Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3D91aJc1b1Xugh3NpwokFVe9EHE.roa
File: 3D91aJc1b1Xugh3NpwokFVe9EHE.roa (raw, json)
Hash identifier: RPyCzjrPqhXSX0bgmE4+2E9x3ipWzKg8e+mZU3iZEOQ=
Subject key identifier: DC:3F:75:68:97:35:6F:55:EE:82:1D:CD:A7:0A:24:15:57:BD:10:71
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A015C0BC26CC38648809915A242898212A
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3D91aJc1b1Xugh3NpwokFVe9EHE.roa
Signing time: Tue 18 Aug 2026 16:42:27 +0000
ROA not before: Tue 18 Aug 2026 16:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219454
IP address blocks: 89.126.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:c0:bc:26:cc:38:64:88:09:91:5a:24:28:98:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 18 16:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc3f756897356f55ee821dcda70a241557bd1071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:26:3d:d8:ee:d9:22:96:ec:b6:8d:f3:0f:
54:e7:7a:8f:7c:24:52:88:d4:f2:08:a8:03:f7:d8:
1e:e2:b9:63:f2:54:8f:0a:60:ea:78:d8:6d:8a:e9:
ad:69:d5:41:36:fb:31:21:58:dd:f2:9b:e7:32:f8:
e4:51:fa:ad:79:fa:2e:48:3c:4b:9c:d7:fb:ad:1d:
88:d6:56:66:e9:87:37:80:aa:f4:b1:6a:19:c5:e9:
27:97:47:fe:65:dd:6d:fe:71:7c:ea:8b:70:94:35:
f3:6e:07:e9:b5:07:5f:4f:41:e5:22:a6:6a:b5:b2:
f9:55:76:fa:85:b6:73:a3:8b:3b:9f:67:c4:1b:a2:
38:de:58:36:55:d4:da:75:27:8a:9c:42:f6:ef:30:
c2:ee:a9:2d:17:e2:65:82:86:63:7d:d1:e6:82:c7:
ac:37:4d:b4:64:f0:84:63:80:a6:db:08:1b:c3:b3:
d6:46:59:e7:de:7f:dc:b6:4a:1f:e8:c2:1f:88:ae:
d4:8b:34:e5:a9:cc:76:2e:f0:0b:57:69:5a:57:86:
61:f5:59:45:26:fb:a6:bd:bb:5b:8c:ac:c9:b6:93:
66:34:4f:61:c0:dd:78:4d:d6:b4:41:94:99:9e:5c:
c9:d9:6e:4c:ea:51:45:14:32:79:f2:05:0c:c5:71:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3F:75:68:97:35:6F:55:EE:82:1D:CD:A7:0A:24:15:57:BD:10:71
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3D91aJc1b1Xugh3NpwokFVe9EHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.225.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ed:77:77:e0:1f:08:b2:44:c0:5f:86:01:50:dd:17:13:20:
0b:51:02:e7:46:22:2a:0d:d8:d0:6f:b8:ec:c6:a9:4a:72:10:
0f:03:ff:84:f6:f3:de:98:e6:51:c5:d7:4a:b3:15:0a:d9:9b:
a1:04:ef:42:1f:06:8b:51:fd:73:13:61:3f:bd:6a:d1:a2:bb:
92:b8:1b:5b:3c:59:5d:35:e9:b9:61:29:19:16:4a:0e:eb:43:
e3:0d:6d:d4:1e:cd:95:85:c5:48:71:ed:6b:c1:17:98:67:77:
36:f3:65:bb:61:a9:bb:63:76:b0:4b:29:4a:8f:38:0d:a4:43:
ac:16:95:88:67:01:d7:08:90:d8:0c:aa:87:68:b7:e1:e4:36:
34:1a:21:ba:c3:63:e3:f4:aa:70:f7:91:09:ee:89:ae:20:fd:
77:05:17:e1:22:7b:50:82:90:4d:28:38:93:a2:5d:46:a5:06:
3b:77:6f:39:5c:50:f0:22:a9:ad:dd:c7:ca:d9:9a:f6:05:cb:
a0:d4:c2:fe:5b:93:0a:d7:85:c7:70:c7:b3:af:93:bb:69:27:
9d:53:3f:98:fc:19:47:d7:b7:fd:0b:50:42:75:47:a4:ec:fb:
de:de:be:fe:57:21:0c:3b:e4:bc:cb:42:fb:9b:6b:d0:00:7b:
79:f6:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:35 2026 by rpki-client