Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/iDFnINnszP_3ZkKlcebeTX9AlDo.roa
File: iDFnINnszP_3ZkKlcebeTX9AlDo.roa (raw, json)
Hash identifier: 227xLaQzbSY2oYkOsVDl7aJKXGniA+XMOLsJp+vPOAE=
Subject key identifier: 88:31:67:20:D9:EC:CC:FF:F7:66:42:A5:71:E6:DE:4D:7F:40:94:3A
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01A0F6A6C2C5A3E2C09F34A8A1106418D91C
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/iDFnINnszP_3ZkKlcebeTX9AlDo.roa
Signing time: Thu 01 Oct 2026 08:48:39 +0000
ROA not before: Thu 01 Oct 2026 08:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41852
IP address blocks: 89.39.72.0/22 maxlen: 22
89.45.72.0/22 maxlen: 22
2a03:9c20:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a6:c2:c5:a3:e2:c0:9f:34:a8:a1:10:64:18:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Oct 1 08:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88316720d9ecccfff76642a571e6de4d7f40943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:7d:c7:08:bb:bf:21:eb:17:55:f3:19:21:
a9:79:65:bd:2d:9a:d5:2a:30:71:ab:a5:d3:92:45:
6b:2f:ef:cb:63:a6:2e:6d:81:b6:08:99:c5:a4:d4:
a1:70:39:6f:3b:f4:e6:83:3d:59:6d:a9:b0:f8:84:
17:e2:ee:52:9b:5c:9c:a7:9c:ac:60:40:f9:67:54:
13:45:5e:94:4e:11:bd:8c:09:b1:9a:9f:13:74:3b:
1d:28:29:2c:53:77:f9:d1:a3:4b:26:6d:f7:cb:1b:
c8:1f:52:71:71:cc:07:be:d2:96:30:14:45:31:d2:
8a:36:a4:1a:f7:f4:a8:d8:d4:23:41:6e:5e:d1:c8:
20:70:8b:9b:c7:5a:a3:db:5a:37:60:e1:be:be:40:
fa:b2:37:87:ea:bd:22:c0:dd:9a:68:35:c2:82:99:
e9:ef:48:b5:14:86:92:3b:0c:cb:04:f5:c5:e6:c8:
de:7a:31:b4:ae:85:59:48:1c:82:1f:5b:a3:ae:a2:
a0:ad:ba:b6:fb:49:02:d9:b4:d9:3b:aa:22:33:b7:
6f:e7:aa:f3:b5:d8:04:8e:a7:4d:a2:33:a0:69:a9:
2f:89:22:03:78:ae:1b:e1:45:59:d7:46:65:e1:72:
ff:d3:cc:7e:4e:70:c9:97:23:d7:10:fd:05:6b:9d:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:31:67:20:D9:EC:CC:FF:F7:66:42:A5:71:E6:DE:4D:7F:40:94:3A
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/iDFnINnszP_3ZkKlcebeTX9AlDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.72.0/22
89.45.72.0/22
IPv6:
2a03:9c20:4000::/36
Signature Algorithm: sha256WithRSAEncryption
11:40:86:6d:77:08:e4:3a:c4:f2:7a:03:ac:de:96:b9:3b:00:
b0:66:53:54:8c:7e:ab:bc:98:31:a1:93:9c:55:79:af:73:ae:
23:7c:7f:4d:6f:0f:88:cf:11:04:ca:d8:81:ad:ba:dd:7b:d0:
ef:96:07:cf:ff:ab:ef:35:a2:98:47:0b:64:f0:68:ae:78:d5:
70:af:7d:1d:c5:18:86:30:40:b7:ae:b4:95:04:c8:73:dd:63:
e5:48:f5:66:89:ac:ef:80:2b:8c:2f:ff:8a:1c:99:98:78:6a:
75:3e:5a:3e:db:6b:8e:67:8f:7e:13:97:6c:08:c3:0b:23:6d:
36:29:16:ea:f6:58:8f:a5:9a:82:90:fd:30:92:28:54:c0:d6:
b3:49:df:fa:39:0f:68:d8:57:72:e6:fd:90:de:c3:0b:1c:85:
db:28:94:50:7e:8b:93:16:d5:b7:16:b6:ab:56:73:60:a2:48:
a0:42:b4:8b:b2:29:55:64:b7:9e:35:a4:f6:d6:c5:a0:43:51:
64:bc:f2:f8:c8:c2:70:31:89:9e:01:d4:26:f3:7a:fd:19:a3:
47:6f:00:40:26:e9:0b:48:5f:4d:4e:ec:45:41:a8:2c:0e:29:
ad:5b:64:33:13:79:ef:6e:0f:41:10:dc:ca:39:b6:bf:02:ef:
38:dc:18:05
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaD2psLFo+LAnzSooRBkGNkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjYxMDAxMDg0ODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODMxNjcyMGQ5ZWNjY2ZmZjc2NjQyYTU3MWU2ZGU0ZDdmNDA5NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1t9xwi7vyHrF1XzGSGpeWW9LZrV
KjBxq6XTkkVrL+/LY6YubYG2CJnFpNShcDlvO/Tmgz1Zbamw+IQX4u5Sm1ycp5ys
YED5Z1QTRV6UThG9jAmxmp8TdDsdKCksU3f50aNLJm33yxvIH1JxccwHvtKWMBRF
MdKKNqQa9/So2NQjQW5e0cggcIubx1qj21o3YOG+vkD6sjeH6r0iwN2aaDXCgpnp
70i1FIaSOwzLBPXF5sjeejG0roVZSByCH1ujrqKgrbq2+0kC2bTZO6oiM7dv56rz
tdgEjqdNojOgaakviSIDeK4b4UVZ10Zl4XL/08x+TnDJlyPXEP0Fa50GzwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIgxZyDZ7Mz/92ZCpXHm3k1/QJQ6MB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvaURGbklObnN6UF8zWmtLbGNlYmVUWDlBbERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCWSdIAwQC
WS1IMA4EAgACMAgDBgQqA5wgQDANBgkqhkiG9w0BAQsFAAOCAQEAEUCGbXcI5DrE
8noDrN6WuTsAsGZTVIx+q7yYMaGTnFV5r3OuI3x/TW8PiM8RBMrYga263XvQ75YH
z/+r7zWimEcLZPBornjVcK99HcUYhjBAt660lQTIc91j5Uj1Zoms74ArjC//ihyZ
mHhqdT5aPttrjmePfhOXbAjDCyNtNikW6vZYj6WagpD9MJIoVMDWs0nf+jkPaNhX
cub9kN7DCxyF2yiUUH6LkxbVtxa2q1ZzYKJIoEK0i7IpVWS3njWk9tbFoENRZLzy
+MjCcDGJngHUJvN6/RmjR28AQCbpC0hfTU7sRUGoLA4prVtkMxN5724PQRDcyjm2
vwLvONwYBQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:56 2026 by rpki-client