Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/Srwm0O5XziVvTMCAUPAPHDtyOL4.roa
File: Srwm0O5XziVvTMCAUPAPHDtyOL4.roa (raw, json)
Hash identifier: Xqk8aLHxkijmEc5CYN4gn6Fq5GjplNDxfZlZrnMA9sY=
Subject key identifier: 4A:BC:26:D0:EE:57:CE:25:6F:4C:C0:80:50:F0:0F:1C:3B:72:38:BE
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A16CC10EC3BE72980E413C640C54
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/Srwm0O5XziVvTMCAUPAPHDtyOL4.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 89.108.128.0/24 maxlen: 24
89.108.129.0/24 maxlen: 24
89.108.154.0/24 maxlen: 24
89.108.176.0/22 maxlen: 22
89.108.176.0/24 maxlen: 24
212.101.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:6c:c1:0e:c3:be:72:98:0e:41:3c:64:0c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4abc26d0ee57ce256f4cc08050f00f1c3b7238be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:0c:8e:09:3b:18:68:d7:87:c6:32:b8:9c:
27:fb:94:ab:ce:56:5e:8d:71:cb:77:c9:d4:8e:64:
16:52:c1:ba:13:3c:a5:f1:e2:0e:31:35:f6:be:50:
ab:e2:17:6b:dc:c9:7c:14:c9:56:96:ec:1d:e4:cf:
bb:4b:8b:44:7a:12:fa:7a:24:93:c1:63:30:6c:ee:
ee:5a:36:76:cb:34:fe:27:56:20:18:a0:92:0d:ca:
61:42:59:a4:58:bd:58:2a:f3:b4:6e:a4:aa:60:54:
0f:20:04:72:e7:80:0e:83:b3:53:03:b0:5f:97:e0:
32:4f:b5:02:fd:ce:8f:7d:58:5c:64:1d:66:0d:f7:
a7:64:83:7f:93:63:e9:74:76:58:c9:98:f8:4c:0a:
a3:fa:42:63:f3:f9:ce:c9:72:25:b1:4d:4e:ba:a6:
c2:8d:b5:8e:14:db:15:2a:5a:bb:1e:b4:8c:c5:2b:
ff:8f:13:ee:04:96:7a:7e:40:a8:a5:9b:82:f3:71:
dc:f7:bf:7c:73:4b:80:57:87:df:9b:ea:25:33:c6:
5a:e2:ff:1a:79:de:6e:d2:fc:88:ff:ea:8e:67:8a:
03:06:74:94:c5:73:0c:fb:9b:06:9d:f9:32:8c:e4:
f5:50:fe:b3:91:e1:23:8f:8e:cc:8e:17:ac:ac:ef:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BC:26:D0:EE:57:CE:25:6F:4C:C0:80:50:F0:0F:1C:3B:72:38:BE
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/Srwm0O5XziVvTMCAUPAPHDtyOL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.128.0/23
89.108.154.0/24
89.108.176.0/22
212.101.249.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0f:71:1a:ca:f7:fa:09:45:de:9b:ca:0e:0b:fa:11:9a:82:
98:cc:87:3b:79:65:ec:ce:0f:6b:5a:5c:63:f3:42:35:5e:54:
30:f2:62:20:1e:26:a5:94:b9:ce:72:51:1d:3b:0d:ad:78:89:
49:a8:e0:00:c8:ea:67:88:3a:25:fb:c3:8a:0a:cd:54:bb:e6:
97:ad:95:c0:cf:3e:e1:8e:5b:42:1b:c5:34:a7:f4:d8:27:26:
83:4b:5f:98:89:36:83:ee:4a:6e:20:70:50:d8:5a:a0:d7:6b:
26:81:72:92:eb:3c:e1:0c:0c:49:5b:82:0c:50:0a:42:43:92:
9c:9f:2b:f1:54:f2:be:73:57:e9:86:91:95:8f:b2:cf:03:99:
45:99:4d:56:1c:e9:12:04:10:37:89:7b:0c:47:a3:15:12:2f:
a1:45:22:7d:93:28:68:e5:21:70:53:42:da:1f:1f:65:76:9d:
2d:88:a8:36:f7:9d:af:83:94:42:bc:02:f5:5a:87:c0:8f:0c:
43:42:85:37:56:66:3c:e3:db:b4:fa:5d:c2:3f:0f:8b:21:3e:
ea:fc:39:9b:c7:69:6a:dd:19:7b:e7:5f:45:9b:eb:c6:d5:19:
13:d4:6e:fd:58:3b:43:8f:de:3d:30:1c:14:35:b5:fb:ab:ac:
10:f3:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:20 2026 by rpki-client