Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7cenknyVLqyPYJKTgZzN5kqtu9g.roa
File: 7cenknyVLqyPYJKTgZzN5kqtu9g.roa (raw, json)
Hash identifier: CPeH9aVk3Uk6ypjkKXjSlIvKDJ3jOZ82q3Y2uy0yLlo=
Subject key identifier: ED:C7:A7:92:7C:95:2E:AC:8F:60:92:93:81:9C:CD:E6:4A:AD:BB:D8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A013481C327942AC569B31DDC629CA464D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7cenknyVLqyPYJKTgZzN5kqtu9g.roa
Signing time: Tue 18 Aug 2026 05:11:28 +0000
ROA not before: Tue 18 Aug 2026 05:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54339
IP address blocks: 89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:48:1c:32:79:42:ac:56:9b:31:dd:c6:29:ca:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 18 05:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc7a7927c952eac8f609293819ccde64aadbbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:54:59:07:af:88:24:c0:db:a6:80:8a:68:
ef:71:70:71:92:83:21:d6:39:f4:5b:d1:43:25:23:
b7:be:81:7f:63:73:2f:94:33:cd:ba:2b:75:b0:2e:
ed:7e:66:a1:28:b4:d0:af:ea:23:d1:29:b4:60:ae:
07:a0:f1:23:f5:62:82:88:ab:bf:9f:7b:0d:11:86:
f7:e4:bd:3e:7a:0e:0f:d5:97:ce:52:c2:31:e1:d3:
c1:cf:29:b4:24:fa:d8:1a:76:3e:04:0e:d1:6e:cf:
13:cb:b2:31:1e:78:0b:c8:82:c7:c7:b0:8d:c3:41:
e7:79:34:c5:83:12:22:51:70:2f:06:26:f2:29:a3:
38:6e:b1:69:74:7d:ef:62:c0:57:64:2c:55:14:34:
1f:86:5d:11:16:bb:36:50:d0:a1:f3:79:25:b2:88:
44:b8:b9:71:de:c1:2d:a9:94:ea:e1:9c:95:30:9c:
07:9f:6d:8f:22:2f:37:ab:a1:0c:20:14:ef:20:df:
e7:81:17:96:00:cc:f7:cf:ad:f4:fd:4c:57:0e:fa:
b2:4d:18:0c:c2:d4:65:00:67:14:ca:b7:d3:1e:bf:
08:f9:75:ce:31:ed:42:21:b4:1b:6c:4b:e3:3a:5b:
93:36:e6:e1:52:09:14:b6:bc:61:ca:66:09:f6:8f:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:A7:92:7C:95:2E:AC:8F:60:92:93:81:9C:CD:E6:4A:AD:BB:D8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7cenknyVLqyPYJKTgZzN5kqtu9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
Signature Algorithm: sha256WithRSAEncryption
42:8d:33:0d:72:ba:f6:0e:da:30:c2:09:5d:d4:ec:1b:40:71:
56:72:31:d7:c2:da:29:da:22:bf:68:dc:f1:e3:8a:bf:7d:c9:
a1:e4:af:17:e0:b0:fe:18:fb:5d:d0:01:cc:56:93:23:96:53:
42:9b:99:4f:95:f9:44:3e:f5:89:b2:72:8f:a5:32:80:f0:6e:
34:fd:9a:96:02:f1:5b:c9:de:f5:8d:35:69:a0:38:88:52:79:
0f:21:7c:6d:95:76:9b:fb:44:01:fc:2c:6c:4f:66:e2:67:48:
db:61:e2:1f:1f:65:fa:d4:5c:ca:9e:ec:83:c7:46:c2:2a:60:
c2:71:5b:ce:74:18:d6:e0:11:38:42:7c:c8:48:6f:0d:ea:44:
09:58:43:24:44:cf:ec:3e:a8:54:66:fa:2b:07:ee:f4:b7:3c:
5f:09:11:af:31:09:ca:9e:7f:5d:d4:b2:50:4f:5d:37:d5:08:
e6:70:05:20:4f:f2:58:e2:5b:96:e2:8d:9b:d1:51:35:3b:93:
c9:07:0a:8f:6e:1e:cd:fd:85:bc:90:19:a9:23:0c:99:4f:90:
3c:6d:f0:76:56:65:e0:b6:cc:53:f1:1d:a7:82:29:c3:d2:1e:
ca:eb:31:3b:f4:d7:14:13:e1:fb:88:50:75:cb:c6:cc:90:db:
66:b3:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:39 2026 by rpki-client