Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/adqkP-2igsJaQXB-CV2qD2CLEuM.roa
File: adqkP-2igsJaQXB-CV2qD2CLEuM.roa (raw, json)
Hash identifier: r8mZ1A6Rtkv/8urvYTAWhmdL97R8eXQcR57KQo0ncAE=
Subject key identifier: 69:DA:A4:3F:ED:A2:82:C2:5A:41:70:7E:09:5D:AA:0F:60:8B:12:E3
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A11FADF29CA9D39748D8A739438A2DC1AF
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/adqkP-2igsJaQXB-CV2qD2CLEuM.roa
Signing time: Fri 09 Oct 2026 08:00:55 +0000
ROA not before: Fri 09 Oct 2026 08:00:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 89.207.12.0/24 maxlen: 24
89.207.13.0/24 maxlen: 24
89.207.14.0/24 maxlen: 24
89.207.15.0/24 maxlen: 24
185.32.12.0/24 maxlen: 24
185.32.13.0/24 maxlen: 24
185.32.14.0/24 maxlen: 24
185.32.15.0/24 maxlen: 24
185.187.184.0/24 maxlen: 24
185.187.185.0/24 maxlen: 24
185.187.186.0/24 maxlen: 24
185.187.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ad:f2:9c:a9:d3:97:48:d8:a7:39:43:8a:2d:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Oct 9 08:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69daa43feda282c25a41707e095daa0f608b12e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:28:7d:c0:9f:bf:fc:3d:91:58:59:5c:73:
51:aa:3b:b4:eb:ee:4b:1f:72:93:4f:36:19:57:81:
c0:1c:08:b7:0c:69:31:9a:35:5a:cf:13:aa:4b:63:
cb:34:f1:0f:29:5f:62:bb:fd:64:65:47:43:15:9b:
d7:33:63:64:a6:24:9b:b2:6a:9a:21:19:54:e7:83:
c0:11:74:ae:2d:f7:2e:d4:80:04:85:4b:74:25:ea:
80:6b:b0:de:7d:71:9a:30:ae:35:08:52:ed:ce:9e:
2d:82:2a:1c:2f:fc:72:99:2d:4d:3a:6a:67:cf:26:
a5:71:d7:34:e2:5b:a3:a7:37:22:1d:28:19:f9:f0:
2d:99:99:36:04:cd:54:92:ed:3f:56:ad:b3:21:ed:
4d:7e:21:db:05:ca:6c:8a:5a:ac:d0:1d:f8:ea:64:
09:1c:98:17:3c:bb:24:50:91:83:bd:e4:9d:04:f9:
26:03:14:65:ed:b5:8c:fe:f5:af:1e:76:73:12:73:
61:dd:87:fc:d6:f0:1f:eb:a5:d0:ba:ec:15:b0:3b:
b7:c2:35:29:e2:ee:4f:fd:9d:8f:30:ac:f8:a2:3b:
6a:69:4e:b6:ab:df:07:2d:cf:a8:ac:8e:b6:7a:ae:
20:cf:89:0f:05:6e:5c:12:0a:84:c0:44:68:ee:0b:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DA:A4:3F:ED:A2:82:C2:5A:41:70:7E:09:5D:AA:0F:60:8B:12:E3
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/adqkP-2igsJaQXB-CV2qD2CLEuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.12.0/22
185.32.12.0/22
185.187.184.0/22
Signature Algorithm: sha256WithRSAEncryption
58:c8:db:d4:2e:15:84:df:26:23:f7:da:0c:bf:61:17:40:f5:
73:ef:44:d9:01:6b:f6:ee:44:9e:88:1c:fd:76:3b:20:2b:3d:
42:19:c5:7e:0f:09:0d:8c:35:d5:a0:df:20:4d:0a:45:c9:0d:
6d:1f:94:e0:b7:17:48:a8:94:c1:79:8e:67:93:8e:e2:a0:ce:
ba:81:ff:2c:33:71:fb:d5:4c:d9:05:3c:3f:c8:02:4e:00:51:
82:09:48:34:ec:be:9e:85:b6:8a:f0:a8:ba:a8:1d:c7:be:fd:
76:e9:e2:ae:03:47:2d:4d:81:88:dd:d2:fa:d9:50:93:92:7c:
ac:59:d9:c8:bf:33:9f:a0:08:c4:9c:0c:5a:60:14:20:f0:a7:
b1:f1:3f:5e:7b:10:77:e7:5a:45:97:1c:a0:c5:16:a4:dd:ac:
32:50:f2:6d:09:12:61:49:c2:c1:ec:37:6f:e6:76:76:62:2b:
90:38:99:7d:b8:91:56:d9:f6:75:64:9b:c3:d3:57:b9:19:2f:
ac:12:cd:4b:00:ad:08:aa:bb:51:e5:31:01:2d:8a:b8:45:61:
0a:ed:36:59:bc:cd:2e:36:d7:04:50:84:3b:32:35:01:82:2d:
ca:12:d2:d3:b1:e6:8c:76:6f:59:79:30:b1:fe:0f:83:d0:61:
52:8d:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:58 2026 by rpki-client