Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gDXQdVurQ3eMvyl9huSrVBuce7o.roa
File: gDXQdVurQ3eMvyl9huSrVBuce7o.roa (raw, json)
Hash identifier: 9dkSBAo4taYFh5dthrnriHAYxVUgBYZAPo5KCoLAzPI=
Subject key identifier: 80:35:D0:75:5B:AB:43:77:8C:BF:29:7D:86:E4:AB:54:1B:9C:7B:BA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F853DEABCB8EEFBA896DA877DA3B1029B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gDXQdVurQ3eMvyl9huSrVBuce7o.roa
Signing time: Tue 21 Jul 2026 15:14:15 +0000
ROA not before: Tue 21 Jul 2026 15:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 89.213.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:3d:ea:bc:b8:ee:fb:a8:96:da:87:7d:a3:b1:02:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 21 15:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8035d0755bab43778cbf297d86e4ab541b9c7bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:1e:d0:47:9e:32:22:61:80:c0:39:81:6e:
35:c8:1d:16:b3:36:ba:e4:83:45:24:84:3b:a6:23:
2e:e5:26:6a:f3:6f:68:86:1e:ec:0e:de:2b:61:6a:
27:66:7b:8e:f4:5c:b5:de:7f:b5:44:c3:e3:41:a1:
d3:ec:ce:45:bb:8e:ed:ac:ec:19:ef:c1:3e:1c:11:
a2:75:70:e7:30:5b:df:75:4c:c4:86:05:fd:cd:02:
6f:2e:23:b2:51:cb:52:fb:39:c1:4a:93:11:c9:32:
a5:81:07:97:16:b4:93:46:d1:d1:d6:c9:f2:4b:7a:
65:fe:48:c1:56:7a:89:81:27:a8:c0:ce:06:4a:7a:
33:47:80:d1:6c:83:45:d2:b0:e5:07:0c:9e:55:f6:
f9:26:1b:3c:06:0d:80:bf:67:a9:05:18:0b:df:22:
a0:60:75:e0:a7:a6:35:00:1a:f9:9b:6c:b0:ed:81:
66:ff:27:b5:5d:31:9d:d7:1c:ae:2d:36:00:d3:6e:
06:14:f8:06:6c:10:1f:e9:fe:b4:e3:a6:01:c4:67:
b9:06:ec:e9:9a:a8:1d:96:b8:7f:82:2d:b4:13:29:
50:2e:08:b6:e5:c4:df:21:cc:7a:90:ed:7f:39:59:
41:ca:9a:25:3f:43:40:89:a2:24:32:60:de:c1:1c:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:D0:75:5B:AB:43:77:8C:BF:29:7D:86:E4:AB:54:1B:9C:7B:BA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gDXQdVurQ3eMvyl9huSrVBuce7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.131.0/24
Signature Algorithm: sha256WithRSAEncryption
05:75:09:6e:1e:5b:74:8a:48:8e:68:a6:eb:07:55:41:4e:10:
79:06:82:0c:49:55:3b:30:0c:a0:10:1e:c0:6f:93:27:bf:96:
cc:8d:b2:bf:71:4b:6a:f8:eb:7b:80:fc:76:4e:84:b7:58:b3:
95:fe:f8:db:8a:7e:1c:cd:b7:4b:b9:17:b7:14:a8:62:25:55:
38:bf:cd:63:df:7a:eb:93:39:4b:ac:65:35:83:aa:29:12:93:
96:7e:57:a6:dd:c1:80:15:61:fd:41:e2:a8:c2:b9:07:3e:e3:
bb:8c:34:2f:64:62:f9:1c:75:34:11:43:bd:82:13:50:32:14:
39:e5:86:37:80:82:eb:3f:70:05:70:c1:73:e1:81:22:94:a0:
a3:1b:3f:0b:c7:f1:b9:7f:68:c3:e4:fa:b7:66:9a:f7:c9:d3:
90:32:b5:b9:1b:a2:68:6d:7e:4c:85:9f:0a:24:d4:0e:54:fd:
e8:aa:78:b5:06:4f:cd:93:9c:14:22:0d:25:41:67:c5:c1:1f:
4a:9e:42:fb:6e:72:cb:07:97:e6:d4:1e:e1:41:e9:9b:55:e6:
5b:cc:b1:41:45:3d:ad:d5:ae:99:dd:9e:85:7c:70:90:1a:6b:
12:05:26:14:04:73:9e:45:3d:28:1f:07:f7:4a:f6:a8:6b:5b:
8a:58:ad:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+FPeq8uO77qJbah32jsQKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzIxMTUxNDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDM1ZDA3NTViYWI0Mzc3OGNiZjI5N2Q4NmU0YWI1NDFiOWM3YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Ae0EeeMiJhgMA5gW41yB0Wsza6
5INFJIQ7piMu5SZq829ohh7sDt4rYWonZnuO9Fy13n+1RMPjQaHT7M5Fu47trOwZ
78E+HBGidXDnMFvfdUzEhgX9zQJvLiOyUctS+znBSpMRyTKlgQeXFrSTRtHR1sny
S3pl/kjBVnqJgSeowM4GSnozR4DRbINF0rDlBwyeVfb5Jhs8Bg2Av2epBRgL3yKg
YHXgp6Y1ABr5m2yw7YFm/ye1XTGd1xyuLTYA024GFPgGbBAf6f6046YBxGe5Buzp
mqgdlrh/gi20EylQLgi25cTfIcx6kO1/OVlBypolP0NAiaIkMmDewRwbZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIA10HVbq0N3jL8pfYbkq1QbnHu6MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ0RYUWRWdXJRM2VNdnlsOWh1U3JWQnVjZTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWDMA0G
CSqGSIb3DQEBCwUAA4IBAQAFdQluHlt0ikiOaKbrB1VBThB5BoIMSVU7MAygEB7A
b5Mnv5bMjbK/cUtq+Ot7gPx2ToS3WLOV/vjbin4czbdLuRe3FKhiJVU4v81j33rr
kzlLrGU1g6opEpOWflem3cGAFWH9QeKowrkHPuO7jDQvZGL5HHU0EUO9ghNQMhQ5
5YY3gILrP3AFcMFz4YEilKCjGz8Lx/G5f2jD5Pq3Zpr3ydOQMrW5G6JobX5MhZ8K
JNQOVP3oqni1Bk/Nk5wUIg0lQWfFwR9KnkL7bnLLB5fm1B7hQembVeZbzLFBRT2t
1a6Z3Z6FfHCQGmsSBSYUBHOeRT0oHwf3Svaoa1uKWK2V
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:54 2026 by rpki-client