Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/0U2VlsPI1ZtSc4ITKZMGcokM6wQ.roa
File: 0U2VlsPI1ZtSc4ITKZMGcokM6wQ.roa (raw, json)
Hash identifier: xFxtfcP/uh1hT7HfqtefEkdADJqwVPsvw8okD6YODcA=
Subject key identifier: D1:4D:95:96:C3:C8:D5:9B:52:73:82:13:29:93:06:72:89:0C:EB:04
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A454F9614C54C7B57475B0603613E671
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/0U2VlsPI1ZtSc4ITKZMGcokM6wQ.roa
Signing time: Tue 15 Sep 2026 09:10:27 +0000
ROA not before: Tue 15 Sep 2026 09:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44740
IP address blocks: 89.46.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:54:f9:61:4c:54:c7:b5:74:75:b0:60:36:13:e6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14d9596c3c8d59b5273821329930672890ceb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:8c:f7:84:24:a7:4d:1b:8c:15:6a:3f:ba:
c8:02:b5:ac:db:eb:c6:6f:c0:6d:e1:6b:b9:67:f1:
b6:55:2c:a4:bc:52:42:fa:08:0c:72:0f:93:c1:d9:
c9:0c:f5:ce:04:84:ad:b0:ee:3b:c6:f9:a5:b2:b6:
79:5d:7c:49:f0:72:7f:91:01:b9:79:de:7b:a1:e5:
34:7f:11:eb:17:02:c1:6d:95:d6:6b:6e:0c:5a:ce:
8c:78:c7:a4:65:d9:b3:02:c0:04:ae:af:cb:a4:9e:
38:56:bf:47:0f:7c:14:00:dd:b3:bf:6e:83:93:dc:
f9:13:3e:1e:03:1c:71:b0:92:4f:96:34:3f:c5:38:
70:ae:d7:ef:e7:20:e4:8e:19:0b:be:76:84:2d:3f:
94:cc:5a:9b:97:64:f8:b9:25:da:18:67:2e:a3:da:
7f:77:88:b0:e8:a8:17:ec:e6:31:f3:15:a0:01:9c:
ca:2f:3f:7e:3e:2c:a7:e0:85:b6:97:f4:51:93:72:
3a:e0:bb:02:0c:b2:98:17:99:40:5c:a7:f3:d8:61:
ca:94:60:18:54:eb:48:a6:d1:b3:a8:23:ed:6e:29:
2e:13:e2:52:8f:3d:80:8f:3c:8e:95:67:04:54:36:
db:57:02:86:54:6a:07:90:c9:8b:5f:90:ed:91:5c:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:95:96:C3:C8:D5:9B:52:73:82:13:29:93:06:72:89:0C:EB:04
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/0U2VlsPI1ZtSc4ITKZMGcokM6wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.245.0/24
Signature Algorithm: sha256WithRSAEncryption
91:87:42:60:c5:37:1a:6e:25:7d:38:11:02:8f:2f:81:56:83:
46:5b:09:73:bf:9d:5f:24:c1:27:eb:1c:8a:eb:8d:c4:75:c2:
ab:d8:32:b4:2f:f2:a5:e0:e8:c7:5b:5a:bf:c3:9c:55:fc:d3:
6b:be:16:e2:e5:cf:d7:41:72:27:80:fa:53:9d:9a:9a:09:8b:
43:ed:bb:9c:e8:99:ba:ea:52:1e:39:7f:f1:16:a5:00:a2:17:
f2:e3:3e:e3:9e:0d:71:17:02:d4:10:a9:cd:e9:d8:67:e7:f1:
77:4e:33:4d:db:18:94:27:8e:45:a7:cf:48:21:1c:bd:5c:1a:
a7:81:88:44:86:ec:78:09:44:b7:7b:2a:a2:3d:29:cd:4d:77:
36:ab:db:c6:ea:cd:73:e2:90:0f:19:68:91:57:36:df:dc:f6:
df:62:49:e8:cc:52:67:53:dd:76:cf:a7:8e:f0:6b:64:f2:d1:
62:be:db:40:55:30:e4:8f:c3:93:2e:90:bf:08:f9:b5:53:8f:
11:c5:92:f7:d3:ab:22:0d:5d:f1:98:c4:f4:01:c6:b6:1a:34:
fb:ad:6a:fa:6d:94:96:29:43:27:15:eb:27:63:35:76:be:68:
d2:47:6e:bc:07:60:48:21:5a:9a:68:ef:66:99:67:2c:13:cc:
68:5d:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:37 2026 by rpki-client