Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/4o_2rckGb0lZykFjdgjM4uq91NM.roa
File: 4o_2rckGb0lZykFjdgjM4uq91NM.roa (raw, json)
Hash identifier: ttRNQDcCTeyqvWO8DNEI6Ins9g9GZIFUUbB3iwA2QyE=
Subject key identifier: E2:8F:F6:AD:C9:06:6F:49:59:CA:41:63:76:08:CC:E2:EA:BD:D4:D3
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019CBAA256150CA111CB2AD415B567A004CB
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/4o_2rckGb0lZykFjdgjM4uq91NM.roa
Signing time: Wed 04 Mar 2026 20:55:26 +0000
ROA not before: Wed 04 Mar 2026 20:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212396
IP address blocks: 89.126.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:a2:56:15:0c:a1:11:cb:2a:d4:15:b5:67:a0:04:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 4 20:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e28ff6adc9066f4959ca41637608cce2eabdd4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:f8:6b:33:b1:28:35:5b:28:55:e6:11:b6:
92:1e:f9:dc:79:22:b3:47:df:42:52:6e:16:e6:0f:
3c:a9:33:08:3d:84:73:04:eb:2e:ad:c4:3d:6b:3d:
c1:e4:20:98:eb:51:74:f5:4a:a1:6a:0f:25:a4:49:
cc:3b:46:bf:d5:57:06:eb:da:5c:d4:ac:78:c0:53:
5d:c6:ca:f3:65:7e:2b:4e:a1:4f:fc:31:7d:38:f2:
3b:65:80:7d:29:e2:1a:b7:ad:6d:02:88:03:dd:e3:
7d:e8:41:75:d6:d0:1d:bd:4f:33:35:55:6f:88:a7:
6e:ac:04:52:92:94:71:88:b5:10:c4:da:8a:49:f7:
7c:3f:fd:a3:8a:9b:be:3b:98:81:75:2d:48:ac:68:
d1:eb:ca:a1:a7:43:95:02:86:0b:ba:1b:5b:8e:44:
59:7a:7f:f0:0e:d8:da:4b:59:ae:10:c4:a5:41:78:
d3:b2:87:e3:7c:8a:e9:60:96:a1:a9:ae:e7:50:ad:
da:f2:f6:ea:d3:3a:80:34:3c:b7:fd:4e:a6:03:c4:
a4:35:2e:39:2a:c1:a0:2e:9e:c7:61:b1:00:07:a2:
5d:f9:e8:1a:63:9a:74:35:49:be:dd:79:70:38:15:
93:ca:aa:c1:17:4b:ac:65:af:af:8a:31:a9:e8:06:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:F6:AD:C9:06:6F:49:59:CA:41:63:76:08:CC:E2:EA:BD:D4:D3
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/4o_2rckGb0lZykFjdgjM4uq91NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.224.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2d:1a:17:07:db:c0:51:fb:bf:57:9f:05:69:c4:74:8e:d3:
1b:33:f8:c3:ee:99:4f:6b:95:36:ed:a0:ad:2c:22:cf:99:a7:
e5:3c:45:56:95:e8:1a:a1:05:bc:2e:d4:6f:ab:6c:3e:35:f0:
28:18:89:c3:ab:1e:8b:c3:18:1f:a3:87:36:02:c9:31:e8:45:
c2:8e:99:04:f8:7c:03:35:56:6f:12:60:29:a8:9d:25:e7:cb:
83:4e:7d:74:5d:6c:f2:1d:5b:91:74:cb:c2:90:a8:34:2c:98:
03:73:d4:d7:d2:89:66:0d:e0:96:0d:f4:5e:0d:82:f6:15:7b:
a3:d5:88:98:0d:41:1b:9f:4b:6d:ee:20:84:9c:0c:f5:cc:a5:
51:1f:e8:c6:fc:71:07:79:dd:38:19:ce:26:6a:30:b8:75:6d:
ce:ae:0d:a4:b1:2e:98:f8:ca:27:ca:b1:2c:36:47:11:a8:5d:
32:e2:f7:03:f0:2d:45:1c:4b:d7:9e:fc:eb:e0:fa:c7:93:a9:
55:9d:5d:9e:63:1d:77:b3:89:55:0c:28:a3:d6:bd:a3:93:4e:
1a:34:a6:ae:fc:4c:a0:90:1e:a6:a7:18:ae:54:56:05:42:ed:
40:ce:6e:77:f5:10:7b:0f:2f:da:e9:25:43:6d:79:04:e6:24:
af:05:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 01:31:24 2026 by rpki-client