Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iDQRtTy40cpUjTAhnkKM7rJnnNw.roa
File: iDQRtTy40cpUjTAhnkKM7rJnnNw.roa (raw, json)
Hash identifier: sNIkcinyNDzOuRrIOVJuzUP6mB7lVqVAxIdavyNiErc=
Subject key identifier: 88:34:11:B5:3C:B8:D1:CA:54:8D:30:21:9E:42:8C:EE:B2:67:9C:DC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A084DE2F0E45ED964A56ADCE929E5E715B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iDQRtTy40cpUjTAhnkKM7rJnnNw.roa
Signing time: Wed 09 Sep 2026 06:32:28 +0000
ROA not before: Wed 09 Sep 2026 06:32:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 89.213.192.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:de:2f:0e:45:ed:96:4a:56:ad:ce:92:9e:5e:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 9 06:32:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=883411b53cb8d1ca548d30219e428ceeb2679cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:a9:2f:95:a0:65:6a:5e:b9:0f:cc:87:af:
67:87:ac:fb:69:f0:8f:83:7f:5a:0f:a3:26:3b:46:
fe:ab:36:fb:96:5a:4b:7d:89:4d:95:e2:f9:4a:1e:
40:a5:97:77:61:91:75:f7:12:76:37:86:64:52:3a:
36:e5:3d:e7:4d:9f:53:af:f7:7d:b7:da:95:3c:9c:
45:59:01:a0:5f:e0:76:40:4e:1e:59:e4:fc:5c:d6:
c9:64:d7:16:2a:5b:97:94:cb:41:aa:f7:ed:73:3c:
8e:a1:3b:ea:12:73:06:26:7b:7c:66:ef:42:00:24:
5b:9f:d2:46:1d:38:79:b5:50:b6:c3:7e:95:8f:40:
a6:f5:de:50:02:6a:c6:79:d6:6d:50:2f:72:61:7a:
af:a5:74:0e:17:1d:82:60:f0:4f:3d:ae:a4:73:91:
17:62:d4:97:b3:5e:7b:4a:54:49:95:75:fc:d9:b7:
8b:5f:b5:e0:f8:10:38:7e:30:00:97:7d:fd:2e:75:
85:00:3c:e3:17:7e:4e:45:1e:f2:91:0d:bc:ca:84:
59:a1:c3:a4:f2:b9:d8:0e:f6:bf:fe:44:62:4b:0f:
b6:42:2a:3c:00:71:dd:99:d1:cc:03:99:bc:bd:62:
d9:4d:c3:5a:0b:69:8f:36:6d:99:e2:e4:ea:e4:ac:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:11:B5:3C:B8:D1:CA:54:8D:30:21:9E:42:8C:EE:B2:67:9C:DC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iDQRtTy40cpUjTAhnkKM7rJnnNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.192.0/24
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
81:57:eb:2c:2e:fa:d7:b6:e4:20:3b:02:84:70:0d:49:59:9c:
1e:ab:e5:d3:df:01:27:81:0e:81:0f:ee:b5:0d:1a:f3:b3:9d:
fc:34:ca:02:6c:fb:3a:ba:1d:2c:29:34:73:c9:f5:34:e4:ae:
0d:eb:5e:98:a8:5b:a2:cc:52:23:0e:be:c4:27:6e:04:9b:97:
ed:a3:07:e5:79:f7:ba:c8:82:8e:58:70:73:f5:27:35:cf:70:
d1:18:26:87:df:46:dd:44:9e:fd:4c:2e:e8:c0:a5:33:a1:73:
16:44:51:40:61:cb:ae:4f:3d:3f:50:b6:72:9b:df:f5:c8:ec:
fa:c7:5a:e5:dd:52:16:80:1a:c4:12:c7:c4:31:57:cb:ca:4e:
bf:3b:58:8c:4e:65:57:e0:e0:18:3a:a4:68:4c:27:c9:43:f2:
f6:d7:89:22:27:a5:8c:6c:bc:3d:ed:b3:b3:1e:02:2a:4c:8f:
80:dc:0b:51:6d:1c:29:45:d0:60:3f:2d:91:f6:9d:3f:86:1e:
4f:c4:ff:64:6a:7f:a0:16:74:4e:bd:67:80:f2:a0:36:81:f3:
fd:4d:8d:fc:a4:9e:34:3a:fd:31:f4:98:03:f0:1a:2f:14:93:
2a:e6:81:40:1b:e9:23:7c:6d:14:6f:e0:36:0d:93:13:33:11:
fa:c7:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:15 2026 by rpki-client