Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/Q9jp2ywASpypyOn4pZVNBRvuwwc.roa
File: Q9jp2ywASpypyOn4pZVNBRvuwwc.roa (raw, json)
Hash identifier: TOiskjf5YR4cXk0frSyDy9UdkXgXhZjxmzF8dJlMcWU=
Subject key identifier: 43:D8:E9:DB:2C:00:4A:9C:A9:C8:E9:F8:A5:95:4D:05:1B:EE:C3:07
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 01A0A8BBFCAD3DA827AE3E4708C67E05BF42
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/Q9jp2ywASpypyOn4pZVNBRvuwwc.roa
Signing time: Wed 16 Sep 2026 05:41:27 +0000
ROA not before: Wed 16 Sep 2026 05:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44894
IP address blocks: 89.21.76.0/24 maxlen: 24
89.21.77.0/24 maxlen: 24
89.21.78.0/24 maxlen: 24
91.193.128.0/22 maxlen: 22
91.193.128.0/23 maxlen: 23
91.193.128.0/24 maxlen: 24
91.193.129.0/24 maxlen: 24
91.193.130.0/23 maxlen: 23
91.193.130.0/24 maxlen: 24
91.193.131.0/24 maxlen: 24
91.203.60.0/22 maxlen: 22
91.203.60.0/23 maxlen: 23
91.203.60.0/24 maxlen: 24
91.203.61.0/24 maxlen: 24
91.203.62.0/23 maxlen: 23
91.203.62.0/24 maxlen: 24
91.203.63.0/24 maxlen: 24
91.247.76.0/24 maxlen: 24
193.150.49.0/24 maxlen: 24
194.107.230.0/23 maxlen: 23
194.107.230.0/24 maxlen: 24
194.107.231.0/24 maxlen: 24
194.110.2.0/23 maxlen: 23
194.110.2.0/24 maxlen: 24
194.110.3.0/24 maxlen: 24
194.150.104.0/23 maxlen: 23
194.150.104.0/24 maxlen: 24
194.150.105.0/24 maxlen: 24
194.150.106.0/24 maxlen: 24
2001:67c:2f2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:bb:fc:ad:3d:a8:27:ae:3e:47:08:c6:7e:05:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Sep 16 05:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43d8e9db2c004a9ca9c8e9f8a5954d051beec307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:31:e8:40:30:f9:ad:ef:a5:dd:36:db:16:
b9:8d:58:46:ac:4f:1c:ee:2e:53:c9:d5:5e:e6:cb:
5b:20:8f:81:8d:3c:ae:d4:ca:be:53:cb:dd:03:ae:
4e:34:88:80:75:d7:28:7f:5b:ef:3f:08:71:63:ec:
a5:61:2a:96:6a:6d:65:d3:d6:77:6a:30:d8:4b:75:
a4:01:13:06:90:d0:72:74:37:75:64:e8:0c:57:1b:
1b:c2:ee:bd:29:fc:38:0e:c3:77:d6:9c:59:66:8a:
fb:91:40:de:8b:e8:82:e8:2c:54:15:27:d7:8b:91:
e4:92:79:aa:df:9c:2e:dc:96:00:6e:39:82:7d:1b:
93:7e:58:31:43:57:25:7f:ea:85:e9:7a:0a:ff:55:
48:59:71:a5:ae:8a:61:20:5e:ac:30:4e:65:95:60:
a1:7b:48:4c:c5:37:bb:10:ce:43:1c:71:b5:ec:13:
44:95:11:c7:23:03:55:fb:d5:76:ee:52:0c:0a:2d:
c6:b1:75:43:9c:e4:5a:69:c8:cb:92:08:77:49:be:
96:95:95:04:49:60:1a:de:27:8e:ca:19:6a:83:01:
a0:c7:df:e4:0f:a2:c6:e5:17:2c:64:2b:75:25:37:
d6:ae:e9:69:35:18:11:d7:6c:7e:e3:7c:44:61:8e:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:E9:DB:2C:00:4A:9C:A9:C8:E9:F8:A5:95:4D:05:1B:EE:C3:07
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/Q9jp2ywASpypyOn4pZVNBRvuwwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.76.0-89.21.78.255
91.193.128.0/22
91.203.60.0/22
91.247.76.0/24
193.150.49.0/24
194.107.230.0/23
194.110.2.0/23
194.150.104.0-194.150.106.255
IPv6:
2001:67c:2f2c::/48
Signature Algorithm: sha256WithRSAEncryption
37:a0:1f:97:a6:1e:50:91:81:45:46:f4:d6:5e:3b:d7:11:e6:
9f:2b:77:8f:58:b1:78:ff:40:cb:99:07:c9:b4:48:04:79:be:
a6:c1:8c:f5:ca:d4:d4:17:50:05:90:db:87:94:d4:fa:24:96:
6d:60:07:a2:21:32:ad:1d:b6:37:0f:0e:2f:67:19:6a:a7:2f:
20:76:2b:e8:5e:aa:63:b5:ef:ab:ee:5c:b0:84:c8:8a:67:7b:
90:69:f1:41:ef:49:26:bc:f9:9e:04:94:cd:f3:17:52:ca:af:
c0:88:23:b5:1c:5b:6b:ad:22:20:41:2d:6a:fb:7f:98:2d:23:
d8:9b:c6:07:82:00:14:e9:82:24:fe:54:4b:ea:42:2c:73:07:
7f:d4:ad:e5:32:be:b1:26:62:ae:e0:d6:63:cc:4b:e6:29:28:
8f:0c:2c:55:e6:31:65:5b:6c:02:c5:45:58:d6:7f:6a:7a:96:
a5:e8:a1:25:16:2e:16:4b:e5:eb:46:e5:47:29:30:87:07:34:
13:d1:18:ee:9b:16:cf:c2:52:c2:96:f0:49:f6:93:81:0b:fa:
f0:b1:e3:94:4c:0c:82:f6:a6:ab:cc:68:fc:f7:3f:02:31:92:
cd:48:4d:b1:94:33:bc:0d:7e:f5:3b:df:ad:d7:82:32:25:9f:
5f:2a:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:04 2026 by rpki-client