Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/e-D3VZHxEnpb_XDj-m8FygPLC-s.roa
File: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (raw, json)
Hash identifier: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=
Subject key identifier: 7B:E0:F7:55:91:F1:12:7A:5B:FD:70:E3:FA:6F:05:CA:03:CB:0B:EB
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019C8B36732D343D19222CC18B4A42D404EF
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/e-D3VZHxEnpb_XDj-m8FygPLC-s.roa
Signing time: Mon 23 Feb 2026 15:55:27 +0000
ROA not before: Mon 23 Feb 2026 15:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215206
IP address blocks: 45.89.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:36:73:2d:34:3d:19:22:2c:c1:8b:4a:42:d4:04:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Feb 23 15:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7be0f75591f1127a5bfd70e3fa6f05ca03cb0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:e7:b0:0a:e0:23:9f:a3:3f:6c:3d:17:fc:
32:e4:10:ad:f5:f8:ba:0e:c0:09:c6:37:46:2b:90:
65:91:74:92:7a:c3:8a:5f:36:09:8a:4d:d1:9f:9b:
87:d6:86:55:48:ca:cc:e6:44:a9:ad:d6:91:e7:7d:
7f:9f:89:d0:07:be:c7:9d:82:a6:7a:d2:91:45:5a:
3b:f3:96:39:48:07:eb:da:3b:fd:09:4c:9f:0f:f6:
e3:3c:bf:57:d5:5f:64:d5:6a:80:d6:f7:75:96:4b:
b9:ff:8f:79:f1:c9:8b:be:4b:fa:8a:60:e5:0b:43:
46:2c:35:a5:ea:1e:e1:d0:f8:db:80:b9:6c:86:35:
2e:0d:b9:1d:60:9c:c8:6e:51:1c:73:96:82:68:73:
2a:39:07:ed:24:cc:8b:46:07:c5:21:6e:6e:2f:78:
e9:d4:1c:a7:1d:27:3d:4e:d1:f0:89:16:64:80:20:
21:6b:5e:72:04:25:fa:ad:ae:55:24:95:88:85:f0:
a8:98:e0:56:a6:08:2a:f2:29:3c:76:24:e6:ea:19:
0d:36:f8:07:0b:55:7f:61:f2:5c:29:70:db:86:08:
ed:6b:4c:34:e3:f6:cd:fa:6d:e3:36:83:8c:93:c6:
3b:4d:94:3f:94:ad:dc:b7:e8:02:7e:65:33:9f:6f:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:F7:55:91:F1:12:7A:5B:FD:70:E3:FA:6F:05:CA:03:CB:0B:EB
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/e-D3VZHxEnpb_XDj-m8FygPLC-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9c:de:65:11:49:4f:fe:84:97:30:2e:35:5f:25:e3:ff:18:
8f:ab:08:d6:57:e0:91:24:49:5e:38:6f:3f:0b:26:e7:38:74:
89:d9:31:11:95:b2:0a:f2:3c:a3:51:22:ad:f9:14:a2:d5:d3:
7b:cc:13:76:82:02:fa:ca:41:f7:82:be:45:0b:ca:01:1f:60:
a8:3d:22:f9:4d:b5:09:0c:be:c5:f7:8e:77:65:9b:57:69:9a:
6f:08:14:51:34:db:9b:72:bc:ba:c8:7f:90:cb:ff:0c:58:49:
03:fe:5d:97:3e:96:b8:07:6f:3b:01:71:31:53:cd:56:ad:9f:
23:12:ed:b7:2d:81:4a:55:7d:3e:74:cc:11:68:eb:b7:51:0a:
4e:34:4b:15:0a:3b:35:fa:b3:c9:3c:50:ab:1f:3d:e8:0d:53:
bc:77:b4:51:87:42:1d:f8:8c:68:77:24:d8:7c:66:56:2d:22:
23:6e:92:f8:8d:8e:d9:0b:c5:7c:a5:12:6e:82:cf:a9:85:e7:
09:40:7a:e5:78:c5:91:23:8e:20:a0:46:f9:e9:2d:f5:3b:72:
c5:e9:4b:ab:fd:00:2f:df:54:76:a5:db:f1:6a:59:fa:83:9c:
d9:8f:07:c0:b5:9f:d8:db:9a:f2:58:d0:4a:d5:12:52:f5:92:
ff:dc:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:07:06 2026 by rpki-client