Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0wIvRBYjXgWe7b9gpx4a8RXQ3FE.roa
File: 0wIvRBYjXgWe7b9gpx4a8RXQ3FE.roa (raw, json)
Hash identifier: Fa0TgSlh19l5O+LT8gl68/X4XrZHGhCAKFC1w0ehOps=
Subject key identifier: D3:02:2F:44:16:23:5E:05:9E:ED:BF:60:A7:1E:1A:F1:15:D0:DC:51
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019DAF3916150BDF2355B4676A31F5E1FAD5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0wIvRBYjXgWe7b9gpx4a8RXQ3FE.roa
Signing time: Tue 21 Apr 2026 08:47:26 +0000
ROA not before: Tue 21 Apr 2026 08:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 89.33.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:39:16:15:0b:df:23:55:b4:67:6a:31:f5:e1:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 21 08:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3022f4416235e059eedbf60a71e1af115d0dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:6d:be:e7:cf:19:bd:2a:bd:f1:17:e6:92:
0a:3c:ff:98:20:02:9b:e9:2e:11:5d:90:13:93:6a:
e3:f2:ee:b8:85:e6:0e:25:9d:33:4a:8a:67:e2:d9:
8f:b6:70:b5:f7:3c:a9:18:6f:a6:44:c8:0f:25:f3:
1f:c2:5e:34:c5:8b:81:aa:03:5b:52:15:d1:9c:d0:
6d:e2:b2:a1:36:1b:eb:07:33:08:f7:53:04:4e:46:
b5:96:57:cd:9b:d4:1a:00:84:c2:30:5f:b8:ed:93:
4d:b1:03:16:8b:84:e4:d0:cc:74:e6:9b:93:f3:f0:
56:49:d1:cf:e5:48:5d:b7:0a:fc:e6:f3:8c:6a:92:
3c:65:3b:f7:b8:bd:69:d9:a6:e7:98:dd:79:c5:64:
67:71:43:63:d3:a6:6a:ab:e2:9d:48:5b:ed:70:80:
42:55:a6:de:cd:cb:a5:92:c0:ad:a0:26:0f:cc:a7:
93:06:a1:00:06:93:23:ef:e0:1d:ee:9b:33:e8:42:
a9:75:44:57:e8:6a:be:b7:07:80:fe:37:59:93:46:
19:4f:75:f2:24:fc:af:3f:cf:89:7e:54:dc:c6:18:
5e:75:08:13:09:ae:a0:9e:81:47:c2:6a:f6:b7:44:
3e:ea:d8:7a:28:21:1a:63:4b:cc:bb:ac:33:05:f8:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:02:2F:44:16:23:5E:05:9E:ED:BF:60:A7:1E:1A:F1:15:D0:DC:51
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0wIvRBYjXgWe7b9gpx4a8RXQ3FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b7:ee:3f:b9:ff:59:f8:46:a1:41:3c:79:e6:1c:f1:fb:25:
f1:ad:a0:8e:e6:4f:b4:ba:f0:4a:a4:c5:57:5e:b3:6e:57:13:
d2:ce:ca:84:17:4c:66:2a:82:da:0e:12:2f:48:7c:29:d7:ab:
b4:da:ea:81:d5:35:86:1a:eb:b7:8a:b9:7e:bd:be:f2:a0:56:
fe:a8:2d:14:4d:3c:48:7e:86:f1:8f:31:f0:da:ab:0c:b6:c7:
c8:ec:2b:91:3d:33:ee:f6:1c:0b:15:01:ef:15:23:41:18:6b:
5b:6d:4c:3f:10:6c:89:e2:4e:e1:9f:24:8f:98:69:c3:48:63:
19:03:f2:b7:b2:54:00:2c:6b:09:25:ea:90:93:ea:2f:f4:64:
0b:f4:c6:28:64:1f:7a:b2:3c:fd:29:25:45:75:80:ed:5c:17:
6c:e5:0a:a2:15:05:da:b6:0f:f6:49:dc:49:cf:8c:ec:13:59:
7c:94:30:d1:34:86:4d:3d:8d:36:8a:40:1b:a9:84:c5:1a:53:
11:35:78:75:19:72:cd:87:61:41:cc:0d:8e:95:bc:b4:d7:48:
52:d2:1e:32:23:ba:6d:e4:b5:41:48:f2:fe:a9:57:21:4c:bd:
43:88:6b:2f:94:b3:d5:f4:d3:14:b4:35:43:86:18:3e:45:ff:
9f:66:1e:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2vORYVC98jVbRnajH14frVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNDIxMDg0NzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzAyMmY0NDE2MjM1ZTA1OWVlZGJmNjBhNzFlMWFmMTE1ZDBkYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RFtvufPGb0qvfEX5pIKPP+YIAKb
6S4RXZATk2rj8u64heYOJZ0zSopn4tmPtnC19zypGG+mRMgPJfMfwl40xYuBqgNb
UhXRnNBt4rKhNhvrBzMI91METka1llfNm9QaAITCMF+47ZNNsQMWi4Tk0Mx05puT
8/BWSdHP5Uhdtwr85vOMapI8ZTv3uL1p2abnmN15xWRncUNj06Zqq+KdSFvtcIBC
VabezculksCtoCYPzKeTBqEABpMj7+Ad7psz6EKpdURX6Gq+tweA/jdZk0YZT3Xy
JPyvP8+JflTcxhhedQgTCa6gnoFHwmr2t0Q+6th6KCEaY0vMu6wzBfiTRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNMCL0QWI14Fnu2/YKceGvEV0NxRMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMHdJdlJCWWpYZ1dlN2I5Z3B4NGE4UlhRM0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHBMA0G
CSqGSIb3DQEBCwUAA4IBAQAXt+4/uf9Z+EahQTx55hzx+yXxraCO5k+0uvBKpMVX
XrNuVxPSzsqEF0xmKoLaDhIvSHwp16u02uqB1TWGGuu3irl+vb7yoFb+qC0UTTxI
fobxjzHw2qsMtsfI7CuRPTPu9hwLFQHvFSNBGGtbbUw/EGyJ4k7hnySPmGnDSGMZ
A/K3slQALGsJJeqQk+ov9GQL9MYoZB96sjz9KSVFdYDtXBds5QqiFQXatg/2SdxJ
z4zsE1l8lDDRNIZNPY02ikAbqYTFGlMRNXh1GXLNh2FBzA2Olby010hS0h4yI7pt
5LVBSPL+qVchTL1DiGsvlLPV9NMUtDVDhhg+Rf+fZh4P
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:54 2026 by rpki-client