Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/SEZQmbv2qJkebSpHZPT4c7zhcRs.roa
File: SEZQmbv2qJkebSpHZPT4c7zhcRs.roa (raw, json)
Hash identifier: SS5bbh4u644eWUs+iuiXjalnDYjKL6banVozNWPi5n4=
Subject key identifier: 48:46:50:99:BB:F6:A8:99:1E:6D:2A:47:64:F4:F8:73:BC:E1:71:1B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019FA7DDA7FDD3F070FDEAE1A5C7C44CB3DC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/SEZQmbv2qJkebSpHZPT4c7zhcRs.roa
Signing time: Tue 28 Jul 2026 08:35:49 +0000
ROA not before: Tue 28 Jul 2026 08:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56619
IP address blocks: 79.98.249.0/24 maxlen: 24
79.98.252.0/24 maxlen: 24
79.98.253.0/24 maxlen: 24
90.188.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:dd:a7:fd:d3:f0:70:fd:ea:e1:a5:c7:c4:4c:b3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 28 08:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48465099bbf6a8991e6d2a4764f4f873bce1711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:4c:25:2b:27:90:1f:06:15:7e:43:30:f3:
97:6e:3b:6b:c2:c5:c4:f9:df:29:c3:91:76:59:3a:
da:fe:00:44:fc:90:0d:01:f2:dd:7a:7d:31:83:71:
b6:64:56:29:f9:31:3f:6b:b8:99:68:7a:71:9a:9d:
4f:c5:e3:fc:66:50:22:ca:b5:52:6b:ef:f8:a7:79:
07:64:b2:2f:70:df:fc:4a:24:3d:f8:62:01:16:8a:
53:50:01:65:a3:59:0a:0a:09:3e:a6:e8:ea:f0:ed:
e2:6c:c7:71:e9:9a:75:aa:86:d4:12:c0:1e:06:4b:
9f:6d:c0:7e:07:87:5d:a7:55:04:4c:68:3e:37:96:
27:85:29:5a:42:06:23:5e:10:e2:cf:d7:37:71:d4:
98:ef:7a:85:13:b2:81:14:1b:a6:ad:cc:ea:83:83:
6e:08:f9:1c:f3:8e:d2:3c:fa:72:d6:23:1e:4b:0b:
e1:a7:69:13:85:01:98:bd:1f:f1:c0:74:78:72:63:
ee:7c:df:29:28:be:f7:82:23:d6:1e:3e:8b:e1:f7:
ea:51:5b:d0:d2:b7:9f:e5:cd:21:81:f8:88:3c:80:
ab:c6:9b:ed:0b:c4:3b:bf:93:57:c9:45:51:36:8b:
70:6b:56:e9:aa:36:d4:10:9d:32:21:d4:a5:4e:bd:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:50:99:BB:F6:A8:99:1E:6D:2A:47:64:F4:F8:73:BC:E1:71:1B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/SEZQmbv2qJkebSpHZPT4c7zhcRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.249.0/24
79.98.252.0/23
90.188.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:99:2f:d0:e9:4f:b3:f9:df:74:2d:4d:5c:87:4f:b5:90:86:
34:a9:2d:95:06:af:ec:aa:9c:fe:2f:38:c8:58:6d:2f:ed:0d:
df:09:f9:49:83:12:d9:e1:e7:fa:78:00:9c:58:31:38:be:77:
ca:c2:85:1b:65:17:0a:e3:82:c3:7c:22:0d:cb:d0:67:d5:79:
d7:66:a7:f3:33:79:1d:3b:3f:df:db:7a:09:78:ab:9d:58:9b:
0e:f8:02:2b:d8:b6:12:53:da:43:53:dd:1c:70:1a:5d:fb:c8:
d6:b4:c0:32:69:54:78:07:f2:62:24:c1:7c:5d:64:7a:83:ab:
88:e2:6b:35:a5:c6:96:ca:9e:b3:de:e2:7d:95:d0:76:bd:31:
98:c6:e7:cd:6a:6a:72:15:ed:f5:d6:9d:5d:20:30:ec:58:77:
32:57:5b:b6:13:82:02:a1:f3:8f:3c:99:9b:c8:7c:d1:eb:2a:
10:ae:44:b9:cd:60:b9:4d:52:d7:f0:21:05:0d:2f:b4:3d:73:
8c:66:d8:e5:f8:f6:8d:6b:77:4e:e0:e5:22:50:4b:ab:f3:4b:
71:d2:28:e4:a9:3e:c0:5e:c1:8e:34:78:21:19:c2:32:f5:bb:
ab:44:8a:1b:78:f8:4f:f4:e2:95:58:43:df:ab:e8:d2:0a:7c:
08:57:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:15:48 2026 by rpki-client