Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/hWx6QnPQXaWnz7A_mTzrz5o2apc.roa
File: hWx6QnPQXaWnz7A_mTzrz5o2apc.roa (raw, json)
Hash identifier: jev2tVNEGb4KTia09yUEZy3m6HNGGEx0F52a1OXMnaU=
Subject key identifier: 85:6C:7A:42:73:D0:5D:A5:A7:CF:B0:3F:99:3C:EB:CF:9A:36:6A:97
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019D8A85D7F6BAADE955384E766E63924E80
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/hWx6QnPQXaWnz7A_mTzrz5o2apc.roa
Signing time: Tue 14 Apr 2026 05:45:20 +0000
ROA not before: Tue 14 Apr 2026 05:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 89.23.80.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
89.23.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:85:d7:f6:ba:ad:e9:55:38:4e:76:6e:63:92:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Apr 14 05:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=856c7a4273d05da5a7cfb03f993cebcf9a366a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:47:ee:31:97:d2:14:74:6d:fe:2a:92:1b:
dc:bf:af:82:c0:c3:88:ee:f0:57:a2:23:49:f3:bc:
fe:61:de:09:84:0f:e6:c6:c1:79:86:7d:2b:73:86:
b9:d2:1c:9f:22:bd:cb:b9:c9:2b:44:bc:f1:dc:63:
05:ef:46:5b:ea:22:a7:8a:c0:76:ec:9a:71:6d:08:
30:7d:31:27:c1:54:f6:ba:eb:5e:36:80:71:99:a9:
15:13:7e:2a:d8:24:76:7f:57:ca:52:2a:42:a8:4b:
a6:ad:67:cc:8f:1b:72:30:1b:b1:46:4f:20:f4:3e:
74:f6:01:5b:42:b9:ac:0d:65:ad:f9:1d:fb:cc:68:
1b:b0:7f:46:5f:33:49:b9:c0:f1:23:42:73:6c:1a:
be:b1:fe:c9:2d:6b:3e:c5:7d:ce:57:c3:6f:93:0e:
ed:81:9a:91:6c:1f:b7:ef:3d:a5:ce:31:df:72:3b:
ae:c5:e7:85:ed:03:5f:8c:22:bb:3c:57:c8:f1:8f:
25:f1:16:b4:f6:4c:24:53:be:a9:a0:c9:ea:74:a0:
ef:f3:07:87:cf:1e:66:90:a2:9a:e2:ab:82:b8:85:
cb:b9:a5:f3:f1:2c:a3:f8:2c:73:be:a2:c1:dd:1c:
69:d8:70:59:01:a4:19:7b:6a:e1:54:21:e0:e9:30:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:7A:42:73:D0:5D:A5:A7:CF:B0:3F:99:3C:EB:CF:9A:36:6A:97
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/hWx6QnPQXaWnz7A_mTzrz5o2apc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
89.23.91.0-89.23.92.255
Signature Algorithm: sha256WithRSAEncryption
4a:77:a9:f3:f4:cc:1d:fd:91:41:7b:8a:35:98:80:06:3d:22:
1c:17:04:5f:85:2d:c5:23:c8:d9:40:41:29:aa:7c:9a:5e:ca:
de:0f:ec:ef:e3:2d:34:22:2b:2a:80:50:f5:87:94:be:10:18:
61:51:65:f4:aa:fc:a5:24:f4:67:dd:b1:02:a2:83:ea:2f:4f:
2b:27:db:e1:c8:f3:fc:30:cd:dc:69:d7:b7:01:11:45:90:da:
d5:6d:96:b0:46:e0:f3:57:73:2f:cc:5d:2f:e9:3e:10:c6:ca:
8e:fe:35:19:f7:c8:ac:2b:a2:08:28:13:a0:ae:61:5a:a7:75:
93:da:7c:db:22:76:66:b2:9e:64:9a:d6:31:5e:18:2c:61:cf:
f5:4e:b5:96:7c:a0:0a:f7:82:a9:c5:92:1a:91:66:04:55:06:
76:e9:86:41:ce:01:22:ad:4e:f2:4d:2b:76:f9:32:41:14:ad:
0e:56:ab:b8:de:a5:ee:f1:dd:d2:49:d4:b1:75:f8:bc:d4:97:
de:b9:ac:77:00:2d:41:f1:73:e6:6f:d8:0a:51:c0:b4:92:4a:
8c:f1:30:e1:94:b3:fd:b8:8c:6a:c4:93:85:94:d2:6b:71:5f:
3c:e6:0f:b2:24:f7:bf:45:c2:d4:ae:be:0c:a9:83:e0:e9:34:
a8:1d:bc:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:28 2026 by rpki-client