Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/0rumUG4jYFsfWMtRhti6iBnZ3fY.roa
File: 0rumUG4jYFsfWMtRhti6iBnZ3fY.roa (raw, json)
Hash identifier: N2ogtx0+r/tWGR84/w/lkiXqrJzdykXN5pUyzEn8FeA=
Subject key identifier: D2:BB:A6:50:6E:23:60:5B:1F:58:CB:51:86:D8:BA:88:19:D9:DD:F6
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A1CEFBA4AC9DEF8967D81AA8ABE6100EB1
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/0rumUG4jYFsfWMtRhti6iBnZ3fY.roa
Signing time: Thu 12 Nov 2026 08:59:20 +0000
ROA not before: Thu 12 Nov 2026 08:59:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54801
IP address blocks: 189.13.52.0/24 maxlen: 24
189.13.192.0/20 maxlen: 24
189.13.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:fb:a4:ac:9d:ef:89:67:d8:1a:a8:ab:e6:10:0e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Nov 12 08:59:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2bba6506e23605b1f58cb5186d8ba8819d9ddf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:1c:fe:3f:9a:da:21:a9:11:24:af:88:df:
18:05:3e:01:1b:92:84:99:3f:2a:00:a8:19:89:9e:
8e:f2:22:af:86:a3:59:6b:b9:2d:2b:52:33:03:8c:
57:c4:30:53:02:4b:e8:78:3b:49:13:48:0d:53:83:
cf:5a:a2:bf:a8:a2:6d:73:c2:dc:1f:e4:94:7c:66:
66:4e:17:03:72:21:38:82:e1:67:1b:a1:a6:a8:9e:
1c:35:d1:d9:59:72:35:9c:c9:33:f3:eb:d5:b5:17:
13:c1:16:1b:c1:df:d9:ce:ee:0e:60:9b:5c:2f:86:
ca:66:a5:e3:2b:78:32:35:46:13:cb:65:73:28:7c:
11:f7:3b:58:db:3b:30:eb:89:d3:39:5a:a3:66:67:
2b:7d:8a:6c:ae:6e:d6:fa:09:63:7f:c4:39:b1:a5:
c9:f4:2b:62:33:17:34:8a:5d:05:4d:de:d5:ae:ce:
f9:d3:a3:19:36:c8:0d:20:14:34:75:5d:f9:4c:f7:
9d:6e:ed:80:63:ef:fd:90:59:67:20:d8:31:e4:48:
23:bc:26:70:ec:e7:f8:bf:2c:f9:5d:d0:c4:da:2e:
50:1c:24:45:e4:59:d0:cf:bd:18:76:02:8a:c9:4b:
53:80:d3:d5:0d:c0:eb:26:bf:3e:a3:66:ce:4f:57:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:A6:50:6E:23:60:5B:1F:58:CB:51:86:D8:BA:88:19:D9:DD:F6
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/0rumUG4jYFsfWMtRhti6iBnZ3fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.52.0/24
189.13.192.0/19
Signature Algorithm: sha256WithRSAEncryption
05:59:f9:c0:06:47:a7:d6:d5:82:22:8a:bd:b1:c0:0e:0b:41:
0c:e3:6e:39:1a:be:f6:4d:28:6e:1e:e4:18:50:33:ce:a3:68:
a3:ef:0b:4a:5b:de:3c:ad:6c:40:f8:ee:41:ea:68:fa:62:d5:
af:ab:fb:14:8d:a9:05:da:52:36:20:5d:5e:55:d7:68:3e:67:
1e:0d:b9:e7:44:da:2e:01:41:ce:1a:63:79:d6:27:6f:45:eb:
05:bc:40:5d:c5:57:37:6f:82:52:47:c6:af:fd:43:4e:86:51:
3b:a8:54:8f:d9:5e:ec:18:61:01:28:fe:4e:4d:45:c7:08:1c:
56:b7:ce:b7:58:f4:df:d9:05:9b:96:78:2e:1e:07:c1:e1:9d:
ef:46:de:f9:bd:30:65:c9:51:6c:d5:10:0f:5e:eb:0b:e6:23:
28:1a:77:23:9b:9d:6f:aa:10:9c:49:60:60:22:f1:59:ab:ac:
19:bc:86:9a:73:a4:0f:30:7b:31:25:c3:59:a3:33:8d:92:ec:
0d:f3:e2:81:e1:23:06:89:66:a9:0a:45:f7:17:7e:6b:60:77:
70:94:da:b6:7a:44:89:af:78:00:44:80:1d:76:83:c4:38:d5:
a5:c3:dc:99:f6:87:89:01:03:62:03:99:b6:78:74:6c:12:f1:
3f:b0:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:07:34 2026 by rpki-client