Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa
File: 89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa (raw, json)
Hash identifier: +R39xsw0TMLfUYX3g2vNYR+A7feupsksUHvMB8jY4CA=
Subject key identifier: F3:D8:00:5E:59:8E:A7:8B:39:A5:C2:14:3F:44:21:DA:34:4E:DA:1A
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 019BBD527F1B9D001D7966EEF6D90165E9B8
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa
Signing time: Wed 14 Jan 2026 16:24:18 +0000
ROA not before: Wed 14 Jan 2026 16:24:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207578
IP address blocks: 185.187.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bd:52:7f:1b:9d:00:1d:79:66:ee:f6:d9:01:65:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Jan 14 16:24:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3d8005e598ea78b39a5c2143f4421da344eda1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:23:e8:21:fb:69:6a:25:9b:74:ca:30:e0:
20:05:fa:67:7b:9f:2a:55:4e:26:54:db:d0:a8:21:
52:1e:49:8d:bc:c0:5f:ba:5f:84:a0:43:6d:6a:15:
13:c2:6f:9f:ca:f6:b0:e6:a2:0b:cc:40:f1:57:35:
ce:35:d9:0c:28:dc:c1:08:ef:7f:00:dd:ef:d5:15:
80:7f:32:7c:d4:ad:f5:72:da:ac:09:be:ae:ac:b1:
ca:10:8d:48:87:75:b1:86:c2:dc:01:b0:bd:13:ae:
59:72:f5:80:88:01:bf:a5:47:c5:68:2e:9c:21:fd:
fb:11:0e:67:a8:88:cb:33:b8:8d:f4:c2:f6:66:33:
ff:7c:ad:ce:84:89:5e:3b:2e:3c:57:5f:c5:49:47:
d9:8b:53:eb:eb:20:0d:0d:cb:56:cd:3a:e5:78:6f:
ae:12:78:47:a8:44:7d:f0:47:17:0c:94:d4:2e:7c:
52:6e:b8:dd:7c:87:7d:d4:42:a6:6a:ec:82:d9:e5:
b0:7a:7b:4b:2c:88:d6:ba:ed:6e:55:73:95:5d:c9:
78:76:56:6f:19:14:0a:b6:13:09:e1:39:61:7f:5c:
f9:af:59:5c:da:0f:39:b9:eb:a5:ab:32:cd:1e:61:
d4:f7:30:0e:c6:19:bd:29:25:a4:4f:07:e9:6d:1b:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:00:5E:59:8E:A7:8B:39:A5:C2:14:3F:44:21:DA:34:4E:DA:1A
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.44.0/23
Signature Algorithm: sha256WithRSAEncryption
57:7a:fa:96:01:4a:af:ff:5f:06:a7:6e:69:32:d9:99:86:d7:
f6:ba:6b:7a:5c:11:96:a7:f5:e3:7b:48:b5:09:e4:fa:3f:7a:
8e:67:e1:cf:f3:56:34:11:df:23:76:bf:d7:c4:8f:98:84:de:
e2:9b:3d:d8:b2:2d:1d:76:4f:80:d3:c6:bf:dd:b9:55:da:74:
b5:8f:ef:4a:35:8d:cf:ba:cf:fb:08:04:a0:d7:be:0c:74:c8:
f7:50:c4:2c:c5:77:76:3a:40:a9:fd:6f:99:7d:e8:18:a8:e3:
86:fc:31:e3:13:36:7b:7b:e7:4b:f2:d0:06:52:f6:e3:16:91:
ca:b9:95:52:3f:43:ef:b5:bb:a0:b1:69:64:d8:8b:3c:8b:f9:
d6:b5:84:cd:ee:7e:99:aa:1a:1b:ad:a7:c7:a7:3e:80:ac:49:
c8:6e:1d:41:8b:11:16:e0:7f:1c:27:7e:76:67:1c:96:3b:fd:
18:26:11:e3:ff:ff:41:a7:8d:0b:16:0f:22:bd:a2:14:25:ab:
14:03:8a:68:9a:07:4b:51:7b:29:63:81:2f:95:05:f8:d5:1e:
b3:39:67:36:3c:b2:b1:82:0f:d8:d6:c6:61:e4:57:27:c1:46:
44:ca:86:ea:f9:58:7f:4f:de:61:d9:12:a7:44:16:5b:09:31:
1b:62:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:48 2026 by rpki-client