Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa
File: pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa (raw, json)
Hash identifier: /UkrVYY41cQP/8A3LMNbtpf3fvfzlt7M2OaVy/IHrJA=
Subject key identifier: A6:BF:B5:C5:E3:C3:E1:90:A4:5F:3D:51:9B:16:94:26:56:BB:5A:4D
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A0B9B4C653C29818AB40CF4AFDA8
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 89.108.128.0/24 maxlen: 24
89.108.129.0/24 maxlen: 24
89.108.154.0/24 maxlen: 24
89.108.176.0/22 maxlen: 22
89.108.176.0/24 maxlen: 24
212.101.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a0:b9:b4:c6:53:c2:98:18:ab:40:cf:4a:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6bfb5c5e3c3e190a45f3d519b16942656bb5a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:61:14:57:2d:7e:3d:9d:b8:92:7c:c0:52:
96:6f:e6:85:0a:4d:d7:d9:c7:2a:5c:46:7d:62:5e:
85:cf:90:38:c1:0c:91:bd:30:f6:15:5c:40:7c:23:
50:36:e5:62:bf:16:9b:f8:da:a2:42:cb:52:83:95:
f6:65:7b:5a:16:43:8b:32:d5:95:d7:2c:60:79:d1:
71:4a:6a:2c:e1:7d:ff:d0:90:fc:4a:29:7d:5b:0b:
6d:28:e4:ad:28:dc:13:1b:f4:11:33:1d:a9:65:16:
08:1b:16:ba:7f:95:14:b7:4a:fc:2e:f0:4e:a5:5a:
ba:83:2c:27:74:76:01:ed:76:de:ba:b6:59:99:33:
a1:52:3c:b2:37:fc:42:59:2c:8a:93:4c:ae:bc:af:
12:ef:15:9e:56:26:03:05:d6:70:a4:a7:4c:4e:5e:
c3:eb:23:3e:41:02:26:9b:11:b8:5f:71:00:3e:54:
a6:ce:51:f6:ed:a3:85:42:41:23:0c:f1:39:d2:df:
e8:47:1a:a5:df:2a:d5:0f:37:c6:98:6f:72:e8:18:
b8:69:1c:ec:13:f4:ea:6f:33:e6:ae:ce:82:3e:8f:
bc:fd:fc:15:a4:77:19:44:9d:f8:65:57:bf:0e:13:
b3:84:25:41:ba:02:99:cf:6e:71:bb:a2:a2:d9:27:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:B5:C5:E3:C3:E1:90:A4:5F:3D:51:9B:16:94:26:56:BB:5A:4D
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.128.0/23
89.108.154.0/24
89.108.176.0/22
212.101.249.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3c:99:f2:c0:08:e7:7f:b5:c1:f2:9c:cc:cd:5c:d5:1a:e0:
f9:ff:ba:fb:3c:d8:80:32:6f:83:2a:45:46:ed:1f:f0:db:15:
79:05:f9:41:77:fe:7b:85:b0:71:d8:c4:4f:09:cc:7e:15:60:
99:9c:f2:0d:ac:41:bf:62:26:bd:eb:77:0f:70:2a:50:01:58:
54:fe:77:96:65:38:28:fe:66:8a:76:dd:88:77:7e:7a:89:97:
f2:8a:9f:bd:16:df:9d:08:b7:0d:52:35:c7:3b:40:6b:0e:26:
2a:00:e3:3b:e8:70:ca:c1:cf:b2:ba:c6:5d:53:80:df:ce:3d:
ca:51:50:12:69:a9:28:c3:2e:11:48:57:89:a1:ae:53:e2:5c:
5c:23:0a:67:dc:54:19:8a:44:f8:ba:d5:48:6f:c7:9c:68:06:
52:7c:e9:34:a7:5e:3a:21:cb:8b:1b:99:d5:d6:13:df:92:88:
1a:cd:54:c3:d1:b1:1e:54:54:c5:e0:ea:55:07:45:0e:d9:b1:
6f:bf:34:1b:db:d9:ee:38:3a:74:c3:e5:57:b0:00:8b:fe:72:
04:81:02:09:30:9e:31:46:e4:e9:56:c8:6d:77:da:ef:4b:23:
97:a6:ad:f5:08:25:8b:24:b8:36:ff:55:91:db:4f:d1:b3:84:
65:4e:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:17 2026 by rpki-client