Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/a-nvjk6cYUhJdEbiT33cBMPDzBY.roa
File: a-nvjk6cYUhJdEbiT33cBMPDzBY.roa (raw, json)
Hash identifier: rYiFMf8pG8I98q0uy/cj+JsOceGqappzf6Y4DdQ2R04=
Subject key identifier: 6B:E9:EF:8E:4E:9C:61:48:49:74:46:E2:4F:7D:DC:04:C3:C3:CC:16
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019E2BA111B5E9F599AB5E2BC2B3B5B5B72B
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/a-nvjk6cYUhJdEbiT33cBMPDzBY.roa
Signing time: Fri 15 May 2026 12:33:56 +0000
ROA not before: Fri 15 May 2026 12:33:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199734
IP address blocks: 89.23.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:a1:11:b5:e9:f5:99:ab:5e:2b:c2:b3:b5:b5:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 15 12:33:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6be9ef8e4e9c6148497446e24f7ddc04c3c3cc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:84:d4:9a:fd:68:23:03:0e:9c:8f:f5:cc:
55:22:83:ae:fb:cb:97:81:f6:ce:10:e9:c6:30:12:
50:be:a5:8d:9b:39:37:07:35:95:07:74:29:d4:e6:
d7:ed:6a:c5:b6:4d:e6:40:f6:dd:d7:29:b7:3b:25:
f5:b7:01:f8:5a:94:2d:72:58:15:a1:1a:8b:fe:03:
c8:90:eb:65:ea:78:4f:29:cb:7d:a9:50:f0:b7:3a:
c8:a5:0e:1f:9c:cd:47:27:68:b3:a8:13:f9:91:39:
ec:65:3c:55:ad:d9:77:70:85:fc:94:72:34:e7:e9:
04:e1:f6:69:85:e3:28:31:9c:17:f9:f3:b6:7b:9e:
4f:3f:83:cb:d7:f3:f6:fb:b4:8c:fb:f1:33:ab:b0:
6d:c8:01:3a:d4:00:df:06:e6:33:03:74:b3:07:3c:
6c:5c:2b:af:90:82:99:88:b8:f3:6d:dc:64:69:f5:
70:7f:d4:9c:f6:fb:3b:3b:7a:e1:e1:67:cf:67:9d:
5f:b5:d9:09:39:a8:56:b9:64:f3:29:9c:43:00:4d:
4e:eb:4e:a4:4d:fd:b5:c5:c3:38:2e:14:f7:fd:a4:
64:29:27:fa:0f:33:07:0e:d7:e6:31:1b:3d:82:82:
ec:9f:33:38:71:af:40:1d:7c:c5:b5:ee:47:a0:e6:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E9:EF:8E:4E:9C:61:48:49:74:46:E2:4F:7D:DC:04:C3:C3:CC:16
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/a-nvjk6cYUhJdEbiT33cBMPDzBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e3:f8:5a:29:71:fe:b1:03:aa:a1:3e:0d:42:f6:8a:9b:4a:
48:71:86:1d:7f:0e:f5:5d:df:4f:96:45:87:49:d0:13:1f:c7:
2e:bf:de:d1:05:41:8e:46:e9:1b:17:ad:99:28:ce:7b:ef:81:
89:7e:b0:e8:3a:51:d9:04:1a:3c:2f:13:8e:64:58:e1:e7:ae:
02:89:bc:e1:a2:bf:ab:95:9d:44:46:ca:4c:98:b9:13:e8:06:
0d:94:f6:83:c4:a4:5d:f6:04:21:59:58:28:0f:de:39:c5:a7:
48:12:2e:11:1f:83:d6:9d:55:e6:0f:32:95:37:61:39:1b:41:
44:16:82:cf:ed:f3:6e:3f:83:00:a5:72:7b:c6:da:84:7f:0d:
a4:a0:2f:e6:cc:48:1b:95:2c:d4:4b:d4:de:7b:ba:66:3d:1f:
dc:c2:bf:4f:86:52:e0:8b:c0:68:5a:4a:89:0d:b6:cb:d9:16:
9d:82:46:a5:72:03:0d:ab:05:d4:0a:d5:d1:ae:34:29:36:20:
cf:8a:cf:04:52:98:d7:cb:7b:88:61:2c:8e:64:07:05:e7:a8:
c2:f4:00:e8:03:f5:10:9c:47:c5:48:e0:a0:ab:4e:38:88:0e:
dc:b5:7d:91:b1:09:5a:60:50:e8:a0:06:45:74:e8:5e:d6:d2:
7a:db:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:19:13 2026 by rpki-client