Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa
File: g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa (raw, json)
Hash identifier: cBANxlLCPRrDnxn+SNqepP9E9vwZCWHdv7vEfvn4Idc=
Subject key identifier: 83:F0:A3:E4:60:D4:C1:AD:87:2C:75:09:88:27:E5:60:32:C7:D4:B2
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019C2419F012CA6089613AA8F88206109397
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa
Signing time: Tue 03 Feb 2026 15:23:25 +0000
ROA not before: Tue 03 Feb 2026 15:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:19:f0:12:ca:60:89:61:3a:a8:f8:82:06:10:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Feb 3 15:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f0a3e460d4c1ad872c75098827e56032c7d4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:c7:9b:9e:7d:3c:0d:f1:ed:d2:14:2a:84:
30:a6:97:af:1c:35:e9:d9:16:f5:2a:09:d6:8f:22:
94:34:6f:68:be:37:1a:b8:37:2d:cf:f4:a4:51:f9:
64:ec:a2:4b:5e:49:13:26:5e:d3:b3:7f:e2:34:c5:
7b:af:4b:7a:a2:62:a5:7a:19:fa:3f:61:5c:ff:2a:
db:47:ce:9f:04:6c:43:f4:1e:2e:9f:40:c7:71:fc:
30:1c:59:f9:b9:1a:17:a1:fb:2c:5b:a0:bc:42:82:
f1:6b:8c:e1:b2:be:34:69:5c:04:8a:a8:84:1d:e9:
f0:af:c1:c3:df:29:6c:d1:a7:49:96:52:a9:c5:ee:
67:96:0a:a1:fa:f7:a6:a8:e4:aa:71:91:13:03:52:
1f:d8:c3:66:e2:fd:ec:a1:1f:9d:b3:fb:dc:25:75:
bf:c9:62:0d:92:cf:f2:dd:1d:49:1b:15:87:4b:ef:
73:14:85:a0:02:28:e8:4c:30:03:34:40:4a:ea:e8:
3e:41:c2:75:0f:4a:c2:d8:10:be:60:9f:35:f8:e9:
d8:57:3a:53:f6:14:6d:23:c7:64:c8:30:b9:98:22:
e8:f5:67:29:44:9e:08:7f:a7:62:60:ac:65:c1:2c:
91:17:0c:38:05:5a:a8:fc:cb:81:4e:da:da:a8:58:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:A3:E4:60:D4:C1:AD:87:2C:75:09:88:27:E5:60:32:C7:D4:B2
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.14.0/23
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ff:c3:ba:fb:74:3b:57:dd:14:05:a9:8c:21:de:ad:44:72:
67:e5:de:20:42:af:1c:ab:2c:18:08:72:bb:19:6e:ac:5b:74:
41:69:a1:55:f8:19:46:57:a0:42:03:25:d6:a4:e4:1b:61:3a:
5a:4d:03:f1:4c:37:9d:c5:25:18:ed:a7:6a:8d:36:9c:04:b8:
ae:2c:9e:34:8d:93:0c:a1:16:fd:1e:2e:c7:b2:ab:c2:eb:86:
36:65:4e:c4:46:fa:f2:47:c0:c3:6e:db:a5:b8:98:18:3b:33:
9f:97:cf:6f:d0:f9:bb:cd:e2:b9:76:31:f9:85:e4:a7:3b:21:
77:52:a0:9e:39:60:3b:50:89:e2:c0:44:09:f7:a2:83:e4:7f:
a4:20:81:fa:6f:a3:a6:a5:4b:ed:e2:5b:8f:15:9d:85:7f:d9:
8c:72:bc:8c:fc:70:8f:f7:3a:87:f4:64:11:e6:fa:5e:16:1f:
7a:d7:fb:2a:55:23:72:ad:b5:c4:2c:a7:f3:b2:0a:61:04:8d:
2f:6d:b3:1b:66:8f:6b:e2:c7:98:93:1b:1a:99:c9:a4:00:de:
85:ea:64:9d:1a:c8:19:71:32:b0:bd:a4:10:c5:d7:90:68:16:
86:a6:26:e0:66:2b:43:dc:d1:63:eb:14:f2:97:f2:bf:40:d3:
1d:22:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:37 2026 by rpki-client