Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/NseswEKTgOdHF7GFDyLHvXSP0mE.roa
File: NseswEKTgOdHF7GFDyLHvXSP0mE.roa (raw, json)
Hash identifier: WeeXgDZL6Fvxyin2y8kFxCTXmy9ytoOVUEGZMdkIxkU=
Subject key identifier: 36:C7:AC:C0:42:93:80:E7:47:17:B1:85:0F:22:C7:BD:74:8F:D2:61
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019E357F9E98FFF1406E03F703C0AE63ED46
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/NseswEKTgOdHF7GFDyLHvXSP0mE.roa
Signing time: Sun 17 May 2026 10:33:36 +0000
ROA not before: Sun 17 May 2026 10:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.18.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:7f:9e:98:ff:f1:40:6e:03:f7:03:c0:ae:63:ed:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: May 17 10:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36c7acc0429380e74717b1850f22c7bd748fd261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:4a:2c:13:e6:02:62:3a:0f:17:ea:bc:60:
40:2a:be:b2:f0:ed:19:02:0b:77:9c:44:dd:22:7d:
bb:07:fa:ad:e1:f2:cc:0d:66:f7:90:a5:4a:05:2c:
58:e4:c6:62:19:d8:f4:54:29:bc:66:5d:04:a1:0f:
b7:3c:40:a9:70:a7:5c:df:29:a1:a4:5a:83:65:46:
44:37:7c:df:89:66:03:e9:1d:d9:bb:06:48:c1:34:
b8:5c:52:ad:d7:35:72:2f:94:c5:97:30:4f:87:19:
6b:c6:3c:e1:84:f7:db:c3:d2:62:bf:3c:04:54:c4:
bc:29:18:5d:5a:21:e0:33:2e:23:d6:ca:34:35:da:
75:ca:95:a5:03:d4:70:50:66:2b:a6:c8:4b:da:f7:
2c:88:5c:bd:3b:d8:ce:e4:3b:8a:d2:4a:4c:2b:bd:
cc:9c:0f:fb:2d:b6:83:ec:5a:42:da:cc:21:63:fc:
71:55:da:18:2e:88:3a:21:3c:17:d5:b3:4b:34:97:
fa:ca:91:92:46:53:93:89:f1:d2:aa:2f:50:e3:b3:
f0:1b:a2:f6:55:8d:d8:70:c2:79:07:b3:d3:c4:31:
25:a6:c7:46:e1:45:7f:b1:10:d6:f8:27:b1:67:25:
2d:05:7c:6c:df:23:eb:f5:0a:67:f7:81:c2:b6:49:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C7:AC:C0:42:93:80:E7:47:17:B1:85:0F:22:C7:BD:74:8F:D2:61
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/NseswEKTgOdHF7GFDyLHvXSP0mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.56.0/22
Signature Algorithm: sha256WithRSAEncryption
99:1f:85:93:fc:9b:db:1d:b2:61:3b:9e:92:99:3a:7e:b9:7e:
55:5d:5a:a0:6a:62:c0:40:17:d8:0f:6a:b4:cf:77:b0:db:ca:
4e:04:a9:bd:38:36:0d:9e:3f:fc:44:c4:7b:5d:29:a6:d1:99:
46:cc:d0:34:46:4f:fb:f2:fa:28:84:48:f5:df:2c:d7:e0:70:
21:ca:13:65:30:48:d3:f7:55:f7:6d:e1:10:eb:35:b1:8a:92:
8e:ef:9d:31:ba:2b:6c:b5:88:6d:b6:3d:7e:1b:ee:5b:c3:65:
66:19:04:fb:c2:58:48:8b:4e:c6:33:ba:04:63:34:8c:50:1b:
1b:61:9f:63:1e:29:b0:44:ae:d9:d9:ea:de:29:2c:ff:9f:77:
77:99:37:09:48:df:49:88:a9:74:71:62:fd:49:8c:7e:0f:06:
c0:db:bc:08:8e:8e:66:1d:27:47:93:8f:e1:89:ab:39:07:ce:
5c:12:57:66:28:2a:ed:2b:92:05:4d:cb:a1:d2:64:9b:cb:0d:
f2:d8:6a:cf:bf:01:8e:fb:e7:a3:23:82:4e:c6:b5:52:9c:4d:
2b:26:7a:a7:d7:70:52:fa:40:c7:92:6a:87:83:6a:e9:9b:44:
29:2c:68:c5:c2:45:87:3d:32:1b:4e:de:b0:ec:a6:c3:a1:42:
83:4a:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:33 2026 by rpki-client