Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7zDIf55eZpMOwebgQOLnfSCJYGA.roa
File: 7zDIf55eZpMOwebgQOLnfSCJYGA.roa (raw, json)
Hash identifier: s/5PaqG18g+R/TxybKAPKVgXZsPrCSJhOk+srMqlgdE=
Subject key identifier: EF:30:C8:7F:9E:5E:66:93:0E:C1:E6:E0:40:E2:E7:7D:20:89:60:60
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1C4DD43EB0B75953AA249156543406F4F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7zDIf55eZpMOwebgQOLnfSCJYGA.roa
Signing time: Tue 10 Nov 2026 09:49:57 +0000
ROA not before: Tue 10 Nov 2026 09:49:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 89.47.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:dd:43:eb:0b:75:95:3a:a2:49:15:65:43:40:6f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 10 09:49:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef30c87f9e5e66930ec1e6e040e2e77d20896060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:3a:57:5d:a3:19:e9:31:ab:8f:86:54:1e:
37:9c:eb:b3:50:6d:0d:45:af:03:26:49:3c:7b:ec:
b7:43:0d:a3:91:90:d6:a3:53:40:5a:9c:63:46:9d:
a9:94:f6:df:80:5d:88:27:17:c7:8b:08:fa:39:3c:
f1:0d:ab:bf:70:1b:89:b3:55:87:b1:c9:25:a5:40:
2d:a8:97:18:c4:c1:8f:4b:41:13:4e:00:9d:46:ee:
59:f6:3a:de:30:02:59:59:eb:0e:b7:6f:09:90:2e:
68:3f:5c:0b:65:77:34:f4:7b:28:9f:71:c4:fe:dc:
44:c8:c9:83:ea:a3:17:ae:74:b2:53:d6:97:f5:64:
bf:66:c6:7d:21:33:7b:a5:5d:38:25:22:4f:63:bb:
9e:a4:a1:7b:b1:33:74:7a:d7:71:6a:d3:03:fd:1e:
c1:28:eb:61:66:08:67:79:b8:15:87:14:ef:9d:03:
a7:1f:fb:2b:4b:ea:38:b9:39:9b:11:9a:91:2c:01:
eb:98:29:4f:07:d1:12:c2:3a:6f:2e:f9:ad:97:53:
d8:f8:52:b6:1e:84:5e:ab:5b:7b:f6:be:71:59:4c:
72:f8:56:6d:d6:fc:c2:fd:0c:cc:22:03:a5:a8:a2:
6f:9f:d3:aa:6b:8f:5d:7a:01:4c:69:28:dd:af:7b:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:C8:7F:9E:5E:66:93:0E:C1:E6:E0:40:E2:E7:7D:20:89:60:60
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7zDIf55eZpMOwebgQOLnfSCJYGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.99.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f9:ff:25:3a:13:64:de:b8:a3:7f:17:e4:d7:ec:d2:29:46:
0a:9d:8e:51:b7:9f:5a:5d:08:65:3e:24:df:f0:a5:4d:8e:73:
6e:2a:54:21:52:9c:1c:14:52:cc:ef:c6:f3:9f:91:7f:3d:9b:
d1:54:3a:41:a3:2f:0d:6b:ed:dc:ce:49:c1:30:2c:6d:83:4d:
b2:c3:50:13:e3:15:9a:82:40:c6:e3:3e:86:a1:12:2c:62:5e:
df:8e:79:04:d9:a3:f4:ba:c3:4b:eb:fb:08:94:33:70:66:be:
1a:0d:83:71:5b:5f:fa:c6:da:59:d0:89:7e:20:40:d8:b9:9e:
89:8d:29:7a:8b:62:2a:9e:1d:c9:5c:05:4f:61:8e:47:9c:38:
0c:fe:8e:a8:15:0b:1f:88:3d:21:b1:ba:30:82:4d:0b:60:c4:
1b:93:c4:90:ea:aa:9b:46:00:8e:88:d9:40:2e:c8:0a:d3:50:
04:7f:af:35:e3:88:81:31:f6:9f:fe:f7:24:a6:40:7c:be:60:
e5:87:b6:df:db:6f:b1:de:2d:dc:4a:5d:74:8c:05:6b:f5:a1:
ae:10:82:3d:07:41:b3:0f:2b:6d:ca:da:c8:6c:7f:e3:04:4d:
b4:b4:a4:63:cf:6f:b0:8a:0b:62:e3:42:ae:cc:be:92:f5:25:
2e:25:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:13:01 2026 by rpki-client