Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/DxEOsUK7TK9PYM6KS5UQrWP9FxE.roa
File: DxEOsUK7TK9PYM6KS5UQrWP9FxE.roa (raw, json)
Hash identifier: sjmGlhiqXi5SwwqYDXOrljc0DEaboFm1oDxWHGnxs1Y=
Subject key identifier: 0F:11:0E:B1:42:BB:4C:AF:4F:60:CE:8A:4B:95:10:AD:63:FD:17:11
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019F45FC813CC4831F4B8F081F927A1B7AD0
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/DxEOsUK7TK9PYM6KS5UQrWP9FxE.roa
Signing time: Thu 09 Jul 2026 08:26:43 +0000
ROA not before: Thu 09 Jul 2026 08:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 89.40.166.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:fc:81:3c:c4:83:1f:4b:8f:08:1f:92:7a:1b:7a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 9 08:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f110eb142bb4caf4f60ce8a4b9510ad63fd1711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:60:1e:06:e6:57:53:b4:13:0a:a1:2a:ed:
c2:70:51:96:a6:20:bf:83:23:cd:70:99:3a:d4:63:
ee:7c:3d:4f:87:a3:35:44:4e:43:f8:20:a4:79:91:
cf:be:6a:fa:08:9f:68:8f:79:9f:8d:e1:14:f7:4d:
51:d6:f7:5a:3a:0c:3c:10:69:ab:a0:d8:ee:fe:c2:
8f:06:d8:80:05:9c:94:09:75:55:21:8a:7c:e2:1d:
70:d0:87:af:fa:3c:da:97:54:ae:41:6e:32:a8:2e:
79:38:67:ba:3f:fd:0a:1c:86:08:c4:40:74:1b:92:
ff:c1:27:a5:39:91:01:f7:7e:92:a0:a0:28:70:83:
c6:60:75:de:bd:49:ea:cf:7b:06:26:40:e0:92:04:
8c:63:79:b0:44:53:a2:05:a0:66:eb:0c:75:56:8c:
be:6f:61:64:2d:f3:ce:5e:d1:f8:2f:8f:53:71:b0:
2c:8b:0c:08:2b:80:69:12:62:4d:e8:8e:26:be:b0:
57:c3:c0:09:2b:f5:fd:e3:07:fe:32:51:5b:0b:a2:
cf:24:90:da:1e:7b:0a:66:a0:f3:02:7e:57:ba:41:
55:f2:be:ae:60:85:0e:dd:66:a6:13:34:33:bf:f0:
37:4c:79:82:b7:5c:97:61:c9:50:3f:73:9d:69:8d:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:0E:B1:42:BB:4C:AF:4F:60:CE:8A:4B:95:10:AD:63:FD:17:11
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/DxEOsUK7TK9PYM6KS5UQrWP9FxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.166.0/24
89.47.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:04:3e:bc:d4:ee:ff:da:3d:6a:67:0c:02:f5:a8:9d:ca:85:
45:79:86:05:81:d5:4a:06:36:82:05:30:44:c0:01:c5:dd:9d:
fb:af:9a:d4:2a:b3:82:17:10:16:87:a2:1e:3f:3b:2c:61:bb:
06:95:9f:c5:f6:51:17:2a:09:82:c5:cf:61:47:cd:da:50:7b:
c4:f5:9b:68:85:db:3c:64:dd:e4:37:fb:64:29:e1:54:1a:6c:
c7:23:5f:c2:43:13:e0:bd:f2:f9:32:6c:aa:cd:c3:24:1c:fb:
f6:c4:3f:b9:c9:2f:8c:5d:5c:53:86:04:24:de:42:03:a0:a2:
b6:78:87:8f:1f:08:93:91:6e:5d:a2:5f:7b:24:4e:c5:74:59:
68:05:1e:67:d7:2b:70:e6:9d:eb:c1:2b:99:cb:0e:f7:9f:e4:
62:e7:9f:45:aa:3c:f7:32:d1:43:32:1e:ac:aa:e5:2d:08:c0:
ac:ad:00:11:84:be:e2:40:ff:e2:9e:d9:40:47:4c:76:92:0e:
23:8a:39:f9:0f:ed:4a:5c:da:4f:e1:bd:a9:f3:45:96:8a:4f:
f2:f6:1c:d0:4f:ce:a1:65:95:b3:00:ed:da:7e:a5:ee:69:ce:
39:3e:7f:fd:28:14:62:8f:af:be:d9:24:28:65:ce:da:f7:08:
a5:23:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 15:25:44 2026 by rpki-client