Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C54sYVo1Q_CCiPo-XwduGAmkTO8.roa
File: C54sYVo1Q_CCiPo-XwduGAmkTO8.roa (raw, json)
Hash identifier: AI7x2nhrUF6ZgwP6SbBBU06pqp3JLVX2V3w9nqb2ksg=
Subject key identifier: 0B:9E:2C:61:5A:35:43:F0:82:88:FA:3E:5F:07:6E:18:09:A4:4C:EF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019CB80D54399BA551640EC032747F345C1F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C54sYVo1Q_CCiPo-XwduGAmkTO8.roa
Signing time: Wed 04 Mar 2026 08:53:27 +0000
ROA not before: Wed 04 Mar 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 89.33.194.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:0d:54:39:9b:a5:51:64:0e:c0:32:74:7f:34:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 4 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b9e2c615a3543f08288fa3e5f076e1809a44cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:8b:7d:e9:2e:e2:03:d7:aa:2a:8c:88:96:
3c:ad:65:18:dd:e3:60:be:dd:b0:d6:93:30:a8:c3:
f6:9c:77:63:29:41:d9:20:d5:6b:c9:3a:68:7b:65:
72:ee:ab:07:d0:35:8d:26:08:e0:a3:97:14:31:1e:
38:f0:c1:35:f3:17:91:2b:2b:44:05:e8:ec:cc:80:
4a:ec:5a:ae:e5:d0:40:8c:29:7a:32:bb:ff:31:de:
97:6e:fb:4d:3d:2b:94:a0:ac:a7:6a:a2:1f:01:f7:
14:0f:42:5e:f9:3e:84:f3:a6:70:d3:6d:98:55:3e:
e1:d5:c7:64:9c:0c:37:c9:d1:95:3f:4d:92:b4:c4:
96:d4:b2:84:7c:23:08:4b:f6:8c:ee:35:f1:43:60:
1f:bf:72:be:38:30:59:d7:e9:ff:93:69:19:a9:79:
08:80:dc:88:89:47:48:db:b1:16:4b:68:b7:6a:3b:
63:fc:ca:c5:f1:75:58:2c:4d:ba:78:c4:bd:fe:2c:
43:93:15:d0:a3:49:e3:8d:1b:25:b1:3a:ee:c4:94:
3c:45:d4:42:96:c3:ae:f7:37:fd:fe:1f:fb:c2:3c:
13:c2:45:6e:0e:94:f7:06:db:a0:ee:64:b7:c3:c2:
39:97:a4:43:8d:db:bc:43:21:5a:92:9d:4a:f5:8d:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:2C:61:5A:35:43:F0:82:88:FA:3E:5F:07:6E:18:09:A4:4C:EF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C54sYVo1Q_CCiPo-XwduGAmkTO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:46:69:64:08:34:0e:f9:0f:88:9b:e7:1e:5f:28:a9:e5:26:
e0:11:ea:cd:4d:83:9f:14:f3:55:70:96:5b:ee:de:ff:65:05:
06:5b:2f:a9:dd:19:98:77:6c:b7:f3:2d:c8:5c:fe:86:ee:55:
18:b7:e4:3f:17:e4:ad:d3:be:da:db:3b:52:09:5f:1c:e9:73:
07:3e:4d:66:63:0c:12:7f:f5:8f:37:6a:d8:8e:6d:45:80:2f:
40:82:19:93:a7:14:f9:48:6f:56:61:3c:30:4c:c5:37:28:44:
01:b9:ed:14:87:5b:55:d4:9a:16:3c:4c:76:8a:dc:0c:b3:df:
71:1c:dd:aa:99:82:40:55:73:0d:dd:be:3b:75:35:66:e8:cb:
54:5b:c5:1b:74:fa:a9:be:b2:e5:f0:c7:11:d4:a5:eb:10:8d:
68:c5:c2:a4:b8:69:96:d0:28:eb:f0:fe:be:b3:1f:e1:9a:96:
4a:b1:0f:bd:7d:48:e9:32:36:94:b9:1f:05:28:8c:da:fd:da:
af:f2:50:69:f9:3e:32:e2:85:94:d3:99:93:38:a9:34:d5:2d:
13:fc:be:8c:27:91:06:7d:78:fc:45:35:86:21:40:6d:b8:2f:
a7:4b:9d:94:98:6b:19:76:b5:0a:bf:08:9e:d6:83:e2:d4:76:
ee:20:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:14:05 2026 by rpki-client