Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rG2MTB8EpEznpoXab1sOgaAJOYw.roa
File: rG2MTB8EpEznpoXab1sOgaAJOYw.roa (raw, json)
Hash identifier: Nx2w9ZSItkglWoeefaK5tvAbKl9mQB6imZWJUgZwLAM=
Subject key identifier: AC:6D:8C:4C:1F:04:A4:4C:E7:A6:85:DA:6F:5B:0E:81:A0:09:39:8C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EC081CAF45FB921BD303183EC3E1B119F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rG2MTB8EpEznpoXab1sOgaAJOYw.roa
Signing time: Sat 13 Jun 2026 10:23:12 +0000
ROA not before: Sat 13 Jun 2026 10:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 89.35.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:81:ca:f4:5f:b9:21:bd:30:31:83:ec:3e:1b:11:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 13 10:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac6d8c4c1f04a44ce7a685da6f5b0e81a009398c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:b0:5d:93:81:06:81:5d:24:d7:ae:3c:2d:
ce:41:91:5b:cb:17:c5:99:84:37:08:33:d4:93:33:
1c:2b:3b:eb:39:5d:e9:97:db:86:a7:69:65:e3:7d:
90:f8:ce:1b:ce:06:9a:26:bf:cd:20:ab:d1:f1:88:
85:02:a7:4c:d7:49:6b:32:8a:e3:ba:9b:52:aa:fd:
ad:4e:03:32:6c:29:2d:b8:8a:2c:d4:80:9a:d1:43:
dc:d8:ff:7b:2b:ac:dc:8e:25:4e:5e:7c:a8:06:d1:
66:c9:d9:ee:0e:6a:86:a9:5b:8b:76:5f:c8:64:a1:
d2:b8:ad:20:bd:0d:00:92:c8:ad:57:a3:ca:59:a7:
8e:0e:f2:ee:3b:76:60:5c:2e:96:e6:33:7a:80:f4:
38:4c:5a:7c:93:c3:36:b7:a2:fd:19:41:ee:64:ba:
1c:2d:73:cb:b2:5a:1a:75:93:65:7e:22:45:6d:ee:
2e:21:2d:ba:86:f9:98:d9:17:01:fa:de:e7:ea:c0:
39:d8:f9:a7:4b:8c:5e:03:37:98:e2:ae:73:26:4a:
c4:5d:66:88:81:1a:54:eb:5d:d4:44:94:48:e8:48:
3b:cd:68:3d:0a:3d:f8:04:01:f3:9d:60:b5:0f:ca:
fe:f1:2c:50:79:e6:e3:ac:52:9e:07:53:ec:c0:af:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:8C:4C:1F:04:A4:4C:E7:A6:85:DA:6F:5B:0E:81:A0:09:39:8C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rG2MTB8EpEznpoXab1sOgaAJOYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
Signature Algorithm: sha256WithRSAEncryption
23:91:23:59:10:0f:2f:97:a1:2f:49:b9:65:04:07:01:3c:fb:
a3:1f:1b:b4:2a:68:42:7d:1b:4a:e0:08:37:21:f8:13:00:a9:
ae:06:66:e6:95:8b:b9:c4:12:45:47:3c:ff:a3:ac:2c:95:bd:
4a:55:95:5c:d5:3c:49:db:51:92:d7:6f:75:92:fd:18:95:e1:
ad:c2:f1:7d:dd:cc:d0:05:2b:eb:29:b6:2a:5a:60:c5:8e:85:
c5:c6:c0:d0:6b:ca:a0:44:ac:b1:0c:57:5c:d0:dc:da:3b:ef:
c1:94:d4:58:6a:0f:77:03:26:87:6b:d1:87:e5:c9:a4:5e:92:
3d:c1:88:d8:29:29:e5:fc:95:8d:76:6e:30:e0:4b:6c:06:2c:
2b:30:1e:17:6c:9d:6d:3f:1e:6e:d6:f3:8d:89:68:6b:41:b7:
0b:a7:10:82:86:3a:1b:c1:eb:3b:41:15:79:88:5d:d1:7d:e8:
ff:dd:cf:43:16:57:99:ed:65:c1:5c:87:87:8b:b9:70:8e:7f:
9d:7c:64:69:35:9a:ba:8a:e2:6a:44:75:ef:2c:7d:ee:91:d2:
af:a7:88:68:f9:31:a2:37:2a:02:00:05:bd:98:0f:f4:db:3c:
d1:78:a0:2a:30:09:33:57:5a:4e:ed:7f:3f:e9:17:69:b4:7f:
4f:bc:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:16 2026 by rpki-client