Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa
File: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (raw, json)
Hash identifier: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=
Subject key identifier: E2:C8:F2:AB:7A:A1:55:99:4E:1A:88:94:CC:61:78:94:03:A6:D0:CB
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019EF8A444734A23DD9CF626E31A250A9171
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa
Signing time: Wed 24 Jun 2026 07:59:35 +0000
ROA not before: Wed 24 Jun 2026 07:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5539
IP address blocks: 89.35.174.0/23 maxlen: 24
89.35.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:a4:44:73:4a:23:dd:9c:f6:26:e3:1a:25:0a:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jun 24 07:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2c8f2ab7aa155994e1a8894cc61789403a6d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:fe:38:a7:b6:c6:97:2c:1c:92:6e:b9:df:
44:33:50:0b:60:35:62:a6:a2:d5:e9:6e:26:72:f2:
88:3c:43:27:dc:e8:d3:c8:00:1e:60:09:14:52:9d:
24:10:59:45:28:e2:07:75:5d:7b:ec:5d:0a:a2:32:
32:9d:06:e3:09:03:cb:e2:77:af:5f:67:af:03:5d:
96:eb:ea:c0:b6:12:7a:d2:54:24:ab:3e:03:2b:44:
02:c5:a5:05:06:e1:2d:b3:fe:e1:3d:7f:dc:aa:41:
a1:6b:cb:11:ad:28:4c:2e:47:f9:61:4c:6e:48:71:
e6:46:34:60:f0:9d:09:4e:5e:a2:06:0d:59:9a:9c:
5b:fd:25:c9:0f:77:53:df:86:9d:05:d3:b9:e4:6d:
85:5d:05:65:c2:ec:6e:0b:12:35:48:1f:54:9a:ac:
f2:27:ee:d2:eb:a4:ce:77:2c:11:39:60:1d:69:6d:
2c:ee:90:86:63:9a:87:da:cb:1a:31:44:b0:6b:7b:
77:a9:89:1f:7e:b1:8a:fd:be:c4:0e:13:87:7d:e6:
af:eb:e8:38:c8:e3:13:79:a4:c6:c3:27:a4:0d:eb:
a3:a7:c3:75:cc:fd:e6:60:77:2a:61:80:9d:76:15:
18:9f:a9:3c:7c:c1:6f:67:e0:64:fc:b5:1d:fa:3f:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:F2:AB:7A:A1:55:99:4E:1A:88:94:CC:61:78:94:03:A6:D0:CB
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.174.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c4:5b:61:d5:95:ba:7a:59:55:01:16:2c:b9:f9:1e:c9:1e:
79:f4:cc:9c:33:36:e6:4b:13:55:ae:2c:18:1a:d9:4e:bc:85:
5e:be:5c:8f:20:dd:80:a0:9d:c5:33:7a:2c:7d:5d:8a:40:13:
13:63:d5:5d:07:93:9f:e6:5f:01:19:ca:95:1a:ba:7b:62:49:
9c:bf:53:a5:59:8d:cb:0e:dd:85:65:c3:f0:c5:0d:d2:6b:6b:
90:6a:39:8d:c1:c0:66:57:16:6c:ef:9d:77:56:cc:76:e2:d9:
48:46:46:0a:79:29:1b:60:db:0e:d9:9a:03:23:e6:bd:50:eb:
62:85:5e:45:84:25:7f:c5:e9:92:0f:1f:29:75:80:e6:2d:1b:
0b:d4:db:d3:86:1f:40:f8:66:dd:5e:d6:3c:61:0f:ca:8a:26:
dc:71:7d:30:05:47:8e:7f:4c:7c:7a:92:8b:54:d7:25:01:56:
86:a9:2b:c1:cc:87:f5:69:f9:59:8b:80:4e:08:15:76:90:aa:
b0:b6:71:71:5c:50:50:5e:46:89:7a:a7:2c:78:3b:b5:66:09:
1c:df:76:2c:97:98:46:af:9c:98:46:d5:f8:cc:39:06:fc:0d:
04:0c:49:13:19:75:31:82:24:96:8b:e8:d7:80:e8:b5:75:4b:
fd:ae:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:30 2026 by rpki-client