Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1jcNY5626hnNOCnMu1sTaGQ4WDA.roa
File: 1jcNY5626hnNOCnMu1sTaGQ4WDA.roa (raw, json)
Hash identifier: c+tE0o6eIUl6HySh+TrLE9b5fSY7RiC/BC34enLyUb4=
Subject key identifier: D6:37:0D:63:9E:B6:EA:19:CD:38:29:CC:BB:5B:13:68:64:38:58:30
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F18E00AF15DAFC685807CBA0AFEC0C384
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1jcNY5626hnNOCnMu1sTaGQ4WDA.roa
Signing time: Tue 30 Jun 2026 14:12:43 +0000
ROA not before: Tue 30 Jun 2026 14:12:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 89.167.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:e0:0a:f1:5d:af:c6:85:80:7c:ba:0a:fe:c0:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 30 14:12:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6370d639eb6ea19cd3829ccbb5b136864385830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:48:b0:38:21:41:15:da:ec:00:fc:ee:7d:07:
69:5d:1c:95:16:fa:39:4e:73:e2:9e:37:14:50:3f:
4a:cf:c0:50:ed:aa:ec:5d:d6:45:f6:f8:24:df:0a:
f7:7c:41:d0:1c:cb:7e:2f:dc:c2:4d:ea:c2:6f:98:
2d:52:c5:d0:94:25:cd:81:66:48:41:d7:91:72:0f:
b4:06:6a:ab:55:27:c6:60:2c:13:a9:64:90:58:59:
3d:c0:1e:bd:e3:36:dc:39:ed:40:ca:7a:9e:78:fd:
fe:73:2e:96:ef:20:e8:b5:2a:c6:84:07:ad:0d:68:
04:9f:cb:48:1f:88:aa:b0:6f:f4:42:55:87:fb:36:
3f:db:0e:c1:e2:39:ce:5e:ce:4a:c9:50:fc:33:ae:
ed:b7:a3:f4:77:59:02:30:82:18:1f:f2:3e:b6:e8:
35:cc:a9:13:9c:6b:88:fc:e2:05:e4:1f:04:80:f2:
cd:2a:35:3d:bf:47:67:02:4d:1f:f1:e9:9f:1b:8c:
6a:d4:ad:84:aa:9d:83:db:40:c6:00:dd:b2:ad:ac:
08:37:9d:32:7a:a1:2f:96:8e:da:58:ca:23:05:ad:
78:47:11:be:d2:79:37:9c:86:17:e0:17:55:89:de:
0c:6f:50:e6:62:2e:fd:37:69:f7:ed:fa:3b:db:67:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:0D:63:9E:B6:EA:19:CD:38:29:CC:BB:5B:13:68:64:38:58:30
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/1jcNY5626hnNOCnMu1sTaGQ4WDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.238.0/24
Signature Algorithm: sha256WithRSAEncryption
05:04:63:51:83:1c:70:47:e3:63:4a:a8:8b:f7:3b:a8:65:3d:
35:f1:87:1e:e6:71:d3:bf:63:2a:f2:b6:8f:de:5c:48:2e:93:
5f:59:f2:45:4e:a6:7c:b6:4f:b4:82:3e:23:74:08:af:36:5f:
e0:68:af:e7:55:22:e0:66:59:91:cc:15:bd:5a:0e:87:a0:03:
cd:62:1c:6f:ea:7d:05:7a:93:c3:90:17:c1:e8:ad:3d:6d:c6:
e6:15:1c:f8:ce:75:6a:fc:77:c3:3a:5f:e9:11:a8:b9:7d:93:
1b:a7:f2:84:6a:6c:dd:15:0f:d2:30:1c:b3:95:1b:b9:c5:95:
61:01:56:7a:88:21:a9:d4:f6:c5:f8:1e:72:66:b5:79:14:71:
5d:5c:49:89:a8:9b:a1:a7:e9:b8:b6:6d:df:2e:f6:13:c4:e3:
52:ca:ab:db:fe:03:12:ef:51:26:7a:3c:12:25:ec:80:b9:60:
58:9c:e2:af:c1:a1:2e:17:44:7d:a7:4e:bc:b8:e5:12:8b:4a:
b7:06:f6:c1:86:5c:11:b5:36:6b:60:fb:21:a3:46:a1:9f:61:
07:21:a1:c3:32:c2:9d:00:b9:3f:92:df:b2:b7:6c:a2:8d:05:
5e:0c:eb:3a:1a:5a:6a:d2:63:81:cc:8a:2e:e7:19:c8:23:9c:
f9:ad:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:53 2026 by rpki-client