Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa
File: X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa (raw, json)
Hash identifier: 9tYchkibyiGf63vXdkvYVj/MGH8M6+b7g0ZGSiDWW4k=
Subject key identifier: 5F:C5:DB:23:51:FD:21:F4:A0:DE:A4:2C:41:2A:30:67:95:BD:A8:84
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019C5D112E266DBBA7A5D4361D295AEDEE2B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa
Signing time: Sat 14 Feb 2026 16:52:12 +0000
ROA not before: Sat 14 Feb 2026 16:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.27.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5d:11:2e:26:6d:bb:a7:a5:d4:36:1d:29:5a:ed:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Feb 14 16:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fc5db2351fd21f4a0dea42c412a306795bda884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:99:09:aa:6b:38:68:db:11:82:a6:fd:ce:
03:56:20:e3:b7:eb:cb:f8:56:bc:43:25:74:25:b0:
1b:52:fd:b5:fb:ce:7f:7e:82:ef:95:39:e8:16:de:
fe:a2:76:eb:21:0c:3c:5d:cc:49:bc:ff:dc:63:ed:
79:de:8e:b1:ee:c0:ae:cc:c5:88:fb:b1:e9:29:e7:
8d:34:1d:2d:a4:15:b5:ba:a3:e5:5d:e0:36:f1:e3:
81:41:a0:b2:b3:8b:64:77:9e:1a:2b:14:21:f0:7c:
7b:d6:8f:04:e4:8f:2d:56:ef:68:d5:0e:dc:8f:32:
47:b3:94:66:83:d6:dc:b5:21:28:35:bc:52:58:2c:
fe:ab:6a:00:18:f2:e4:12:46:0c:07:c4:ba:e0:1a:
a3:48:db:3a:dc:aa:9b:17:b3:76:a2:15:20:df:29:
51:f5:5d:67:90:cf:0e:55:b1:e2:1c:f1:4e:87:71:
f2:37:db:b3:ad:d4:8f:4d:06:84:24:d1:1a:f6:91:
a7:67:05:b2:cc:7a:9f:97:f8:7c:34:5c:4a:3d:6f:
38:f9:75:db:5c:6c:d8:4e:a6:05:f6:66:31:27:4f:
8d:fd:97:7f:67:4c:fe:c4:30:da:2a:72:54:46:9f:
2a:cc:dc:23:81:6b:d7:cb:d9:ca:84:32:f2:1e:b3:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:DB:23:51:FD:21:F4:A0:DE:A4:2C:41:2A:30:67:95:BD:A8:84
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.9.0/24
89.187.27.0/24
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:17:da:66:d9:01:6b:89:ac:f2:d4:c8:18:7d:3f:53:8e:f6:
8d:51:09:fe:5b:64:b8:bc:03:cd:41:5f:5f:53:86:95:7b:ab:
44:c6:9a:6f:60:22:b4:af:1c:a9:83:ae:e7:32:73:0c:44:e4:
a7:25:41:63:28:0f:db:e9:c1:1d:bf:14:5c:af:9c:00:5a:fa:
49:74:18:e6:b3:77:9c:28:ae:7b:5d:34:de:46:af:55:66:d7:
67:6f:b9:82:90:14:d7:87:c6:97:ad:54:bb:0a:36:67:cc:7e:
2f:f5:2c:c3:78:52:e5:03:c1:8e:6b:1d:6b:66:2d:89:fa:41:
48:1e:75:31:38:0d:15:a2:68:1c:ba:97:1a:0c:20:ce:9c:28:
04:51:39:46:c7:8b:cd:b2:06:61:24:4d:14:56:b3:91:9a:2a:
b5:ee:d5:da:6d:57:bd:34:1b:23:d8:5a:b1:cd:b4:05:8d:55:
76:69:f7:3a:7c:96:30:e6:fc:27:30:6e:04:d7:4d:84:d9:da:
09:c6:a1:5e:fa:97:90:8a:b5:7d:5a:54:f2:7b:da:ab:57:bc:
2c:b8:86:55:92:3e:77:46:e3:bb:9b:c1:f5:68:16:80:92:08:
2e:67:35:bd:3a:e8:04:19:e0:aa:7c:63:09:b0:18:27:27:e8:
df:4a:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:27 2026 by rpki-client