Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ThfuV4x3OoidjzvjqEhY2D2mGSE.roa
File: ThfuV4x3OoidjzvjqEhY2D2mGSE.roa (raw, json)
Hash identifier: lWpjgA6SAYyCk3UYzVU3Nwxh+lQSQYgMCncrjR60oqI=
Subject key identifier: 4E:17:EE:57:8C:77:3A:88:9D:8F:3B:E3:A8:48:58:D8:3D:A6:19:21
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019E3A1D92E9DDBE19FFCE0E2489FFD5610D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ThfuV4x3OoidjzvjqEhY2D2mGSE.roa
Signing time: Mon 18 May 2026 08:04:37 +0000
ROA not before: Mon 18 May 2026 08:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13213
IP address blocks: 89.36.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:1d:92:e9:dd:be:19:ff:ce:0e:24:89:ff:d5:61:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 18 08:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e17ee578c773a889d8f3be3a84858d83da61921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:68:a6:77:c9:ff:d3:e3:50:fc:38:89:80:
ab:25:3b:59:d4:e7:27:17:b8:90:01:93:a7:93:86:
dc:4b:12:46:bf:f9:52:2b:2d:70:4a:38:a9:09:5e:
e8:3d:35:5f:09:ae:84:e5:0c:03:5e:6c:66:14:bf:
d9:bb:57:be:e5:7a:01:8e:a2:dd:e0:9a:8f:79:0b:
9c:8b:b8:4b:db:fd:35:5b:e5:43:d9:b5:f4:d8:e5:
04:55:cf:c5:27:d8:d4:fb:2d:37:8a:d0:c1:47:0b:
e5:5c:21:6c:73:88:07:60:ec:d8:ea:39:97:f7:73:
2c:94:9b:6d:b6:b0:a3:fb:e6:ad:e6:ba:96:e8:f8:
1e:6c:ce:06:91:6b:09:a0:95:73:e2:72:bd:80:81:
c2:ce:e1:eb:91:26:0a:1b:56:0f:54:ec:e6:50:fb:
08:68:a2:d9:4f:ca:2e:e9:11:05:30:a4:f5:49:fd:
2e:f1:2a:d5:17:59:ef:e2:e7:cc:e8:72:c2:c7:18:
df:a4:25:ba:61:09:e8:f2:95:7c:23:35:fb:ce:8c:
7f:f6:e7:32:82:18:80:15:a5:ec:6b:ee:b6:47:9c:
ec:83:f1:8a:be:5a:8f:90:0c:36:dc:b4:f3:0f:47:
6d:27:ae:20:26:7a:5b:92:77:66:40:0f:e7:b9:58:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:EE:57:8C:77:3A:88:9D:8F:3B:E3:A8:48:58:D8:3D:A6:19:21
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ThfuV4x3OoidjzvjqEhY2D2mGSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.23.0/24
Signature Algorithm: sha256WithRSAEncryption
75:be:4e:f8:3a:0b:db:5f:a5:a1:e2:df:51:8c:a1:ac:26:77:
4b:99:84:13:61:c2:44:e7:4b:d3:e6:44:a3:1d:29:bf:98:dd:
99:77:55:44:c2:d1:1d:1b:dd:0a:60:1c:4e:00:65:f1:e4:8b:
47:10:e5:d8:5c:e1:7e:36:1d:ec:8a:1a:2d:af:a9:3e:86:3f:
e6:fe:3c:a3:a7:52:50:bc:60:d8:bc:15:de:99:40:c3:89:73:
82:d8:67:48:b0:4e:29:8a:cc:3f:ea:c4:38:5c:dc:e1:0b:02:
78:0a:11:1d:77:64:06:13:d9:23:fc:bf:1b:e2:00:14:43:25:
99:9a:6f:2d:e8:dd:e0:e3:7c:33:91:a9:d7:5a:06:9b:ae:c7:
bb:c9:ac:7d:37:41:29:02:cc:6d:f4:d0:90:ad:ea:28:43:32:
25:76:81:c6:e4:1b:d1:88:cc:41:0a:9f:ef:d2:e7:4f:04:76:
8b:42:82:7b:e7:73:e4:0a:bc:2c:c3:10:56:30:2f:c7:66:c4:
94:f1:b5:fd:2e:0a:9e:6e:9c:25:34:5d:f3:36:ae:ad:f0:c0:
de:79:fe:31:b7:70:78:21:a4:2c:9f:30:92:0a:68:89:d0:bd:
ba:e6:15:b4:9f:eb:60:cb:0b:1c:ee:88:5d:22:7a:f8:74:97:
61:e4:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:13 2026 by rpki-client