Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/jj2LNW8T8GKo9pph6SxqykixHUc.roa
File: jj2LNW8T8GKo9pph6SxqykixHUc.roa (raw, json)
Hash identifier: OfHZuuc0mZSA8QR6HTehCLqajIIAp9QjksfzeYwDYvY=
Subject key identifier: 8E:3D:8B:35:6F:13:F0:62:A8:F6:9A:61:E9:2C:6A:CA:48:B1:1D:47
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019EA233976B780E5E58A542D8DCBF74718F
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/jj2LNW8T8GKo9pph6SxqykixHUc.roa
Signing time: Sun 07 Jun 2026 13:09:10 +0000
ROA not before: Sun 07 Jun 2026 13:09:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 89.185.86.0/24 maxlen: 24
89.185.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a2:33:97:6b:78:0e:5e:58:a5:42:d8:dc:bf:74:71:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 7 13:09:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e3d8b356f13f062a8f69a61e92c6aca48b11d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0a:a7:43:52:c7:ec:1c:f2:07:f7:a0:78:8b:
c7:b6:86:40:e2:ea:98:3f:c7:02:49:6a:5b:c7:f0:
c1:22:ae:c7:cf:b9:a9:76:f9:68:3d:c7:8e:43:6f:
10:d1:6b:9b:27:38:93:18:be:4f:ca:d1:b7:06:c6:
d9:59:de:97:55:12:2a:cd:8c:ef:f1:24:cd:2b:8c:
7c:ae:e4:58:3f:a6:21:97:2a:41:ea:ae:70:fa:8a:
02:2e:15:83:4e:76:4a:27:2c:f1:54:09:af:24:09:
d1:5e:07:b8:bf:93:23:88:ba:e4:0d:14:8f:9d:f5:
75:36:8b:cf:d3:16:81:f3:20:3a:ac:3f:2a:41:2d:
d1:77:72:a9:dd:06:05:3f:fd:e8:08:7c:5f:b2:01:
03:d7:50:9e:fa:ac:a0:f4:3c:47:c3:48:4f:23:9a:
b5:af:88:3b:e6:13:39:bc:f0:40:e5:9c:c7:b6:47:
f1:93:8a:a0:8f:1d:a1:58:ef:78:bc:f3:09:5a:f5:
2f:f9:24:c9:a2:f9:6f:ea:a6:90:34:2b:59:ea:fd:
5c:33:51:8c:bb:70:c0:2d:16:3e:59:a9:18:5a:38:
1c:ab:ae:ad:f4:03:fd:83:f2:4c:37:63:44:aa:b8:
1c:b7:13:4e:af:c1:3c:b8:6e:0e:49:d5:42:5d:4d:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:8B:35:6F:13:F0:62:A8:F6:9A:61:E9:2C:6A:CA:48:B1:1D:47
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/jj2LNW8T8GKo9pph6SxqykixHUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.86.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:ec:4f:e2:09:3d:a1:ca:a5:93:51:44:3d:9e:1e:08:b5:66:
66:51:98:ae:a0:44:02:ea:de:d1:30:2e:15:fb:ab:dc:cd:f6:
49:6f:2c:b1:13:5d:63:bb:18:b0:f3:97:39:14:54:07:99:93:
f2:7f:8a:e0:11:bb:a1:d7:d6:91:7b:d4:12:cc:43:14:d6:9e:
bb:df:7b:6a:45:bf:95:25:76:08:85:db:46:5b:49:63:c9:8d:
c9:8a:cb:1c:a2:93:1c:d1:d1:62:10:ce:ee:9c:b8:f4:6e:f5:
57:a0:76:18:f1:a0:ee:d8:fa:36:52:e7:e6:82:df:b0:fa:31:
d0:57:29:c4:18:0b:1a:1b:8b:9a:3e:e5:39:1c:c3:fa:ae:3c:
14:93:97:41:44:1e:2b:7b:2b:58:db:81:e0:27:4c:4f:6f:5d:
69:d9:79:f9:ef:55:03:fa:b2:2a:1c:8d:09:d6:e0:36:c8:44:
4a:ac:d9:e2:3c:5c:e9:a3:80:f7:ba:01:b7:ed:e3:d2:87:f6:
48:93:73:a6:90:f7:5f:38:dc:d0:19:d3:8f:56:9a:99:1c:38:
7e:2c:11:78:ff:f5:d2:5f:e4:39:23:de:0c:54:e9:08:51:b2:
7a:86:d7:09:e5:48:13:0a:7f:6e:29:2b:1c:e8:ae:85:92:8d:
e8:7f:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:16 2026 by rpki-client