Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Psiq_ieBMcx0gYzebPRDCk0lT-k.roa
File: Psiq_ieBMcx0gYzebPRDCk0lT-k.roa (raw, json)
Hash identifier: Phic7zwWgJizbda2T1h+gOpScTXeZR83m2MvbVx42Rc=
Subject key identifier: 3E:C8:AA:FE:27:81:31:CC:74:81:8C:DE:6C:F4:43:0A:4D:25:4F:E9
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019FB1F1145AAE55F3492A8BE6AD39FD48E2
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Psiq_ieBMcx0gYzebPRDCk0lT-k.roa
Signing time: Thu 30 Jul 2026 07:33:14 +0000
ROA not before: Thu 30 Jul 2026 07:33:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205090
IP address blocks: 89.44.86.0/24 maxlen: 24
89.44.87.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
91.200.13.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
103.71.20.0/24 maxlen: 24
103.71.21.0/24 maxlen: 24
104.128.130.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
109.69.63.0/24 maxlen: 24
132.243.16.0/24 maxlen: 24
132.243.17.0/24 maxlen: 24
132.243.18.0/24 maxlen: 24
132.243.19.0/24 maxlen: 24
135.136.178.0/24 maxlen: 24
135.136.179.0/24 maxlen: 24
135.136.190.0/24 maxlen: 24
157.228.138.0/24 maxlen: 24
157.228.139.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.128.104.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
2a0c:5d00:ff04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:f1:14:5a:ae:55:f3:49:2a:8b:e6:ad:39:fd:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 30 07:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ec8aafe278131cc74818cde6cf4430a4d254fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:c3:3a:38:cf:9c:ff:b5:aa:c1:9b:3f:31:
fd:c6:46:5e:22:57:6f:4f:07:b1:b7:69:d2:bf:5d:
52:42:e0:6a:d5:99:53:9c:d6:43:32:fb:fd:48:5f:
31:00:c8:1c:9a:58:23:49:64:d6:2b:92:39:1c:10:
05:c2:13:ce:48:f5:f9:03:fb:21:f7:fc:bd:37:1b:
db:8d:b0:72:f8:bd:00:a0:ce:e5:f8:08:d2:55:44:
15:f6:26:28:fb:c9:3f:65:7a:bd:40:6b:ef:b7:7f:
8b:09:03:bd:7a:98:20:65:2d:77:52:46:a3:ad:77:
ce:54:39:e1:53:ea:6b:14:52:1a:f3:83:8c:d1:42:
97:c7:8d:4a:47:1b:26:14:86:12:c8:f5:57:ac:4d:
6e:a4:5c:9a:8e:08:5d:5a:7a:d1:77:69:24:e9:33:
c4:79:b7:9d:6f:49:27:e7:d3:cf:8e:ce:f5:f3:a6:
06:20:70:0c:a4:ab:89:9d:41:8d:96:5d:03:8a:91:
f4:fc:33:a2:67:a4:c0:25:6a:12:b4:60:60:1f:d1:
5d:59:61:e8:d5:fd:3c:1c:7d:7a:6e:0e:04:c3:25:
0b:78:b0:3e:5e:11:cd:8d:9f:27:94:36:d3:5e:14:
15:73:07:73:76:6d:b1:4b:81:61:e3:f8:6d:29:6c:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:AA:FE:27:81:31:CC:74:81:8C:DE:6C:F4:43:0A:4D:25:4F:E9
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Psiq_ieBMcx0gYzebPRDCk0lT-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.86.0/23
91.200.12.0/23
95.81.121.0-95.81.122.255
103.71.20.0/23
104.128.130.0/24
104.128.133.0-104.128.135.255
109.69.62.0/23
132.243.16.0/22
135.136.178.0/23
135.136.190.0/24
157.228.138.0/23
185.105.88.0/22
185.128.104.0/22
IPv6:
2a0c:5d00:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
a5:0c:b1:fa:75:07:a5:cd:17:13:da:91:f0:e5:15:36:54:f8:
e8:8d:d0:ee:68:b0:91:5d:f6:1a:25:26:06:16:2b:c5:c6:d4:
00:c3:0c:3a:f5:42:12:d5:6a:60:ca:67:f7:ef:6b:a2:89:fb:
3d:60:b8:cd:37:c3:41:48:21:ab:93:45:3f:cb:1d:cf:85:87:
43:8e:a3:26:db:f1:3e:b2:2f:0d:ff:b2:6b:3b:ba:db:79:f1:
e8:2f:bc:9c:46:d2:db:85:ec:d6:97:e6:b1:0b:b9:d2:24:0a:
dd:91:cf:c2:60:95:d2:35:e4:70:09:35:a0:a1:bf:70:e8:2e:
e9:88:e3:92:76:6e:7f:c4:bd:af:80:53:14:bc:3d:cf:f4:ac:
d7:d5:8d:e1:15:f0:ba:22:4e:3a:02:eb:2e:e3:59:63:aa:06:
39:0b:70:80:22:fe:10:cb:d7:cd:ef:85:4a:7f:ca:4b:34:87:
48:34:ad:92:0b:ef:76:e2:fa:4d:a5:ca:94:24:82:28:37:dd:
aa:ff:7e:7f:3a:f1:65:8a:2a:19:b3:00:b6:e6:7b:16:f5:08:
38:f4:03:31:4c:1b:bf:ac:5f:27:f9:c7:85:d4:00:cd:9d:47:
d9:57:71:8b:83:de:f2:19:41:38:d9:1d:7e:a7:6b:8c:68:b9:
fa:db:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:43 2026 by rpki-client