0d:d2:7f:cf:
87:a7:61:42:90:17:e7:68:17:38:9c:6d:19:f6:d8:dd:ef:4a:
88:69:14:3e:45:70:61:3a:6c:0e:6b:6b:5f:34:aa:8f:4b:8f:
05:4b:f1:95:ba:d4:de:a7:43:db:11:f9:22:14:9c:f8:85:14:
e2:66:4f:19:5f:a8:b2:c5:ea:bf:e6:67:6c:04:a7:71:0c:bb:
be:80:37:c5:01:af:eb:e1:24:6b:bc:fc:c0:ce:10:90:fe:f6:
1c:9a:bb:51:6b:5a:52:17:d2:4f:58:9d:ec:c2:6f:94:b1:2b:
c8:cc:72:ba:ac:91:8a:b7:36:1a:78:d3:fa:6c:d4:de:66:5b:
9e:85:16:e4:37:72:aa:44:f7:b9:16:53:90:1e:e6:78:04:fa:
da:00:cb:75:19:40:8c:73:c0:c2:85:a5:7e:00:9b:7c:fa:f7:
eb:b8:68:bc:d4:3e:0c:f1:c1:9d:72:fc:55:b4:d0:8b:b2:45:
78:54:34:1c:b2:29:dc:aa:ce:45:f6:b9:5f:4d:6d:7b:3d:1f:
ab:39:90:11:38:c0:d8:e0:4d:31:ff:88:e3:b6:23:84:28:0e:
17:f6:46:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaR1cVh4tCOOm8jHhDml+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzAyMTUxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjkzMGVhODg2OTJjOTczZjQ1OWZkZjRlYzk2N2UxZmQ3Y2YwOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm7FFTh8OaxyPlB5XcOYSrPpNPRH
qgMNsTH2DFREPBwNqNZ6v5kTTOG4xT00peQ83ij9A1rBkk9MBJIzIZxvsAiOczu0
hOQkfoa6b0p2zRkUVK6d+F5NBcOUNBs1zHpcU6+x0MhRrhv+tFVcLptN/qU497tW
UxKFoDZrJkWI+4KbrN6QTuE+COIFN6T2rrVRA43b5xBjKeRngmuIjgNg0loja1rx
S4bS1cixa4M/EHCEBSb07hcrkjmjAxryWICKrG7P1ID9qhm0yrzLXP8ncCqHBSjm
I2ArwbR9tWw5f7lZAzNmJzHHZ2F8Mgxpe20vTCvNDfBh26pGAfTFkt99fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuTDqiGkslz9Fn99OyWfh/XzwlPMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvaTVNT3FJYVN5WFAwV2YzMDdKWi1IOWZQQ1U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWScGMA0G
CSqGSIb3DQEBCwUAA4IBAQBWzFNFdS8i2lyD6UuQCF0qjArsKf8A28DDty1EXkt7
FA3Sf8+Hp2FCkBfnaBc4nG0Z9tjd70qIaRQ+RXBhOmwOa2tfNKqPS48FS/GVutTe
p0PbEfkiFJz4hRTiZk8ZX6iyxeq/5mdsBKdxDLu+gDfFAa/r4SRrvPzAzhCQ/vYc
mrtRa1pSF9JPWJ3swm+UsSvIzHK6rJGKtzYaeNP6bNTeZluehRbkN3KqRPe5FlOQ
HuZ4BPraAMt1GUCMc8DChaV+AJt8+vfruGi81D4M8cGdcvxVtNCLskV4VDQcsinc
qs5F9rlfTW17PR+rOZAROMDY4E0x/4jjtiOEKA4X9kbJ
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:27 2026 by rpki-client