Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/a8icz_iV0I-bqil-bMRlOH1Nr5g.roa
File: a8icz_iV0I-bqil-bMRlOH1Nr5g.roa (raw, json)
Hash identifier: tNDWlSbeDLoMRL90ewXHPXUG9G9kPAmkJbfvaEeyj78=
Subject key identifier: 6B:C8:9C:CF:F8:95:D0:8F:9B:AA:29:7E:6C:C4:65:38:7D:4D:AF:98
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019F8B4F8D75D68EE12597BCF16D9C5743C4
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/a8icz_iV0I-bqil-bMRlOH1Nr5g.roa
Signing time: Wed 22 Jul 2026 19:31:14 +0000
ROA not before: Wed 22 Jul 2026 19:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:4f:8d:75:d6:8e:e1:25:97:bc:f1:6d:9c:57:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 22 19:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bc89ccff895d08f9baa297e6cc465387d4daf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:01:b3:c3:64:88:af:5f:e4:b7:ca:3f:6b:
2c:47:91:18:41:c7:5e:19:ad:5d:f9:00:d9:07:8f:
0d:63:59:77:d8:42:fb:4b:f2:b1:7e:05:18:12:41:
e0:ec:f3:95:46:e4:ff:6f:5e:8c:2a:49:2d:d3:67:
e7:6f:12:63:66:99:57:9e:f4:84:af:58:28:48:d1:
75:ad:bc:5c:56:6f:0a:49:3e:5c:d8:05:9c:af:86:
fc:4b:56:68:6d:e2:92:25:7d:dd:1a:59:24:ba:cd:
bd:90:9e:b5:e6:89:f4:dd:e7:6b:05:9a:49:8c:68:
46:56:fb:e5:93:4c:95:38:45:96:57:aa:18:09:79:
f5:4c:40:00:c6:08:1b:7d:3d:00:35:5b:3b:bf:3b:
18:15:d7:f2:7c:53:93:ac:6f:cc:b7:a3:42:b6:5c:
12:72:cd:32:dc:50:79:61:97:52:b5:71:86:96:bc:
cd:19:40:ac:1a:68:f6:f4:4c:c4:2e:d8:75:e6:89:
aa:aa:af:f3:dc:2e:a0:2f:91:8f:ee:5c:9f:71:1f:
49:f4:ee:83:f8:36:1e:6a:84:31:c0:0c:52:ed:78:
18:fe:1d:7d:bd:a3:c0:c5:fd:ba:15:76:ce:04:43:
c0:4e:6c:79:f7:a1:8c:13:a3:de:10:57:4b:75:ae:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:9C:CF:F8:95:D0:8F:9B:AA:29:7E:6C:C4:65:38:7D:4D:AF:98
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/a8icz_iV0I-bqil-bMRlOH1Nr5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0-89.44.242.255
185.3.200.0/24
Signature Algorithm: sha256WithRSAEncryption
77:47:86:39:bb:61:00:73:e7:42:c0:2d:2e:3f:a6:dd:9e:29:
dc:e9:9e:f7:3a:43:da:48:7c:9d:cd:8c:91:68:23:34:e2:81:
25:10:22:dd:49:c3:82:c3:a7:9a:d4:d6:66:ad:bd:b8:40:41:
ac:2d:6d:84:f6:ff:69:22:94:2b:97:e7:1e:1d:bb:2c:d1:9d:
ea:76:41:1a:b4:0c:2d:0f:60:b3:d4:7a:7f:4d:16:04:24:3b:
d9:7a:86:83:9a:5e:ba:ce:d6:b1:76:19:25:cc:84:da:e8:df:
f0:15:7c:16:92:40:37:47:4f:84:8e:ef:f6:82:52:5f:97:43:
e3:f6:4f:cf:bd:fa:db:dc:cc:8b:a0:81:94:5f:6c:15:01:d7:
1f:c7:5b:79:58:d3:69:54:bb:5c:26:70:8f:56:4f:81:c5:76:
d0:f7:95:56:4f:82:13:ef:bc:92:85:23:4e:8a:a3:56:2a:dd:
8e:d4:23:d9:9a:e2:fb:44:88:46:fc:84:45:5b:52:d1:10:89:
97:28:59:8a:e3:b0:dc:3e:96:3c:ba:b3:00:a5:5c:33:a4:15:
90:ba:fd:0d:a2:cd:8a:11:49:4e:ba:7d:c8:b9:c5:7d:20:83:
ee:60:69:18:37:9c:88:a0:53:48:87:ad:0c:d9:cb:9f:c4:99:
6b:0a:b0:98
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ+LT4111o7hJZe88W2cV0PEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwNzIyMTkzMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmM4OWNjZmY4OTVkMDhmOWJhYTI5N2U2Y2M0NjUzODdkNGRhZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z0Bs8NkiK9f5LfKP2ssR5EYQcde
Ga1d+QDZB48NY1l32EL7S/KxfgUYEkHg7POVRuT/b16MKkkt02fnbxJjZplXnvSE
r1goSNF1rbxcVm8KST5c2AWcr4b8S1ZobeKSJX3dGlkkus29kJ615on03edrBZpJ
jGhGVvvlk0yVOEWWV6oYCXn1TEAAxggbfT0ANVs7vzsYFdfyfFOTrG/Mt6NCtlwS
cs0y3FB5YZdStXGGlrzNGUCsGmj29EzELth15omqqq/z3C6gL5GP7lyfcR9J9O6D
+DYeaoQxwAxS7XgY/h19vaPAxf26FXbOBEPATmx596GME6PeEFdLda4sbwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGvInM/4ldCPm6opfmzEZTh9Ta+YMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvYThpY3pfaVYwSS1icWlsLWJNUmxPSDFOcjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARZLPAD
BABZLPIDBAC5A8gwDQYJKoZIhvcNAQELBQADggEBAHdHhjm7YQBz50LALS4/pt2e
Kdzpnvc6Q9pIfJ3NjJFoIzTigSUQIt1Jw4LDp5rU1matvbhAQawtbYT2/2kilCuX
5x4duyzRnep2QRq0DC0PYLPUen9NFgQkO9l6hoOaXrrO1rF2GSXMhNro3/AVfBaS
QDdHT4SO7/aCUl+XQ+P2T8+9+tvczIuggZRfbBUB1x/HW3lY02lUu1wmcI9WT4HF
dtD3lVZPghPvvJKFI06Ko1Yq3Y7UI9ma4vtEiEb8hEVbUtEQiZcoWYrjsNw+ljy6
swClXDOkFZC6/Q2izYoRSU66fci5xX0gg+5gaRg3nIigU0iHrQzZy5/EmWsKsJg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:51 2026 by rpki-client