Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fhJaK5hMEBAZXRLS4-0O4aZwl2I.roa
File: fhJaK5hMEBAZXRLS4-0O4aZwl2I.roa (raw, json)
Hash identifier: xuK8/Y3oUhvmHKsVhHkSHzhFTE1WF3HRAMrbL0YDdBA=
Subject key identifier: 7E:12:5A:2B:98:4C:10:10:19:5D:12:D2:E3:ED:0E:E1:A6:70:97:62
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019E832910D08FF412885655C4F107C37367
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fhJaK5hMEBAZXRLS4-0O4aZwl2I.roa
Signing time: Mon 01 Jun 2026 12:29:26 +0000
ROA not before: Mon 01 Jun 2026 12:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 89.185.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:29:10:d0:8f:f4:12:88:56:55:c4:f1:07:c3:73:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 1 12:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e125a2b984c1010195d12d2e3ed0ee1a6709762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:7d:4e:d2:b9:29:4e:7b:29:08:20:e1:20:
de:1b:50:26:6b:9e:8d:9f:2b:41:3c:4d:b3:ee:66:
16:15:43:fb:70:60:3e:9c:71:da:40:11:b5:88:e2:
9f:67:f9:30:77:1c:27:09:c6:4b:a5:c3:42:9c:4a:
ee:51:b7:ae:ac:7b:d6:e6:3d:ad:5d:6c:4f:a4:aa:
6b:a7:32:05:80:77:76:d4:94:b2:81:16:1a:aa:bb:
b4:fb:24:c6:5e:46:71:19:48:3a:40:c5:2c:6a:26:
51:dc:b2:4c:7a:92:6a:70:b2:fa:29:9a:40:a7:d9:
3a:d7:5c:b6:84:fd:cc:8f:1e:78:1b:69:59:20:3d:
6e:b7:e6:08:d9:4e:d2:70:89:3b:71:dd:8b:44:7a:
f7:56:87:34:98:4f:1b:fa:bf:1e:60:28:24:0c:70:
86:e7:d7:09:11:c1:04:85:f9:98:8a:09:2b:f0:66:
77:4a:91:90:14:a7:94:33:e9:d6:92:b2:7b:a4:e4:
74:ad:0d:59:30:96:52:5b:ed:c3:a0:7f:b1:df:c3:
53:7b:fe:2b:1d:2a:a3:90:b0:b8:1b:b9:d8:2d:2e:
e8:e7:38:24:58:1c:37:c7:78:dc:6d:6b:88:0f:ba:
a9:5e:d5:3b:59:39:d4:b7:b7:89:61:60:ca:18:d7:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:12:5A:2B:98:4C:10:10:19:5D:12:D2:E3:ED:0E:E1:A6:70:97:62
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fhJaK5hMEBAZXRLS4-0O4aZwl2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:80:52:af:f1:fd:4a:9d:07:29:67:ce:b3:3b:37:f0:16:64:
fd:f8:e5:31:2e:92:b8:79:ce:11:4e:11:f2:fe:79:ad:e1:bc:
e9:b6:b7:16:8c:39:ae:ac:9f:ed:19:d6:68:da:61:13:df:f0:
57:ea:21:5f:70:f5:3c:9a:b2:f4:99:04:76:77:55:a8:c7:50:
b9:71:a5:be:38:58:ed:4e:3e:9b:5a:88:ee:81:19:42:47:23:
fa:41:02:4e:a3:c6:84:bb:31:d1:22:51:0c:6e:34:cc:12:fd:
cf:0f:73:3c:01:39:6d:07:28:e8:0e:71:24:e7:51:0a:69:60:
d6:ab:53:06:16:6d:d6:11:4b:ff:3b:2e:f9:e6:2b:69:33:73:
3c:85:11:3e:7a:34:da:47:5e:e8:c0:ae:80:93:47:f5:51:e7:
52:6a:cb:d7:10:13:a7:37:eb:15:c2:2a:37:7e:ce:3d:24:38:
c1:e3:c0:ed:19:cc:86:09:5c:7a:56:7f:4e:c9:67:b2:83:b3:
38:6b:d6:f8:b6:4d:c7:97:c7:7f:07:b2:8f:36:37:c4:d1:69:
2f:7b:a6:8e:fd:d5:7c:9a:7b:23:17:c8:72:8b:85:25:04:ad:
4a:37:68:34:19:e6:a4:b9:85:01:ff:8e:eb:59:23:a6:dc:86:
ae:e5:42:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6DKRDQj/QSiFZVxPEHw3NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjYwNjAxMTIyOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTEyNWEyYjk4NGMxMDEwMTk1ZDEyZDJlM2VkMGVlMWE2NzA5NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVl9TtK5KU57KQgg4SDeG1Ama56N
nytBPE2z7mYWFUP7cGA+nHHaQBG1iOKfZ/kwdxwnCcZLpcNCnEruUbeurHvW5j2t
XWxPpKprpzIFgHd21JSygRYaqru0+yTGXkZxGUg6QMUsaiZR3LJMepJqcLL6KZpA
p9k611y2hP3Mjx54G2lZID1ut+YI2U7ScIk7cd2LRHr3Voc0mE8b+r8eYCgkDHCG
59cJEcEEhfmYigkr8GZ3SpGQFKeUM+nWkrJ7pOR0rQ1ZMJZSW+3DoH+x38NTe/4r
HSqjkLC4G7nYLS7o5zgkWBw3x3jcbWuID7qpXtU7WTnUt7eJYWDKGNfNXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH4SWiuYTBAQGV0S0uPtDuGmcJdiMB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvZmhKYUs1aE1FQkFaWFJMUzQtME80YVp3bDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWblOMA0G
CSqGSIb3DQEBCwUAA4IBAQArgFKv8f1KnQcpZ86zOzfwFmT9+OUxLpK4ec4RThHy
/nmt4bzptrcWjDmurJ/tGdZo2mET3/BX6iFfcPU8mrL0mQR2d1Wox1C5caW+OFjt
Tj6bWojugRlCRyP6QQJOo8aEuzHRIlEMbjTMEv3PD3M8ATltByjoDnEk51EKaWDW
q1MGFm3WEUv/Oy755itpM3M8hRE+ejTaR17owK6Ak0f1UedSasvXEBOnN+sVwio3
fs49JDjB48DtGcyGCVx6Vn9OyWeyg7M4a9b4tk3Hl8d/B7KPNjfE0Wkve6aO/dV8
mnsjF8hyi4UlBK1KN2g0GeakuYUB/47rWSOm3Iau5UJ8
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:09:23 2026 by rpki-client