Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Id7ey3-Dw3DIZPIJHSDlTEExHUo.roa
File: Id7ey3-Dw3DIZPIJHSDlTEExHUo.roa (raw, json)
Hash identifier: 0eLpdp7g3wbmmH9G3qcKz6LRnj3KjIL2Z1Yf7WF3Ypg=
Subject key identifier: 21:DE:DE:CB:7F:83:C3:70:C8:64:F2:09:1D:20:E5:4C:41:31:1D:4A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C8374AD694123E186341559C46A5E416C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Id7ey3-Dw3DIZPIJHSDlTEExHUo.roa
Signing time: Sun 22 Feb 2026 03:46:27 +0000
ROA not before: Sun 22 Feb 2026 03:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215649
IP address blocks: 89.144.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:83:74:ad:69:41:23:e1:86:34:15:59:c4:6a:5e:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 22 03:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21dedecb7f83c370c864f2091d20e54c41311d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:1a:00:06:47:6e:21:cc:ea:73:9c:b0:b8:
53:13:63:00:d2:1f:d5:2d:f5:a1:b4:70:40:ba:ea:
c4:eb:38:80:db:93:81:d9:fc:7b:eb:10:2b:76:6b:
76:1b:0e:3e:55:8e:4a:cb:1d:dd:e7:f5:2c:5c:60:
f6:fc:4c:74:f1:19:48:6c:5b:75:c2:88:18:73:ac:
c4:cc:1a:37:b5:54:c9:da:ff:70:bc:06:d3:eb:42:
67:da:27:ae:81:2a:e2:dd:9c:2f:31:49:1a:a5:6b:
23:04:ff:72:f0:01:69:ec:80:9f:22:82:e9:09:b3:
e0:fc:58:15:91:3e:f4:de:84:67:28:d9:27:d7:80:
96:d8:72:01:bd:8a:7e:d6:ac:af:6e:d5:89:04:da:
e3:42:46:88:69:68:a6:2b:3f:1d:2c:56:82:5a:ce:
89:1a:90:95:0b:36:a5:97:2e:6c:5f:52:4d:b0:e7:
76:0e:6a:08:e6:3a:f6:89:bc:86:25:e0:07:fd:59:
0b:32:e3:ad:d9:2b:72:28:52:d4:1d:09:75:73:bc:
1a:af:2e:d8:58:ce:12:e1:88:d4:67:d2:cb:0d:11:
8e:52:f1:5c:bf:48:0f:83:2c:d2:f1:ef:e8:de:c7:
8b:c3:06:6f:62:5d:06:91:f3:b0:87:93:f0:3c:1e:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:DE:CB:7F:83:C3:70:C8:64:F2:09:1D:20:E5:4C:41:31:1D:4A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Id7ey3-Dw3DIZPIJHSDlTEExHUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.34.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f5:6a:c8:63:b5:86:1b:f0:a3:87:0c:64:9c:12:00:35:29:
4c:21:20:ad:e1:12:e6:66:f0:2d:fd:2a:9f:3f:15:27:f8:92:
3d:46:67:ee:df:f8:fe:2c:2e:b5:33:55:ce:95:c4:04:b5:92:
0e:f2:09:ce:c2:0e:42:aa:46:f7:37:5c:92:2e:af:26:1c:db:
a8:c1:33:51:a9:54:44:6d:89:5b:20:87:f6:5f:54:4d:03:a9:
c1:86:5d:6a:56:46:12:7b:9b:81:cb:07:9a:a9:c0:63:43:8b:
db:a9:73:36:38:f8:eb:88:8a:6b:09:75:b9:16:9a:45:09:05:
d4:0c:5b:5b:6c:9b:a9:fa:a1:61:25:a3:90:75:66:09:8a:83:
71:fc:37:3a:b1:85:21:74:0f:b7:8e:19:61:27:95:5f:9e:be:
43:6b:0e:85:fa:00:d1:5c:c2:6d:6a:c9:a3:db:a2:8a:30:35:
48:b0:f7:44:c8:96:b6:23:db:72:24:e4:a8:ca:6f:b9:2a:6f:
d7:30:5e:b6:d8:67:01:2d:26:fd:4d:20:2c:fa:06:7a:75:6c:
ff:83:92:18:89:ac:b7:f0:b4:74:29:29:18:0d:4b:42:c6:5c:
4f:aa:53:38:96:24:0f:8a:a6:aa:80:d7:e3:20:76:f5:de:e3:
52:1c:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:26 2026 by rpki-client