Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/iRYiuQkFuLCK5KwEx86ZTYNczsU.roa
File: iRYiuQkFuLCK5KwEx86ZTYNczsU.roa (raw, json)
Hash identifier: 418uO5Md7LuCZz0Ipk1atizaB8UB2Ry8wCAX/TsWN3U=
Subject key identifier: 89:16:22:B9:09:05:B8:B0:8A:E4:AC:04:C7:CE:99:4D:83:5C:CE:C5
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019D789677E45C252846941204C430FEACCB
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/iRYiuQkFuLCK5KwEx86ZTYNczsU.roa
Signing time: Fri 10 Apr 2026 18:10:20 +0000
ROA not before: Fri 10 Apr 2026 18:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 89.28.200.0/24 maxlen: 24
89.28.201.0/24 maxlen: 24
89.28.204.0/24 maxlen: 24
89.28.206.0/24 maxlen: 24
89.28.207.0/24 maxlen: 24
152.89.193.0/24 maxlen: 24
195.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:96:77:e4:5c:25:28:46:94:12:04:c4:30:fe:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Apr 10 18:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=891622b90905b8b08ae4ac04c7ce994d835ccec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:6c:49:8d:36:76:13:de:48:aa:22:5c:aa:
15:bc:d0:29:39:f1:12:96:f9:18:ff:73:02:e8:70:
15:a0:d3:85:4f:e3:f5:3c:69:97:ee:27:1b:95:0d:
df:c6:9f:64:aa:02:46:ab:86:23:7c:30:63:cc:fc:
b8:d3:09:e2:d7:fc:79:a1:09:7c:1b:bb:fa:24:18:
a1:73:83:f8:d3:96:2e:73:df:14:a3:36:c1:eb:90:
9b:eb:e9:f2:82:ea:94:fc:f1:80:4b:33:51:ab:b9:
d5:ae:58:9b:ae:e2:e9:1f:26:c0:9e:53:56:bf:e9:
cf:29:20:29:5b:08:74:e5:be:2c:85:ca:68:d4:14:
03:4d:77:db:76:b4:11:86:58:53:42:0f:0f:11:d9:
9a:7f:c3:3f:18:cc:19:a7:28:9d:63:ac:18:27:53:
6a:91:aa:36:3c:15:15:54:64:45:28:9b:91:13:46:
b9:99:67:aa:3f:95:ad:be:7c:f2:4a:de:14:c6:2e:
43:c1:5a:b2:88:a8:44:0c:eb:5e:79:16:5e:8d:61:
84:24:cf:e5:35:c0:4c:9b:49:af:28:cc:24:f3:dc:
4b:ba:09:d6:79:e0:7f:10:1c:17:d3:fa:71:87:1c:
57:e5:46:86:9e:3d:32:97:5b:46:3e:9e:da:52:f3:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:22:B9:09:05:B8:B0:8A:E4:AC:04:C7:CE:99:4D:83:5C:CE:C5
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/iRYiuQkFuLCK5KwEx86ZTYNczsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.200.0/23
89.28.204.0/24
89.28.206.0/23
152.89.193.0/24
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9a:83:98:cb:c5:ca:11:f5:3b:88:8c:bc:29:cd:84:4f:ac:
bf:48:e2:ae:d2:a8:fd:ae:6a:77:78:21:db:4e:54:1e:7a:64:
eb:d6:75:6b:36:e9:91:42:62:da:58:49:4c:e5:ce:fb:f6:72:
69:87:cf:89:3b:3f:c6:4f:21:5e:26:a3:51:f9:db:31:de:e3:
07:35:e3:48:f6:01:41:8b:4b:77:61:43:99:18:6e:ba:c7:58:
20:f0:4f:8f:c3:b9:f8:69:e7:3b:42:09:76:33:e2:2f:24:fb:
d6:33:12:9f:5b:d0:08:ae:46:ce:ae:68:ac:e6:9e:fb:7f:90:
dc:b9:a1:b2:97:7e:1c:26:d3:87:10:5f:c2:08:38:ce:03:f8:
37:79:fe:7d:38:fb:21:43:b2:2f:39:67:87:27:d2:a5:00:1f:
32:58:8c:43:50:2b:7d:7b:2e:78:f4:bc:12:ce:de:03:24:ea:
2f:06:84:71:0d:40:64:25:5c:a5:3a:e4:cf:26:1c:53:d7:f7:
7d:b0:3e:a2:c9:62:08:14:44:85:a3:43:4a:33:c3:53:35:91:
05:b4:d1:67:e8:7c:4d:83:da:9a:fb:7f:b8:0d:9c:c6:ae:6b:
e9:4f:13:17:a9:79:8f:70:70:e3:27:42:fd:57:45:db:cb:aa:
98:4b:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:19 2026 by rpki-client