Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ibirQ48q5Aks70oNhLQtQcsKrow.roa
File: ibirQ48q5Aks70oNhLQtQcsKrow.roa (raw, json)
Hash identifier: yEMvVkvbKZ7AeXWGjDBDghK37K1B4NtqcFVP4C+umKA=
Subject key identifier: 89:B8:AB:43:8F:2A:E4:09:2C:EF:4A:0D:84:B4:2D:41:CB:0A:AE:8C
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A18C8B7095D0726BA1D2E6A68294B78E45
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ibirQ48q5Aks70oNhLQtQcsKrow.roa
Signing time: Fri 30 Oct 2026 11:21:50 +0000
ROA not before: Fri 30 Oct 2026 11:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60742
IP address blocks: 86.54.4.0/24 maxlen: 24
2a14:6780:d::/48 maxlen: 48
2a14:6787::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:8b:70:95:d0:72:6b:a1:d2:e6:a6:82:94:b7:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 30 11:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89b8ab438f2ae4092cef4a0d84b42d41cb0aae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:70:1c:a4:76:55:3f:37:78:d2:4b:ea:50:
cb:19:73:d6:a3:71:17:4f:f6:68:b6:f8:e2:07:c9:
30:a5:1c:a3:d5:59:c4:64:e4:fa:9d:0a:01:64:87:
d5:f1:aa:d9:c2:b7:37:47:da:8c:5e:0b:1c:fb:3c:
d6:b7:72:5e:fd:a8:d6:65:a9:5c:a2:24:79:7c:0e:
f2:72:d6:76:c9:79:fe:5b:a0:09:ee:51:05:7a:c6:
c9:14:ef:b3:11:4e:8c:2c:d3:b1:fc:3d:73:64:aa:
dc:20:bc:ea:74:58:ba:93:b1:08:35:f0:7a:e5:55:
ae:11:e9:10:8c:c9:67:05:2b:49:f0:7d:63:7d:45:
3e:ec:62:b3:71:fc:cc:b4:90:d5:94:e6:7f:9c:b2:
b0:85:04:a8:b5:1d:87:f4:1d:92:cf:a8:ad:0e:c5:
04:7a:38:5c:2c:9d:f0:a0:51:d4:66:bb:0c:9f:0e:
97:bc:7a:f2:35:c2:33:17:01:2e:33:f5:dd:e3:96:
60:ad:7a:64:33:34:0f:80:52:34:1e:fc:46:b8:30:
5e:86:0d:6a:43:3c:65:26:cb:e4:65:73:3a:8a:92:
ef:35:46:c0:4c:71:3d:44:9f:1e:01:cf:b0:60:27:
bf:b8:f7:25:24:ad:bc:57:01:6d:3e:ce:f6:1d:da:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:AB:43:8F:2A:E4:09:2C:EF:4A:0D:84:B4:2D:41:CB:0A:AE:8C
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ibirQ48q5Aks70oNhLQtQcsKrow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.4.0/24
IPv6:
2a14:6780:d::/48
2a14:6787::/32
Signature Algorithm: sha256WithRSAEncryption
00:aa:b9:34:3c:d4:71:13:1f:f2:79:10:05:7c:aa:27:43:b5:
ba:81:60:2f:e3:ca:b5:1d:79:c2:94:15:cf:ac:dd:69:72:2d:
c1:a7:2a:03:5f:4b:68:49:72:fa:36:20:35:e0:be:e7:2f:16:
fe:a9:13:79:c4:7c:cf:51:a8:52:b8:2a:19:64:20:5e:98:18:
c0:c3:41:a0:a4:e9:64:77:36:bc:6a:f9:17:5a:86:31:a2:b1:
1e:6d:32:c1:f1:d8:30:12:62:e3:35:6d:b4:3c:76:68:9c:68:
d2:40:c9:fa:db:ad:b6:5b:20:b0:88:e8:46:14:80:7f:e4:71:
4e:e5:ba:2e:7c:22:91:fd:e7:ba:b9:4c:49:8f:5d:d6:e6:9e:
02:e2:19:a0:d5:56:74:7f:8e:b9:f5:9b:f7:9d:56:9e:08:a7:
36:ba:66:ee:df:10:5a:88:a4:72:9e:53:0f:97:29:8d:a4:b8:
e7:9e:e6:37:56:74:38:fc:d7:b4:9c:b5:dd:ff:e8:9f:66:7f:
5d:44:4b:02:f8:a4:d0:e3:b6:f3:9a:45:b0:a5:8d:de:18:f2:
6a:4d:10:bf:22:5c:50:be:1c:26:f3:4c:62:a5:8b:e2:dd:bb:
74:b9:cd:a7:27:e0:19:32:2f:93:13:e4:c3:07:57:f6:a6:a3:
eb:b2:62:62
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaGMi3CV0HJrodLmpoKUt45FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYxMDMwMTEyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWI4YWI0MzhmMmFlNDA5MmNlZjRhMGQ4NGI0MmQ0MWNiMGFhZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W5wHKR2VT83eNJL6lDLGXPWo3EX
T/ZotvjiB8kwpRyj1VnEZOT6nQoBZIfV8arZwrc3R9qMXgsc+zzWt3Je/ajWZalc
oiR5fA7yctZ2yXn+W6AJ7lEFesbJFO+zEU6MLNOx/D1zZKrcILzqdFi6k7EINfB6
5VWuEekQjMlnBStJ8H1jfUU+7GKzcfzMtJDVlOZ/nLKwhQSotR2H9B2Sz6itDsUE
ejhcLJ3woFHUZrsMnw6XvHryNcIzFwEuM/Xd45ZgrXpkMzQPgFI0HvxGuDBehg1q
QzxlJsvkZXM6ipLvNUbATHE9RJ8eAc+wYCe/uPclJK28VwFtPs72HdpXpwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIm4q0OPKuQJLO9KDYS0LUHLCq6MMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvaWJpclE0OHE1QWtzNzBvTmhMUXRRY3NLcm93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAVjYEMBYE
AgACMBADBwAqFGeAAA0DBQAqFGeHMA0GCSqGSIb3DQEBCwUAA4IBAQAAqrk0PNRx
Ex/yeRAFfKonQ7W6gWAv48q1HXnClBXPrN1pci3BpyoDX0toSXL6NiA14L7nLxb+
qRN5xHzPUahSuCoZZCBemBjAw0GgpOlkdza8avkXWoYxorEebTLB8dgwEmLjNW20
PHZonGjSQMn62622WyCwiOhGFIB/5HFO5boufCKR/ee6uUxJj13W5p4C4hmg1VZ0
f4659Zv3nVaeCKc2umbu3xBaiKRynlMPlymNpLjnnuY3VnQ4/Ne0nLXd/+ifZn9d
REsC+KTQ47bzmkWwpY3eGPJqTRC/IlxQvhwm80xipYvi3bt0uc2nJ+AZMi+TE+TD
B1f2pqPrsmJi
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:23 2026 by rpki-client