Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AiXcaDGn183JJoB7HmZPBT2ydfo.roa
File: AiXcaDGn183JJoB7HmZPBT2ydfo.roa (raw, json)
Hash identifier: WGFgvsPRz3fYcfUGWWDR86eqkJltrja0+4bj6bH6wzw=
Subject key identifier: 02:25:DC:68:31:A7:D7:CD:C9:26:80:7B:1E:66:4F:05:3D:B2:75:FA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019E063DD96A2DDEE7D47A4A4535294B89A3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AiXcaDGn183JJoB7HmZPBT2ydfo.roa
Signing time: Fri 08 May 2026 06:19:37 +0000
ROA not before: Fri 08 May 2026 06:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 89.47.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:3d:d9:6a:2d:de:e7:d4:7a:4a:45:35:29:4b:89:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 8 06:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0225dc6831a7d7cdc926807b1e664f053db275fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:ab:28:4c:7e:45:bf:9c:eb:2c:35:ad:59:
f6:7e:92:68:fc:c2:c4:44:77:4d:65:48:f4:9f:ac:
f1:7f:eb:2c:45:26:eb:a3:53:68:bf:80:67:9a:77:
3a:1c:d2:9d:2d:e9:47:e0:93:47:9a:f0:03:00:1c:
91:b2:fa:fa:44:78:28:ae:f9:33:3a:2c:71:25:dc:
03:48:ce:ca:83:f1:7e:cd:76:8d:49:46:87:b6:a0:
c2:2a:3c:20:6b:b7:3a:67:52:cb:13:ad:ee:92:43:
75:86:9c:42:28:c9:1d:f0:df:c8:f5:8c:3f:d8:8d:
f3:af:4a:31:a7:c0:e0:73:7c:75:04:d4:ca:b3:29:
b1:7f:7f:8f:6a:81:91:b8:f6:11:cf:a3:22:ab:df:
d9:51:7b:de:6b:b5:71:fd:f1:d3:39:ee:5f:70:e2:
17:94:63:10:ca:8f:3e:48:23:94:ee:b8:e9:6a:8b:
e7:d7:b7:9c:5f:d5:b3:af:46:e0:69:43:7b:02:ba:
98:b1:57:cb:90:0b:13:c5:0a:42:e8:69:f5:8a:5b:
f0:de:ca:c7:12:b3:cf:a9:02:b6:89:85:65:60:41:
20:b0:b0:c6:b3:9e:69:22:98:03:d4:d4:d4:d5:bf:
de:a0:de:1d:c7:ee:f9:07:62:26:a1:4b:26:48:d4:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:DC:68:31:A7:D7:CD:C9:26:80:7B:1E:66:4F:05:3D:B2:75:FA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AiXcaDGn183JJoB7HmZPBT2ydfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e8:2b:14:2a:5a:b0:4d:c6:81:45:fe:5c:f1:91:85:67:7c:
16:57:b7:ce:e5:18:61:1e:dc:11:63:f0:00:17:69:65:a3:68:
71:b1:c2:a6:33:0e:ef:97:5f:f0:a0:65:1b:dd:05:a6:9b:a7:
eb:5d:ca:ff:03:47:0d:ac:99:f2:df:0e:92:58:9f:73:51:6f:
dd:a5:41:f5:d6:d2:2f:18:cd:89:cc:fa:73:22:51:3c:4e:25:
09:98:1f:95:3c:41:02:34:e6:4f:26:04:49:b8:47:47:8a:fd:
4f:4e:2b:47:28:b1:f5:b1:ef:05:40:27:4a:79:74:ea:d8:b0:
61:43:be:0e:31:83:51:2e:ad:af:07:9b:36:70:19:96:3c:0c:
54:2c:38:92:94:55:e5:e8:95:d3:45:a3:5a:a5:ad:a2:0c:e8:
ab:bd:17:af:35:64:a3:7b:f8:ea:76:05:01:c4:df:75:6b:c5:
0a:f1:ab:5d:83:06:19:cf:6e:3a:fc:6c:08:a7:8a:f0:34:fb:
d8:3a:41:7c:e0:e6:0f:95:0c:1a:fa:b6:3f:3b:74:62:66:16:
b5:09:66:b6:dd:7d:95:25:10:b4:a3:01:90:8f:84:eb:68:d4:
91:3d:ce:39:5b:cc:bc:84:a7:ad:34:e8:c3:da:5a:25:3e:30:
ef:65:75:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4GPdlqLd7n1HpKRTUpS4mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNTA4MDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjI1ZGM2ODMxYTdkN2NkYzkyNjgwN2IxZTY2NGYwNTNkYjI3NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPyrKEx+Rb+c6yw1rVn2fpJo/MLE
RHdNZUj0n6zxf+ssRSbro1Nov4Bnmnc6HNKdLelH4JNHmvADAByRsvr6RHgorvkz
OixxJdwDSM7Kg/F+zXaNSUaHtqDCKjwga7c6Z1LLE63ukkN1hpxCKMkd8N/I9Yw/
2I3zr0oxp8Dgc3x1BNTKsymxf3+PaoGRuPYRz6Miq9/ZUXvea7Vx/fHTOe5fcOIX
lGMQyo8+SCOU7rjpaovn17ecX9Wzr0bgaUN7ArqYsVfLkAsTxQpC6Gn1ilvw3srH
ErPPqQK2iYVlYEEgsLDGs55pIpgD1NTU1b/eoN4dx+75B2ImoUsmSNRqwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIl3Ggxp9fNySaAex5mTwU9snX6MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvQWlYY2FER24xODNKSm9CN0htWlBCVDJ5ZGZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS92MA0G
CSqGSIb3DQEBCwUAA4IBAQBO6CsUKlqwTcaBRf5c8ZGFZ3wWV7fO5RhhHtwRY/AA
F2llo2hxscKmMw7vl1/woGUb3QWmm6frXcr/A0cNrJny3w6SWJ9zUW/dpUH11tIv
GM2JzPpzIlE8TiUJmB+VPEECNOZPJgRJuEdHiv1PTitHKLH1se8FQCdKeXTq2LBh
Q74OMYNRLq2vB5s2cBmWPAxULDiSlFXl6JXTRaNapa2iDOirvRevNWSje/jqdgUB
xN91a8UK8atdgwYZz246/GwIp4rwNPvYOkF84OYPlQwa+rY/O3RiZha1CWa23X2V
JRC0owGQj4TraNSRPc45W8y8hKetNOjD2lolPjDvZXUX
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:49 2026 by rpki-client