Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SXD2Yaay0RReTvxUhpiTfqyGYqw.roa
File: SXD2Yaay0RReTvxUhpiTfqyGYqw.roa (raw, json)
Hash identifier: 9K3JunoIKI1ohLICV+U++aUM+CEYUoAI8DqX/a/2r4o=
Subject key identifier: 49:70:F6:61:A6:B2:D1:14:5E:4E:FC:54:86:98:93:7E:AC:86:62:AC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1D3A7B4E45D8434203EF5EAC515969A53
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SXD2Yaay0RReTvxUhpiTfqyGYqw.roa
Signing time: Fri 13 Nov 2026 06:45:45 +0000
ROA not before: Fri 13 Nov 2026 06:45:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 89.34.228.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d3:a7:b4:e4:5d:84:34:20:3e:f5:ea:c5:15:96:9a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 13 06:45:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4970f661a6b2d1145e4efc548698937eac8662ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:93:fa:5f:41:30:76:e3:b3:6f:0c:01:b1:
eb:bd:69:1f:c8:c6:4d:4a:73:37:70:70:46:af:9f:
d8:00:24:0f:87:11:5c:64:ca:97:6a:85:93:14:79:
76:f2:d5:76:52:7e:97:2f:94:13:82:ac:e9:41:d8:
c8:44:22:74:17:ee:96:14:a9:f7:11:9a:34:71:b9:
28:f6:db:46:fb:22:9d:69:f2:e9:2a:20:3d:82:51:
da:d7:83:3b:7a:b0:8a:06:8c:63:92:5b:c0:cc:13:
32:1f:fe:76:1b:d7:b7:91:be:1e:56:b4:0c:2b:af:
eb:87:32:fa:8b:c6:a4:16:60:cb:eb:d4:41:8c:b0:
0f:f9:95:ec:7c:48:d5:fa:e2:92:b3:e3:62:ff:7a:
13:3d:cf:7b:44:6e:bd:35:2b:84:c5:6d:2a:5b:3e:
80:ab:8f:95:d7:ed:43:72:96:da:3f:15:7c:95:3d:
00:1b:99:5a:76:82:db:20:19:b5:24:2f:83:74:8f:
26:60:60:bb:a5:df:ef:96:a6:66:f8:5d:b3:26:a3:
2a:ed:f9:83:07:03:d4:94:c8:4b:48:6a:17:ff:6e:
6a:9e:01:bd:db:07:a3:03:e7:fe:63:76:16:3a:bf:
f8:c9:11:32:2e:d4:47:24:78:4a:16:a3:85:a7:6c:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:F6:61:A6:B2:D1:14:5E:4E:FC:54:86:98:93:7E:AC:86:62:AC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SXD2Yaay0RReTvxUhpiTfqyGYqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.47.100.0/24
Signature Algorithm: sha256WithRSAEncryption
74:61:7e:77:63:72:c2:71:da:6b:cd:e3:dd:f9:f0:41:c2:86:
7a:a6:4c:9c:9a:8a:4a:0f:0c:f9:54:9d:78:81:58:43:49:78:
18:55:85:08:e2:59:ed:c1:ce:d8:b6:6d:d1:a0:ab:cf:10:7f:
29:45:56:7c:42:51:68:f5:fe:fd:3e:f4:9c:5f:16:0e:47:23:
c0:b9:a5:7f:dd:cb:7d:b3:c3:14:d4:b2:5c:62:9f:9f:4c:25:
b5:9e:d3:87:56:39:2a:12:29:0a:6d:63:54:a4:88:cd:95:de:
5f:2c:3f:3f:39:b6:f6:ae:5d:bb:c2:17:ee:44:df:e4:c2:c3:
1d:19:b9:d2:5c:89:25:7d:81:4d:0f:68:0d:9d:9b:38:75:16:
4e:76:73:56:d3:e6:3a:35:51:6c:c8:ab:50:91:97:4b:75:63:
56:e7:0d:f8:10:f2:68:fa:5f:dc:c5:ba:d3:11:84:0c:d7:df:
e6:86:54:af:74:de:51:4e:d9:59:84:32:23:57:f2:01:8e:28:
79:14:11:ea:a3:80:03:ce:3c:f8:90:94:23:4a:2a:f0:86:50:
d7:ea:02:59:e3:67:4d:07:49:30:3e:13:5a:46:2c:f4:61:a2:
5d:eb:a2:1b:02:a5:41:b3:7e:2b:d3:5a:ee:28:9d:86:00:62:
9f:02:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:03 2026 by rpki-client