Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GEvMnNZ4C5vzfu3ZCEmj-sd8zrQ.roa
File: GEvMnNZ4C5vzfu3ZCEmj-sd8zrQ.roa (raw, json)
Hash identifier: asSA15tP9+Urxx03JVR2dyD1PEWYw5ScRE/W+DPKM6Q=
Subject key identifier: 18:4B:CC:9C:D6:78:0B:9B:F3:7E:ED:D9:08:49:A3:FA:C7:7C:CE:B4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F6C9897EFA865E08EA98279262791AD95
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GEvMnNZ4C5vzfu3ZCEmj-sd8zrQ.roa
Signing time: Thu 16 Jul 2026 20:22:47 +0000
ROA not before: Thu 16 Jul 2026 20:22:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 89.40.83.0/24 maxlen: 24
185.101.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:98:97:ef:a8:65:e0:8e:a9:82:79:26:27:91:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 16 20:22:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=184bcc9cd6780b9bf37eedd90849a3fac77cceb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a1:80:0f:46:65:7b:50:63:40:18:e5:80:49:
2e:1b:ca:20:fa:c6:e8:0a:1b:96:62:0c:5a:25:bc:
cc:2c:24:96:ac:f7:6c:06:55:aa:75:8c:12:de:92:
aa:be:d4:ae:24:01:78:c0:7f:6f:ea:f9:c2:12:cd:
87:5f:ac:b1:c3:7a:58:26:e5:da:c6:eb:40:3c:23:
9b:fe:91:55:c8:2d:2f:2c:9c:86:79:00:4c:d6:14:
dc:3c:c6:a3:78:5d:33:e5:2f:be:cc:dd:78:91:b1:
e5:69:10:c9:f4:4b:09:06:4e:ba:9f:b1:56:a6:4e:
27:33:9c:8c:6c:47:55:9e:d9:bc:d0:1b:76:a1:d8:
bf:dd:3c:de:30:96:f8:9b:5a:c2:40:cf:06:27:5f:
5c:cf:f5:4d:ab:22:c7:c6:82:df:42:46:20:87:5c:
d4:4f:fa:f0:bf:d4:5c:17:78:81:56:dc:ed:15:74:
e0:71:4f:cb:80:3a:7b:6f:91:34:d0:52:f9:51:8a:
a7:d2:bb:47:bb:35:11:e2:eb:3b:98:59:be:a7:e3:
21:97:81:9e:fa:2b:73:48:ee:fb:9b:f5:d7:49:04:
13:9e:8a:17:35:a5:e0:fc:fb:af:57:38:a1:22:60:
86:17:48:86:8c:c9:89:69:cb:aa:1e:86:fb:ed:c2:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:CC:9C:D6:78:0B:9B:F3:7E:ED:D9:08:49:A3:FA:C7:7C:CE:B4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GEvMnNZ4C5vzfu3ZCEmj-sd8zrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
185.101.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:41:b7:f5:98:1b:4b:fb:12:a6:0d:e8:20:d9:a8:95:83:52:
03:3e:c9:af:18:14:da:b2:b4:bf:04:ca:ea:d8:02:cb:92:7b:
0c:52:11:c4:be:11:9e:88:7e:a4:19:98:45:07:e7:9d:18:e0:
a3:6d:eb:88:a1:85:91:71:17:80:bf:f0:74:1a:4f:c2:6b:51:
44:65:2c:7d:e4:9e:35:f4:d7:03:91:3a:e5:ca:a4:2a:db:96:
bc:6a:ab:b7:7c:de:c5:93:99:ef:7d:a3:98:52:ac:ef:aa:da:
24:d8:11:d6:53:30:41:c2:95:bc:aa:36:88:f2:ef:64:fe:61:
60:b7:36:f7:bc:57:bb:94:0f:49:f0:db:b0:43:f7:86:de:da:
24:48:89:41:45:33:39:4f:07:2c:6f:2c:f8:3f:f8:5a:79:79:
7b:45:46:ed:58:90:d6:be:fb:5b:26:de:5a:b4:ad:93:8e:ea:
54:5b:fb:0a:ec:3e:df:94:6c:55:a6:08:e4:43:9f:3e:3c:8d:
04:6b:de:36:e5:3d:60:9d:7c:a3:93:c5:d9:eb:77:2d:87:99:
e1:24:2f:e6:8b:ed:ee:ad:ba:3a:8c:97:01:6b:9f:6b:7d:a4:
c9:9e:55:ee:86:0f:fe:3b:b4:96:77:32:13:be:27:4e:f4:92:
5d:f3:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:18 2026 by rpki-client