Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/acgv97YNnbbDPyBz44KpDWdpOkQ.roa
File: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (raw, json)
Hash identifier: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=
Subject key identifier: 69:C8:2F:F7:B6:0D:9D:B6:C3:3F:20:73:E3:82:A9:0D:67:69:3A:44
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019EA6ECFF3CB5FAAB28F57E1E01AD8CA616
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/acgv97YNnbbDPyBz44KpDWdpOkQ.roa
Signing time: Mon 08 Jun 2026 11:10:10 +0000
ROA not before: Mon 08 Jun 2026 11:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213998
IP address blocks: 89.28.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:ec:ff:3c:b5:fa:ab:28:f5:7e:1e:01:ad:8c:a6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 8 11:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c82ff7b60d9db6c33f2073e382a90d67693a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:bc:15:db:0a:4d:64:05:49:4c:68:38:73:
cd:71:4d:51:59:3c:92:49:9d:f3:25:e8:e1:4b:d1:
44:bf:ac:46:1a:50:89:d9:b7:26:96:71:5b:51:32:
c2:2b:2a:94:ca:8d:10:c3:0d:1e:18:62:3d:d8:24:
7c:04:57:b3:e3:aa:93:cf:28:d1:8a:9e:cc:d1:bf:
db:a4:52:e5:9c:e2:dd:02:b9:4e:02:50:1b:ba:19:
7c:5c:e0:05:58:ee:7a:62:74:95:c7:79:d5:48:9c:
73:c6:a0:c4:e2:bc:c9:78:5b:e6:32:e9:1b:b7:0d:
fb:2d:ee:ed:a4:7f:80:d3:fc:be:f4:b2:57:9d:87:
12:2c:52:79:59:df:09:a5:4a:d4:ff:c6:47:42:ed:
ba:1e:21:a1:93:93:30:9a:cf:cf:24:03:e6:f4:96:
91:4b:ac:b2:15:42:a6:8b:e6:95:ee:9a:16:68:04:
7a:4f:32:d8:94:45:55:4d:b5:70:8d:5c:81:3c:00:
e4:ef:89:bb:27:42:10:6f:4d:05:b3:52:61:9e:bf:
e1:dd:75:26:4b:3d:3c:ca:9e:2d:fe:bd:33:f4:a7:
89:73:a3:14:4e:74:a1:34:14:fb:f8:5c:30:24:f2:
8c:fc:72:4c:e2:58:70:43:23:f2:0d:99:0c:67:4e:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:2F:F7:B6:0D:9D:B6:C3:3F:20:73:E3:82:A9:0D:67:69:3A:44
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/acgv97YNnbbDPyBz44KpDWdpOkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:43:a8:9f:27:56:64:37:88:22:e1:c6:c1:81:c7:1f:88:73:
15:da:40:2e:98:1e:fc:b6:e8:5c:51:d1:ec:a7:85:ce:6f:4d:
49:5c:d2:7f:91:38:71:6e:84:bc:1e:82:fd:d0:77:21:17:c4:
12:9e:69:5e:ed:c0:f3:1e:16:ca:16:3d:a4:fc:07:9a:65:7a:
9b:89:03:13:67:22:af:d7:4e:dd:11:eb:1d:aa:86:95:aa:51:
71:4c:75:02:5f:48:39:14:de:ee:2a:b8:4c:16:84:17:9a:77:
00:41:04:cb:6c:36:34:70:cc:5c:66:b8:8b:76:29:ee:12:95:
16:43:2b:c2:3d:fa:1f:c8:d5:5b:af:f8:d2:d7:d9:16:45:48:
ee:07:48:2e:da:55:f3:3a:2b:89:1d:72:fd:9f:5f:54:63:15:
e1:de:bc:45:64:7e:f9:d4:7b:3e:31:c6:d2:9d:4d:78:c0:39:
e5:fb:89:c7:ca:a7:2d:43:19:45:5a:40:ff:30:1e:e9:fa:64:
51:f0:09:f9:52:e7:06:73:de:64:c0:6a:7d:68:2f:04:68:34:
02:9d:6d:77:33:c8:96:85:ce:7b:5e:2b:5a:f4:2c:b6:24:74:
20:cc:5f:44:27:d4:fb:1a:ae:24:7e:bf:e8:90:c1:31:14:d9:
5f:bd:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:08 2026 by rpki-client