Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/En3Wic9RJujoNZz1RHxUA6UVUfU.roa
File: En3Wic9RJujoNZz1RHxUA6UVUfU.roa (raw, json)
Hash identifier: O63V4JVax87JCF0awcaxtenxRZPOPdz5hB0JKaX0syY=
Subject key identifier: 12:7D:D6:89:CF:51:26:E8:E8:35:9C:F5:44:7C:54:03:A5:15:51:F5
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A06CE017D05F698636808C67C11CB8EDF8
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/En3Wic9RJujoNZz1RHxUA6UVUfU.roa
Signing time: Fri 04 Sep 2026 14:43:40 +0000
ROA not before: Fri 04 Sep 2026 14:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 89.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:e0:17:d0:5f:69:86:36:80:8c:67:c1:1c:b8:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Sep 4 14:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=127dd689cf5126e8e8359cf5447c5403a51551f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:7e:4d:cd:3f:8c:14:f4:d0:b2:b1:ed:a9:
02:44:c9:55:79:7d:33:0a:a2:61:a0:b2:43:22:0f:
c5:c6:43:ef:97:7d:ef:1b:bc:3b:33:d9:02:da:61:
18:f9:2d:f4:e2:60:b0:cb:a4:34:b1:ea:da:c1:ff:
d5:73:0f:7c:cf:94:d1:80:a8:d2:78:63:21:6e:c3:
27:b4:4b:0d:82:26:78:86:55:23:10:74:67:14:a2:
2a:2a:ff:0e:f3:16:ed:4f:b4:14:f3:d1:21:ab:5d:
ab:a1:00:c7:a4:4e:38:00:6c:04:aa:a7:d0:da:14:
cd:37:82:c3:27:76:00:92:0f:43:6b:b8:c3:a9:8e:
b9:9b:0d:e6:75:2f:e4:be:e3:da:88:03:c8:03:15:
fc:90:11:53:75:22:f0:20:1e:52:0f:f2:a0:33:3f:
88:44:bb:26:30:6f:3d:12:f4:73:73:c2:eb:e5:29:
0a:dd:5c:f8:31:56:8f:23:7b:46:17:32:74:bf:18:
0a:36:61:fb:53:86:99:ee:d2:98:0c:56:68:94:46:
96:20:63:56:75:f3:21:c5:02:b9:b0:7e:19:75:d9:
1d:1e:60:a4:5a:f6:c4:e8:3b:db:7e:90:4c:0f:57:
21:f9:85:3c:d3:b7:3b:4d:8d:bf:ee:58:37:8e:a6:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:D6:89:CF:51:26:E8:E8:35:9C:F5:44:7C:54:03:A5:15:51:F5
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/En3Wic9RJujoNZz1RHxUA6UVUfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ac:fa:76:fa:78:8c:bf:8c:64:96:09:2c:88:03:99:f8:30:
65:2e:f9:b6:a1:0c:6f:5a:3a:34:88:1a:1c:6a:d1:10:da:ee:
b4:f1:e9:48:4b:dc:00:10:b1:a1:be:82:24:b2:2c:0b:b6:7f:
e4:dd:b6:2e:99:d7:07:ea:96:ea:b8:f4:ae:11:22:7c:2c:99:
2a:91:a7:98:90:c3:72:87:6c:47:ec:cf:fe:8e:1c:8a:73:63:
81:c4:58:a2:bf:5b:fd:7b:dc:72:dd:a4:5b:3a:09:4d:5f:61:
2e:21:69:53:5f:05:58:da:15:f3:51:e2:a9:0c:a0:fb:3a:c0:
f1:57:ba:78:8b:98:33:11:fb:df:94:e7:ec:fc:ce:83:9e:26:
b2:83:9d:1b:7d:c8:9b:bd:c4:e7:96:9b:1d:ee:d7:fc:a2:f8:
61:00:e1:dd:42:62:78:04:ff:3b:ba:8b:b1:e0:b9:06:d5:10:
37:7b:54:f8:d1:7e:09:86:15:72:34:99:d9:29:6f:05:e8:10:
b3:19:16:82:b5:db:6b:48:4a:7a:1d:c9:5c:7b:b0:0f:c8:03:
79:bc:1f:dc:e6:53:77:5c:8a:a1:3c:70:7f:09:aa:a3:a1:df:
c3:a3:9d:4b:3a:51:cc:8f:d6:b1:91:8b:e9:61:9c:e6:ce:4e:
6e:c1:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:49 2026 by rpki-client