Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/C1n3UPGE5EB0uyIS_vS1FQvWdTE.roa
File: C1n3UPGE5EB0uyIS_vS1FQvWdTE.roa (raw, json)
Hash identifier: c3UxVvvTqyAS1z/maaAMv3FhjUnQX6aILRuaQdJ9+dA=
Subject key identifier: 0B:59:F7:50:F1:84:E4:40:74:BB:22:12:FE:F4:B5:15:0B:D6:75:31
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019C75E2F262477A596810D8E80391DC9C43
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/C1n3UPGE5EB0uyIS_vS1FQvWdTE.roa
Signing time: Thu 19 Feb 2026 12:32:13 +0000
ROA not before: Thu 19 Feb 2026 12:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212706
IP address blocks: 89.23.105.0/24 maxlen: 24
89.23.106.0/24 maxlen: 24
89.23.110.0/24 maxlen: 24
185.159.128.0/24 maxlen: 24
185.159.129.0/24 maxlen: 24
185.159.130.0/24 maxlen: 24
185.159.131.0/24 maxlen: 24
185.228.232.0/24 maxlen: 24
185.228.233.0/24 maxlen: 24
185.228.234.0/24 maxlen: 24
185.230.190.0/24 maxlen: 24
185.230.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:e2:f2:62:47:7a:59:68:10:d8:e8:03:91:dc:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 19 12:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b59f750f184e44074bb2212fef4b5150bd67531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:4d:03:0d:f5:d6:d7:40:48:0f:17:48:41:
43:20:4f:85:6d:a8:30:60:13:0b:15:a5:19:9f:ab:
c7:2f:2c:aa:c6:0f:19:75:02:e1:db:2e:4b:00:33:
6e:f4:06:b9:4e:e0:85:2e:89:42:9b:89:59:32:3c:
3d:c6:00:10:c0:79:a6:f4:77:90:f1:cc:92:ed:45:
8c:ed:7a:46:bd:0c:7e:75:0a:f1:8e:0a:ef:fa:f2:
d1:93:4b:ab:58:b6:84:b0:06:6b:c9:af:20:f2:46:
43:60:a8:7c:67:56:c2:a2:b8:44:53:bd:c6:05:58:
e1:a6:a6:75:f7:58:63:7f:5e:1f:6d:a6:12:44:6f:
d9:8f:58:af:e8:ac:f8:8c:fd:a1:fa:44:3f:9e:38:
51:92:b6:ec:f9:9d:dc:4f:02:1f:1a:44:6f:b8:5b:
13:47:ce:69:8b:0f:3b:6f:06:54:02:23:c4:cf:c7:
c5:ac:ce:69:47:55:ef:81:77:6d:25:68:db:58:82:
00:3f:29:19:bd:f0:7c:e5:01:78:7b:73:d1:80:d8:
67:fc:4f:11:dd:ea:0a:80:91:a5:d1:35:9b:5b:08:
00:81:32:d0:99:08:58:03:9e:90:14:ff:5f:ec:a8:
1f:ba:6c:76:90:4a:ba:c4:98:d1:3e:03:55:ac:b7:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:F7:50:F1:84:E4:40:74:BB:22:12:FE:F4:B5:15:0B:D6:75:31
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/C1n3UPGE5EB0uyIS_vS1FQvWdTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.105.0-89.23.106.255
89.23.110.0/24
185.159.128.0/22
185.228.232.0-185.228.234.255
185.230.190.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:15:f5:fd:14:e7:74:fc:87:c2:1e:05:5b:67:1f:00:ed:c7:
25:1e:65:7b:d3:ba:de:69:7d:c6:bd:8e:b6:2c:9b:7a:be:10:
4a:14:73:2a:23:8d:e4:27:6d:f9:12:83:2a:0d:c4:ae:7a:83:
22:f2:6e:32:c5:b2:9c:df:3d:bc:33:4c:ff:ef:4b:d7:7e:33:
29:d1:d0:90:77:05:8a:80:12:89:6f:e3:91:52:6c:48:bd:26:
fb:88:4f:5c:49:b0:0c:24:2d:88:6b:f3:16:c1:40:56:91:18:
7e:a4:18:d7:1e:a3:4a:fb:12:bb:1d:9e:7e:70:5d:a6:4c:bc:
37:8b:b4:0a:0c:dd:47:13:b1:fb:df:3a:e5:80:bf:74:f1:d8:
53:5e:fb:59:76:88:31:0a:a5:21:70:f2:5f:38:fb:01:09:c8:
8e:e8:00:5b:7a:ee:85:0d:af:28:32:ba:b5:27:73:c1:09:38:
41:f0:83:60:0f:50:76:30:b3:8b:b0:88:5c:67:b5:80:07:74:
2c:9f:0a:b4:70:2f:be:a3:b6:13:fb:0f:ee:df:12:6d:31:5c:
3c:82:5b:62:b0:2d:bc:00:92:25:0a:37:59:f1:1a:13:05:5a:
34:13:85:57:9e:a4:81:d0:69:2d:8d:08:ad:6a:c8:e8:f3:71:
67:5c:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:41 2026 by rpki-client