Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2a13GOkvh6nfkwSPNOjxZqnl6es.roa
File: 2a13GOkvh6nfkwSPNOjxZqnl6es.roa (raw, json)
Hash identifier: Ws75MSK/wlQOXICAxlyXYTPxvamZ2dO9LWaO/6XVrzU=
Subject key identifier: D9:AD:77:18:E9:2F:87:A9:DF:93:04:8F:34:E8:F1:66:A9:E5:E9:EB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D7E4BA864F80D5F9A328235F09EAA4C6A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2a13GOkvh6nfkwSPNOjxZqnl6es.roa
Signing time: Sat 11 Apr 2026 20:46:20 +0000
ROA not before: Sat 11 Apr 2026 20:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 89.106.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7e:4b:a8:64:f8:0d:5f:9a:32:82:35:f0:9e:aa:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 11 20:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9ad7718e92f87a9df93048f34e8f166a9e5e9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:9e:7e:65:de:c1:92:75:a4:46:9b:37:59:
70:d2:12:79:3c:b0:a6:76:78:e0:3f:63:d4:ac:ca:
88:ca:c4:f0:8f:d2:47:6e:1e:c7:9d:cd:91:a8:69:
c5:b8:30:62:8e:30:90:ad:98:3d:e8:5d:18:8d:e1:
e7:fd:33:8c:92:f2:a5:ff:23:eb:cf:f6:7f:09:d6:
b0:c6:19:e3:c5:4d:f1:3e:76:bb:de:d2:1b:2b:95:
a1:94:4f:e8:9f:e6:29:5a:cf:bf:0c:13:39:5a:67:
56:2a:53:49:bb:22:85:37:8c:0b:8a:88:1e:90:30:
64:d0:e2:1c:0d:dd:8c:a4:93:05:01:fd:df:45:66:
2f:91:88:e3:32:af:d4:cd:ff:92:f3:fb:36:a4:58:
16:e0:e8:61:7a:13:12:0c:5d:a0:40:7e:2b:80:80:
b1:c5:a2:dc:b8:4f:c1:ad:a4:22:b7:97:30:28:8b:
aa:2e:35:cb:4c:17:e2:e6:95:e5:00:5c:46:08:a5:
f2:3d:53:09:34:47:a8:c5:29:80:6e:ba:97:b6:2a:
69:90:eb:f7:93:a0:fd:ef:70:b1:fb:3d:42:a9:6f:
b4:02:bb:4e:0a:bc:cd:08:56:22:e7:92:8b:99:86:
9a:05:27:ed:61:f4:b4:ca:27:20:28:b4:3d:e3:bc:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:77:18:E9:2F:87:A9:DF:93:04:8F:34:E8:F1:66:A9:E5:E9:EB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2a13GOkvh6nfkwSPNOjxZqnl6es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:87:97:2c:95:c4:48:10:8a:5c:56:cf:64:0d:20:cc:b1:d3:
11:6c:a5:c1:07:1d:b0:9a:99:44:63:0f:95:82:e1:01:53:a7:
c1:04:72:d2:b2:a0:89:68:f8:d3:51:6a:0a:aa:dd:88:3b:7a:
b0:cb:29:f4:29:7a:cb:b1:2a:19:ab:e6:88:ab:1c:b4:37:7e:
9f:7f:4f:dc:1c:16:04:22:2c:09:d3:d6:41:e3:a0:ac:3b:71:
8c:8f:2c:ad:9b:6f:be:b0:63:37:c6:d7:a9:d8:e5:2f:1e:a2:
16:9a:33:1b:2a:d9:6b:cc:39:b1:3c:22:e6:a5:e1:f7:35:3c:
e6:b3:47:33:f2:9a:a4:a6:cc:a6:48:ff:9d:92:16:ed:8a:29:
49:6b:a9:f4:e9:1b:c4:f7:8c:78:10:ce:13:95:57:10:8c:4d:
db:bf:9d:93:2b:ba:fc:85:56:f1:fb:d7:aa:0a:b7:bd:31:27:
af:99:dd:15:f0:df:df:d6:8a:26:ab:55:cc:1a:64:c4:4e:67:
ac:99:95:ca:5e:41:2e:bf:f9:dd:ad:97:b7:ab:36:fc:27:63:
9d:11:36:71:19:9d:58:4b:a5:a9:99:7c:de:46:25:ca:02:e0:
e0:fc:e9:55:e4:d1:89:db:7c:e8:60:2a:31:9c:4f:33:7a:0e:
32:15:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:41 2026 by rpki-client