Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8M6g-Jr0THM2DOPjMU2VCLfShs.roa
File: J8M6g-Jr0THM2DOPjMU2VCLfShs.roa (raw, json)
Hash identifier: Or4xs9tzHhcZ9A3BVtg8PQhVnRlpUNhsvIWcFFW1OGs=
Subject key identifier: 27:C3:3A:83:E2:6B:D1:31:CC:D8:33:8F:8C:C5:36:54:22:DF:4A:1B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3AF504ECA5D1102969E7EE44D0120A1B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8M6g-Jr0THM2DOPjMU2VCLfShs.roa
Signing time: Tue 07 Jul 2026 05:02:43 +0000
ROA not before: Tue 07 Jul 2026 05:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 996
IP address blocks: 89.34.224.0/23 maxlen: 23
89.34.224.0/24 maxlen: 24
89.34.225.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f5:04:ec:a5:d1:10:29:69:e7:ee:44:d0:12:0a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 05:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27c33a83e26bd131ccd8338f8cc5365422df4a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:63:10:a5:74:0c:66:66:b2:eb:6a:c9:ee:
ed:d7:c7:cc:aa:4a:e2:fb:8c:af:d0:bf:93:8c:c0:
66:00:96:cb:ad:04:ca:e3:64:fd:33:64:b9:68:9c:
fa:a9:69:42:1c:88:58:08:e4:bb:8c:9c:46:96:ac:
0b:43:77:7f:dc:a5:68:ec:40:6f:d8:b0:c3:d0:31:
64:c6:8d:b8:5f:36:d2:36:7e:45:1d:b7:d3:79:82:
46:2e:2b:5f:f3:a6:bc:56:d2:bf:a9:ae:17:a2:06:
91:24:e9:1d:1f:4f:a2:88:84:45:ef:f2:ea:9c:ad:
e3:1c:5d:35:3e:d9:3d:e6:1c:bd:1d:d8:02:74:35:
d7:24:0e:a3:15:af:c4:ea:86:17:77:ba:91:9f:4a:
6d:b9:e2:2f:a4:9a:49:f5:0f:1a:ae:63:b7:32:a9:
bb:6d:9b:46:0e:4f:82:36:ed:df:d4:8a:58:d2:ec:
71:e4:86:80:30:60:ae:1d:58:d7:90:ae:6c:d5:a0:
d5:fb:bf:1e:18:42:e0:ac:63:a1:87:db:a6:1f:f5:
50:14:07:9f:10:72:80:a4:31:0f:e4:8a:9c:60:8f:
76:ec:e2:79:37:21:e3:93:16:3d:39:a7:c3:8b:b5:
b9:0e:7a:1f:0b:73:2a:57:33:32:e3:1c:63:24:d6:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:3A:83:E2:6B:D1:31:CC:D8:33:8F:8C:C5:36:54:22:DF:4A:1B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8M6g-Jr0THM2DOPjMU2VCLfShs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.42.143.0/24
89.46.0.0/24
89.47.127.0/24
Signature Algorithm: sha256WithRSAEncryption
47:06:4a:bc:59:3c:57:2d:a6:a0:28:d3:92:d6:ac:c2:ff:bb:
03:dc:1b:f0:c1:1b:b1:17:d6:6f:ba:d9:8e:36:62:0b:53:c2:
a0:93:f0:0e:2c:3c:8f:69:2e:8e:aa:f4:db:c5:fd:fb:f8:6e:
6d:2a:35:af:de:24:d4:3e:1b:43:36:cd:1e:92:06:ba:aa:38:
9d:4e:ba:d5:88:5e:f2:c9:9d:79:dd:34:f7:14:80:05:e3:5b:
9f:43:1a:01:73:74:d6:02:40:31:70:dc:bc:9f:03:ea:2c:a8:
be:96:44:8b:65:70:07:d3:85:67:bb:32:22:b7:bf:11:49:71:
43:99:81:83:99:69:47:e1:4a:4c:69:4c:69:0f:6d:3b:db:27:
fa:03:17:11:ab:aa:5c:e7:23:c6:0e:e4:16:d8:dd:e5:d2:59:
56:19:2e:3a:2f:02:ed:f4:c5:b5:a7:a5:c5:01:2c:0c:7f:d9:
45:df:c4:1e:c8:92:3b:77:ec:85:ae:84:42:29:f4:1d:f1:d6:
e3:3c:7d:53:b4:03:d5:80:d6:8d:88:f4:64:b6:a0:06:c1:08:
0d:46:82:32:30:44:46:9a:5a:43:65:97:80:bb:0d:8f:a0:bc:
f7:b6:f5:41:75:9f:c1:d4:dd:7b:89:af:66:42:5e:05:30:79:
f4:08:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client