Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/m0S48tEBv9nFzVOV38xvVb-7W24.roa
File: m0S48tEBv9nFzVOV38xvVb-7W24.roa (raw, json)
Hash identifier: kgq2gT5y50cbq7aH/NdH+FdCNYhuUI9iaSWsZs757h0=
Subject key identifier: 9B:44:B8:F2:D1:01:BF:D9:C5:CD:53:95:DF:CC:6F:55:BF:BB:5B:6E
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 019E96482165EF7B30EEF252C9CE322C02AB
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/m0S48tEBv9nFzVOV38xvVb-7W24.roa
Signing time: Fri 05 Jun 2026 05:36:10 +0000
ROA not before: Fri 05 Jun 2026 05:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 81.90.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:96:48:21:65:ef:7b:30:ee:f2:52:c9:ce:32:2c:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Jun 5 05:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b44b8f2d101bfd9c5cd5395dfcc6f55bfbb5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:f7:08:47:16:3b:67:26:a9:f4:2f:1d:83:
81:7d:d9:f8:20:f3:a9:28:a4:d3:d9:e1:86:82:f1:
c4:5a:93:75:cc:2c:f2:48:11:71:b7:dc:25:e8:8b:
ed:40:80:80:60:74:04:b0:74:8f:d6:67:bb:b8:3e:
e3:13:95:c0:64:29:dd:3d:7b:fb:83:64:de:2d:5d:
e4:ac:5f:dc:93:47:b4:0b:5e:5d:35:e9:94:50:ff:
ba:8a:19:7e:92:18:32:90:29:47:71:34:e5:2a:09:
e1:be:1e:8a:1f:f2:e6:93:2a:b1:d6:e2:ef:67:63:
3b:4c:93:09:80:f2:32:6a:82:76:ab:4f:a3:4b:c1:
c5:18:24:0b:8c:7a:75:d5:87:bf:9a:e5:24:7f:f1:
34:79:17:08:4b:89:a6:0d:16:8c:eb:84:62:66:3f:
00:f3:ad:eb:b1:35:8b:b5:72:9a:a3:cf:cc:2a:fe:
9a:98:50:9b:32:ea:09:a6:29:ae:c8:20:f9:01:3b:
25:c4:4c:10:79:6c:91:ab:ca:08:32:b0:32:fe:df:
e2:2e:a5:56:fe:db:af:11:76:31:5b:71:5a:61:38:
4b:3f:26:b9:47:ed:a1:54:53:ef:3d:9b:5a:cb:67:
bb:dc:1c:46:97:9e:9e:f7:61:8c:02:a1:18:97:75:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:B8:F2:D1:01:BF:D9:C5:CD:53:95:DF:CC:6F:55:BF:BB:5B:6E
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/m0S48tEBv9nFzVOV38xvVb-7W24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:60:f6:10:97:92:fd:00:ab:26:96:0d:26:5d:34:e6:16:5c:
60:34:b0:78:96:41:b3:62:18:aa:54:aa:35:29:23:19:66:15:
21:0b:89:fa:8d:44:51:29:fa:86:7e:6e:36:ce:32:9c:33:94:
1f:e3:65:e9:b5:c6:28:22:41:4b:c9:48:f5:b8:74:a6:7e:03:
2b:59:ed:de:09:b6:92:24:d0:d1:8b:fa:ad:5e:32:63:92:78:
c8:e2:c7:9a:03:07:3b:d0:b5:97:68:31:a2:36:ca:8e:a4:29:
48:e1:1c:d3:23:9e:86:75:c5:a3:82:21:f3:cf:f6:59:e9:04:
d2:59:ef:5e:02:96:16:95:29:a5:eb:fa:43:0e:21:2c:b1:f9:
23:16:0a:10:5c:d6:3c:56:6a:64:2c:99:50:80:65:88:67:f5:
cd:88:ca:96:8a:f4:b6:2a:82:97:1a:38:49:72:c1:94:f9:6a:
d9:f0:41:c5:aa:e8:ef:03:13:2a:47:44:20:28:51:34:8d:1f:
49:41:fa:15:ec:7e:a6:fb:d7:48:bd:10:2f:d7:75:b4:37:d4:
97:e6:d6:75:39:3a:b6:b3:6c:37:f4:36:3d:8f:53:72:aa:5d:
be:d0:1c:cc:bf:97:9d:99:98:c2:a9:f1:fb:61:75:3a:78:68:
73:bf:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:24:54 2026 by rpki-client