Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rTjtK4kd5FTfdJFJSUArFI8MS8Q.roa
File: rTjtK4kd5FTfdJFJSUArFI8MS8Q.roa (raw, json)
Hash identifier: Un76IkUhsZ/KMC4lE24h6KaJekiyoVD23z4hKrGSH4s=
Subject key identifier: AD:38:ED:2B:89:1D:E4:54:DF:74:91:49:49:40:2B:14:8F:0C:4B:C4
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019D4929BFC04767775A4E4F414F89A208F5
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rTjtK4kd5FTfdJFJSUArFI8MS8Q.roa
Signing time: Wed 01 Apr 2026 13:09:26 +0000
ROA not before: Wed 01 Apr 2026 13:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 89.23.96.0/24 maxlen: 24
89.23.97.0/24 maxlen: 24
89.23.98.0/24 maxlen: 24
89.23.99.0/24 maxlen: 24
89.23.100.0/24 maxlen: 24
89.23.101.0/24 maxlen: 24
89.23.102.0/24 maxlen: 24
89.23.112.0/24 maxlen: 24
89.23.115.0/24 maxlen: 24
89.23.116.0/24 maxlen: 24
89.23.117.0/24 maxlen: 24
89.23.118.0/24 maxlen: 24
185.39.206.0/24 maxlen: 24
212.67.17.0/24 maxlen: 24
2a09:e5c0::/29 maxlen: 29
2a0e:d00::/29 maxlen: 29
2a13:1340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:29:bf:c0:47:67:77:5a:4e:4f:41:4f:89:a2:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 1 13:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad38ed2b891de454df74914949402b148f0c4bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:f3:bf:59:85:33:2a:0c:b5:34:b7:2a:ec:
42:1d:4a:b4:72:8a:d5:5c:c9:2e:67:78:1e:6c:7c:
3e:41:e3:d9:ae:1c:40:1e:a9:16:06:cf:e0:bc:51:
be:60:51:76:cc:fd:59:f6:95:7e:56:e8:69:54:f3:
1e:31:17:5e:fb:a5:96:21:56:9b:03:77:e0:10:78:
f5:86:67:06:3d:33:f7:c5:3c:04:fe:ed:14:b4:f1:
9e:1f:b2:66:98:ae:0b:6a:1d:e1:ec:5c:b6:17:2e:
56:97:c6:d7:51:d9:fb:bb:f8:ed:05:58:dc:9c:a9:
82:82:68:0c:e9:01:9c:54:d6:a9:6a:86:c5:1b:fb:
58:89:3b:b0:5b:1b:19:5b:95:35:de:b3:36:11:29:
7a:7a:03:f3:73:c3:ea:a3:f7:d6:c8:28:f3:a4:72:
6c:39:49:b1:98:08:56:fa:3a:57:36:e6:9d:76:db:
94:4d:c0:9f:4a:2d:c7:ef:97:95:7b:23:69:e9:be:
5a:98:48:3a:08:35:b4:07:76:c6:ad:62:55:f4:a7:
2a:25:5d:bf:29:13:36:ca:ca:dc:da:de:e7:13:6f:
91:b2:ec:3a:ab:1b:ea:df:9c:fb:7d:d3:20:8d:01:
a9:d2:4d:d3:9e:86:67:82:6d:39:91:cd:a2:9b:87:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:38:ED:2B:89:1D:E4:54:DF:74:91:49:49:40:2B:14:8F:0C:4B:C4
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rTjtK4kd5FTfdJFJSUArFI8MS8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0-89.23.102.255
89.23.112.0/24
89.23.115.0-89.23.118.255
185.39.206.0/24
212.67.17.0/24
IPv6:
2a09:e5c0::/29
2a0e:d00::/29
2a13:1340::/29
Signature Algorithm: sha256WithRSAEncryption
ba:1e:a6:d5:ef:ac:00:40:78:33:b7:03:5e:84:7b:81:9b:7d:
a5:f2:34:5c:3e:ed:b0:c2:89:b8:7b:3f:a0:05:e2:62:b3:81:
ee:39:94:12:87:e0:99:0c:e5:e7:79:24:02:e6:4d:b0:25:c6:
94:a7:3c:de:5c:96:06:05:37:a0:2c:bd:1e:24:2e:4e:7b:66:
98:4c:08:10:47:3a:dc:36:59:e4:86:05:87:66:60:3e:f0:fc:
3e:3c:20:13:60:8a:a0:4e:2d:22:03:ef:2a:8d:39:5f:a0:80:
15:14:c5:a9:39:e7:24:02:ad:56:00:73:14:02:c6:06:6d:80:
21:27:8f:86:ea:e9:53:ba:43:28:56:dc:58:4a:cc:a9:23:93:
4b:5b:cc:47:ac:90:29:8e:b1:53:0d:ee:2b:8a:26:fc:45:35:
33:4c:4d:d2:20:52:f2:59:2e:63:e3:60:dd:df:87:9d:b4:2e:
78:21:8f:6b:8b:f4:e8:e4:dc:f4:70:5e:c0:bb:ac:cf:03:bc:
20:4e:c4:19:ff:66:a9:ca:c0:9e:77:b8:7a:b7:1e:57:94:d6:
84:10:a7:49:f8:51:3d:d2:33:a8:26:f3:fc:ce:17:bc:81:d6:
6f:78:91:f1:1a:57:af:75:ac:22:56:1d:03:6a:b4:b7:d0:a7:
02:94:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:43 2026 by rpki-client