Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ent2Kc_I7-n0xgkndugfRcIJeCw.roa
File: Ent2Kc_I7-n0xgkndugfRcIJeCw.roa (raw, json)
Hash identifier: CbIXbmItplkiH5CyPpjFZJN2YVydWCbr5p8fjt2MV3g=
Subject key identifier: 12:7B:76:29:CF:C8:EF:E9:F4:C6:09:27:76:E8:1F:45:C2:09:78:2C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A003F8BC40803D5904149261612EB8CF3E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ent2Kc_I7-n0xgkndugfRcIJeCw.roa
Signing time: Sat 15 Aug 2026 05:50:27 +0000
ROA not before: Sat 15 Aug 2026 05:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395886
IP address blocks: 89.42.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:f8:bc:40:80:3d:59:04:14:92:61:61:2e:b8:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 15 05:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=127b7629cfc8efe9f4c6092776e81f45c209782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:91:da:9b:03:05:09:b8:9e:ac:40:8d:81:
28:02:bf:99:eb:4d:59:d7:8b:c0:3f:cb:0e:fc:0a:
00:96:90:11:31:18:88:bc:e2:20:00:3e:02:f9:b9:
5d:d3:19:ca:e6:34:62:69:87:93:9f:d1:47:10:6f:
a9:f3:fd:37:b7:2c:37:02:f3:30:de:05:96:4d:aa:
47:da:3e:bb:fe:2f:57:16:4e:ac:2c:23:ec:c9:f3:
b0:00:a3:06:3d:f4:10:d2:74:2e:44:3e:41:b4:8e:
09:b8:df:57:34:4a:63:f0:ca:73:b6:61:1a:a4:60:
e3:f2:25:97:d2:c3:69:e8:b3:1f:81:aa:de:67:18:
5d:36:1a:f8:e0:9f:31:50:a4:d8:c6:a7:43:f5:28:
00:ef:59:52:63:22:76:7a:ef:94:82:81:0e:e3:6f:
1f:1e:61:01:7d:19:f0:91:ca:ba:f0:03:d6:37:aa:
7f:d2:fd:1b:68:f5:2c:db:94:d4:95:f3:9c:b3:a5:
d0:1c:cd:8e:7b:05:8c:97:3c:3a:b3:a1:35:7b:ac:
ec:f2:46:23:55:ab:06:ab:af:46:60:a4:fc:7b:5b:
ae:55:51:5e:1e:b0:7f:2f:58:d6:26:ff:15:2a:7a:
6a:68:49:8a:ad:12:3f:09:62:90:a5:79:ca:8a:fd:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:76:29:CF:C8:EF:E9:F4:C6:09:27:76:E8:1F:45:C2:09:78:2C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ent2Kc_I7-n0xgkndugfRcIJeCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
48:04:92:4c:ef:30:05:9f:96:6c:1a:08:9b:ac:7e:d3:c2:43:
af:c0:df:48:26:99:56:46:de:a4:74:f8:d1:15:7d:6e:7a:02:
d6:25:10:fb:90:fe:8f:ab:cc:35:71:ca:88:89:52:a6:21:2b:
2e:9d:74:de:1d:4e:6a:61:6a:8d:f0:78:30:2b:ec:15:09:6e:
6f:91:fe:d7:29:c4:40:3c:bf:d9:d7:30:8e:2a:75:c3:a8:06:
f0:2c:9e:99:77:a9:a6:0b:e1:b6:0d:e2:13:9b:4b:0b:37:17:
ad:f3:20:a7:4f:9b:85:8d:74:b5:dc:24:a2:1c:cd:4c:19:13:
66:4f:02:c4:9d:27:2b:9d:e9:dd:e7:ee:ae:a5:61:f5:0f:a9:
62:45:30:27:06:96:15:5e:01:d2:ac:c7:df:40:f1:17:df:b0:
8e:a4:5b:e8:db:a2:a2:79:a9:bb:ea:48:ad:af:8a:f9:0f:9a:
42:1b:fe:04:e7:06:d7:f2:59:9f:4a:67:16:d9:b7:f8:9c:16:
fa:3c:dd:53:b6:14:ae:0c:32:44:ab:f9:9c:c0:a0:d3:ac:db:
39:dd:a7:fc:84:04:12:b6:76:c0:d2:79:62:88:72:91:07:8a:
1b:3f:16:80:88:d3:59:22:e4:05:b6:62:f8:df:57:24:10:f3:
91:d9:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:31 2026 by rpki-client