Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KsP3vRqHkCkEwjdQg2AG2cGjCU0.roa
File: KsP3vRqHkCkEwjdQg2AG2cGjCU0.roa (raw, json)
Hash identifier: 039ysyldmFalBPi4rmX+AjzE8J7KqDiV9ogXW9cx8j4=
Subject key identifier: 2A:C3:F7:BD:1A:87:90:29:04:C2:37:50:83:60:06:D9:C1:A3:09:4D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A17DF6C23A4D5BAEFBCFFDADB05D366F90
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KsP3vRqHkCkEwjdQg2AG2cGjCU0.roa
Signing time: Tue 27 Oct 2026 15:24:45 +0000
ROA not before: Tue 27 Oct 2026 15:24:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18229
IP address blocks: 89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:f6:c2:3a:4d:5b:ae:fb:cf:fd:ad:b0:5d:36:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 27 15:24:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ac3f7bd1a87902904c23750836006d9c1a3094d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:6a:cd:58:2f:bc:8a:63:7a:dd:04:53:f2:
ff:b0:d0:19:8a:6f:70:e2:44:e6:70:4d:ca:25:bd:
7a:67:fc:ce:7d:0a:60:b4:41:ff:93:60:d9:a3:5e:
cd:bb:f7:01:78:e7:9c:49:08:de:11:5f:da:96:b5:
2b:3b:d1:58:a1:04:ea:1d:2d:35:26:de:3a:c6:7f:
99:12:75:ec:13:04:db:ec:84:2f:fc:cb:39:77:e3:
d4:d4:01:bc:f0:b4:6a:8d:fb:1e:d7:00:a9:9e:92:
90:68:cf:d9:fa:cf:17:76:3c:2c:6d:07:87:07:33:
8c:5d:e6:5c:60:a4:6f:41:53:f1:88:b5:95:ae:a8:
7e:ae:d1:2b:d6:cc:cf:56:a2:c0:fa:7c:29:ac:7b:
fd:bb:0f:1b:a3:d9:aa:be:c9:b4:60:49:70:96:74:
2b:f9:bd:21:bb:9d:ca:16:5e:3e:6f:48:c8:b5:96:
28:2b:d8:17:e9:56:3e:aa:5a:cf:82:2f:26:f5:2c:
43:f9:3c:76:77:97:d7:6c:35:49:38:42:14:8d:66:
7b:c8:5f:de:a5:dd:d9:e6:f0:28:ce:70:6a:e2:84:
05:6a:dc:1b:6f:dd:99:7a:a8:f6:76:a7:c9:3f:de:
5f:fc:2c:62:0f:37:86:35:72:e4:03:81:9a:c1:a2:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:F7:BD:1A:87:90:29:04:C2:37:50:83:60:06:D9:C1:A3:09:4D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KsP3vRqHkCkEwjdQg2AG2cGjCU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.18.0/24
89.106.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b8:b3:6b:41:68:99:d1:ca:c7:80:f7:86:47:69:06:57:48:
64:6a:25:cd:f4:fb:de:6c:c9:a0:c2:54:34:cc:fc:49:f2:1a:
7a:16:28:5c:5b:45:98:6e:5d:37:cc:3b:91:09:dd:17:dd:90:
d8:14:ce:96:23:17:18:e7:2c:a9:e6:51:53:e9:f8:82:c7:98:
5e:b3:6e:bc:c2:aa:ae:c3:42:f5:bd:43:d4:7c:43:3f:df:4a:
18:5a:52:eb:e7:b7:0f:f7:1d:f0:a2:a1:f2:39:24:75:67:10:
ac:97:db:cb:42:0b:80:35:6b:a2:b7:e1:22:e0:06:99:0c:38:
26:fb:73:92:22:96:b3:07:15:95:6d:bf:66:04:31:09:9c:34:
02:35:25:c4:bf:5f:a2:e5:f8:97:1f:32:6a:89:e4:e2:33:ff:
07:97:bc:aa:94:44:49:78:f9:50:d9:fa:17:a2:27:e4:fc:06:
f8:85:e8:90:42:c5:b7:49:1c:7c:13:0f:17:8b:ff:2f:a6:d1:
7d:14:74:27:c3:9c:07:2f:f5:50:c7:8c:99:09:fc:7e:b5:e2:
dc:5e:b9:63:e4:f7:c6:98:42:fd:1d:06:79:a9:1f:ee:18:d6:
8a:84:df:df:84:34:63:40:bb:41:14:fa:bb:b9:ed:3f:f5:d9:
3c:53:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:48 2026 by rpki-client