Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/9Ov26ihYlp7WpZFPOh1Rh_K14oU.roa
File: 9Ov26ihYlp7WpZFPOh1Rh_K14oU.roa (raw, json)
Hash identifier: Ic6Yif2Raed9JJFIyf9Ydw1T6TYM4MizfeA9w4q0NAE=
Subject key identifier: F4:EB:F6:EA:28:58:96:9E:D6:A5:91:4F:3A:1D:51:87:F2:B5:E2:85
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019DD7E9602B312C00D196BFED4DC7E47754
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/9Ov26ihYlp7WpZFPOh1Rh_K14oU.roa
Signing time: Wed 29 Apr 2026 06:24:49 +0000
ROA not before: Wed 29 Apr 2026 06:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 89.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:e9:60:2b:31:2c:00:d1:96:bf:ed:4d:c7:e4:77:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 29 06:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4ebf6ea2858969ed6a5914f3a1d5187f2b5e285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:7d:63:bc:ec:bb:87:ec:86:b8:da:c1:dc:
98:f5:6a:f3:82:a8:a0:38:7f:d5:e1:65:90:cc:0b:
09:5b:9f:b8:0b:23:51:6b:c1:16:2b:04:cd:d5:a7:
31:69:e0:18:c4:35:fe:b7:ce:0e:57:36:77:7d:6e:
b3:51:2e:26:9a:ce:d6:8c:95:97:71:4f:21:98:f1:
5e:6f:0f:76:02:65:7f:37:68:1a:69:70:bf:be:18:
46:8f:12:a7:70:fa:86:ad:ad:c6:74:7a:aa:0c:fd:
09:b2:7e:c2:72:8f:01:a8:a1:89:81:2a:2a:f9:ed:
59:2f:49:47:2e:38:79:51:eb:ac:c7:1d:80:ff:fb:
af:95:8b:fd:9f:4a:2a:7d:42:8d:24:f5:de:a9:fe:
5d:67:79:62:c7:64:79:54:8b:4d:9e:6d:50:87:3c:
21:26:e7:b6:c6:d0:4b:ac:ae:c5:36:d7:c4:fe:90:
1f:52:3c:3d:3e:d6:06:ce:a7:0b:42:90:49:da:33:
98:08:a6:31:10:2a:e2:87:c4:48:66:e1:2c:d8:10:
54:37:5a:d5:ca:fa:66:d3:00:ac:51:20:56:e4:cb:
40:bb:16:82:be:8e:39:6e:7c:d2:b5:a6:32:13:b5:
6d:da:b9:e1:64:e4:92:43:e2:dd:04:6d:07:48:6c:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EB:F6:EA:28:58:96:9E:D6:A5:91:4F:3A:1D:51:87:F2:B5:E2:85
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/9Ov26ihYlp7WpZFPOh1Rh_K14oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:69:0f:e6:40:94:12:ad:91:04:4e:e2:f9:52:13:71:62:0a:
9f:50:81:6c:b7:c6:77:83:52:09:97:49:ae:b8:0a:52:d1:79:
72:38:68:74:bb:c1:47:0c:e5:ef:83:48:11:37:28:0f:97:33:
af:9f:b4:53:5f:9a:a1:ab:a9:ca:38:7c:ce:f5:65:a8:2c:f2:
c4:76:20:3b:5d:2d:53:a2:61:47:ee:2c:8d:c3:85:35:98:5b:
3c:00:2b:4b:3f:c7:39:87:98:06:ce:06:ef:ce:7e:2d:f1:49:
eb:55:fe:a8:b3:dc:e8:1a:cc:ef:f3:81:b6:c8:c8:45:d7:1d:
92:92:7e:38:5f:f0:31:cb:9a:12:80:49:ad:7d:f1:ce:2d:50:
fc:22:7c:a7:5f:50:ab:b6:96:b6:57:8a:87:26:c6:a6:17:90:
09:a6:ea:2e:50:96:42:19:58:ff:44:d0:f6:bc:a2:66:1d:01:
cc:32:59:9d:43:12:56:52:d5:ff:20:32:75:d9:b8:57:86:9b:
c3:4b:f0:ff:78:10:a9:df:3b:a6:a2:2d:0d:e3:5b:c0:f7:46:
f0:65:0f:82:c2:d1:36:97:ca:b3:ee:2d:16:3f:97:14:fa:ee:
34:4c:3e:50:c3:48:98:28:1b:bb:33:92:87:0c:f1:1a:4e:50:
45:5d:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:07 2026 by rpki-client