Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/bU40aorvzXrenTKUqAzgkIv0Dm0.roa
File: bU40aorvzXrenTKUqAzgkIv0Dm0.roa (raw, json)
Hash identifier: Xcn55ojepd5hvSBnKabegmtnmRCeqLQaNd9Hrai13Yg=
Subject key identifier: 6D:4E:34:6A:8A:EF:CD:7A:DE:9D:32:94:A8:0C:E0:90:8B:F4:0E:6D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019FA2218853460B6D568899650A0B44AF60
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/bU40aorvzXrenTKUqAzgkIv0Dm0.roa
Signing time: Mon 27 Jul 2026 05:52:14 +0000
ROA not before: Mon 27 Jul 2026 05:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219349
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:21:88:53:46:0b:6d:56:88:99:65:0a:0b:44:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 27 05:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d4e346a8aefcd7ade9d3294a80ce0908bf40e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:12:c7:3c:07:20:d6:60:ad:53:73:17:e6:
f2:4a:68:03:6f:bd:b0:74:6c:3d:b9:89:12:ad:67:
76:19:ea:2f:ef:20:66:7b:c5:11:7e:c0:36:b3:c1:
c1:9d:cc:dc:aa:f0:bc:9a:47:e8:33:9b:ec:a9:ef:
40:17:30:dc:3a:4f:e2:00:f7:df:19:31:c5:84:4b:
72:c1:43:69:f0:33:7a:ad:30:32:c6:44:73:af:da:
df:3b:ea:bf:eb:50:e4:91:ba:26:9f:d7:92:98:a6:
10:de:b3:61:9c:23:0f:0e:53:c4:80:71:e1:ae:7e:
3c:1f:53:80:59:e7:fe:52:61:2b:83:ea:93:0b:7e:
ff:ae:e2:90:cd:ab:2b:1b:9d:24:a6:ff:8e:79:b7:
60:0b:c2:2f:96:63:33:bd:c5:fd:0b:46:31:c9:ae:
30:8d:71:21:e8:29:3a:15:88:80:87:b6:09:9b:99:
57:a6:22:ce:65:3e:5a:79:57:0c:39:92:ec:0c:0d:
ba:13:98:97:85:cc:5f:07:61:ea:05:25:0e:25:6f:
25:d1:c6:12:d6:89:f3:72:bf:2e:4e:c4:99:46:8e:
8c:2a:59:a9:20:52:bf:02:d1:96:e9:d3:0b:37:26:
c1:9b:89:11:9b:c3:82:e4:3e:64:bb:8d:5e:10:e4:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:34:6A:8A:EF:CD:7A:DE:9D:32:94:A8:0C:E0:90:8B:F4:0E:6D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/bU40aorvzXrenTKUqAzgkIv0Dm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d8:d1:35:14:f5:16:56:1f:71:44:bb:c5:53:c3:c0:05:40:
fc:ec:3f:d7:c9:5a:31:3d:db:c3:97:2f:0a:fe:a3:e4:b0:a2:
1d:66:83:e4:b6:da:cb:17:9b:cf:e9:27:78:f7:7d:c4:ca:33:
24:82:97:fc:18:69:10:71:a7:f9:89:1c:e6:a8:8b:d8:8d:27:
57:e0:88:81:ad:5e:c6:3d:36:40:c1:f2:af:c7:36:56:43:90:
36:b9:8e:7c:83:72:25:85:70:66:45:e0:ac:5f:32:b0:9d:ee:
04:85:70:1a:c6:99:da:6a:3f:7d:c1:dd:4f:77:ed:d0:9d:e8:
2a:6d:3f:93:c4:74:23:5b:7a:2c:36:4a:bd:f1:84:d9:a0:a7:
10:72:a5:bc:23:bd:c4:fd:10:3f:8e:30:7c:6d:d0:a3:1f:67:
3a:94:84:84:62:23:e9:b5:90:99:d3:d1:32:01:30:de:f3:6a:
1b:64:32:55:f7:aa:03:dd:00:2e:43:2d:e2:e8:9c:52:e5:00:
e6:73:6d:a5:02:1e:40:93:c0:4c:d4:0f:cf:ae:e7:6d:f8:1d:
db:be:f7:ee:6a:12:d8:d0:05:6d:b7:2a:b4:0e:a3:02:1b:99:
85:ec:3f:38:5d:0d:f7:f5:54:4e:ea:8d:ec:8c:6c:12:a5:63:
6d:f6:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:44 2026 by rpki-client