Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_zibv3kGCb1XgBvZmliuNewVd1c.roa
File: _zibv3kGCb1XgBvZmliuNewVd1c.roa (raw, json)
Hash identifier: K4YNiWpFqb5lS0RpJXPapWnmgNrAVG6L0nU4T+z+7V4=
Subject key identifier: FF:38:9B:BF:79:06:09:BD:57:80:1B:D9:9A:58:AE:35:EC:15:77:57
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A10C1E545EF8301B3E46143AC5DD8BE613
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_zibv3kGCb1XgBvZmliuNewVd1c.roa
Signing time: Mon 05 Oct 2026 12:51:16 +0000
ROA not before: Mon 05 Oct 2026 12:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141750
IP address blocks: 89.47.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:1e:54:5e:f8:30:1b:3e:46:14:3a:c5:dd:8b:e6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 5 12:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff389bbf790609bd57801bd99a58ae35ec157757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:11:02:d8:c7:1b:51:5b:f5:35:42:17:6a:
29:0e:22:51:42:93:71:51:52:41:f0:53:76:31:c3:
6e:e1:fd:21:e9:5c:98:b6:f0:83:2a:6c:89:47:84:
09:93:ee:0b:c8:d1:69:a0:4f:c1:6e:a6:06:54:66:
a8:a3:dc:0f:32:37:ff:ed:f8:ae:cd:36:a7:ea:19:
b2:cf:f8:77:1b:ba:f8:a9:ff:a7:e6:89:7c:d9:0c:
91:10:a9:db:cc:b5:d9:66:58:1e:2c:1b:3d:2d:78:
d6:d3:d8:26:6f:2a:d1:c2:7e:0b:bb:5e:db:40:b9:
9c:39:55:43:02:5b:63:fb:4b:69:9c:8e:15:07:dc:
c8:de:4d:82:5f:a4:b1:47:43:91:13:35:41:5a:05:
e2:53:74:71:07:01:aa:8b:99:7b:68:1e:b9:d4:0f:
37:69:1d:43:98:97:9c:56:b2:07:6c:b3:96:5e:21:
ed:67:47:9f:5a:c1:49:6c:d8:25:57:98:72:65:a2:
fc:0f:0e:bf:90:04:2f:ee:b2:4b:71:1a:2e:33:c4:
57:3a:66:0a:6b:44:23:c4:ec:37:ff:7f:30:91:81:
f9:3c:a3:38:83:8f:a1:d1:85:32:31:9e:0b:34:e3:
ce:a7:83:63:93:76:c8:cd:59:19:af:79:59:b4:b1:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:9B:BF:79:06:09:BD:57:80:1B:D9:9A:58:AE:35:EC:15:77:57
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_zibv3kGCb1XgBvZmliuNewVd1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:78:e9:84:b3:11:5a:88:03:e1:f6:b1:ad:3d:e4:15:2f:2e:
40:5d:eb:14:a7:b6:52:44:e7:c0:9d:af:ab:19:18:f2:54:9a:
29:00:6f:a3:97:47:8e:94:35:7d:fb:6e:9a:54:8b:a0:06:4b:
99:59:28:25:6b:18:71:3a:d4:9a:bf:1e:49:e7:50:51:72:18:
18:cc:df:3d:f0:77:ec:97:3b:b6:f1:87:53:dc:dc:81:16:d7:
92:e5:58:ee:33:12:ff:b4:f8:f9:ec:3b:84:63:5a:bb:3c:57:
1f:00:d2:e1:4d:4c:41:e8:ff:23:24:f9:fa:07:e0:0a:0a:c0:
06:db:79:55:f2:5b:bc:94:09:4e:ef:21:aa:b8:7b:e6:dc:fb:
cf:31:78:97:ec:25:8e:52:0a:24:ea:e8:27:3f:46:d4:be:82:
32:50:a4:e6:60:38:e6:c7:a0:bb:b3:f5:51:e3:93:97:ec:c3:
3b:c4:77:4f:52:d0:43:5d:66:86:7e:af:f2:d9:59:17:d8:93:
4f:ea:46:1b:c0:a9:43:6c:26:b5:4f:e0:1d:1f:f4:f2:cb:ff:
69:76:51:40:99:dc:a8:88:fd:73:02:83:38:39:82:ff:85:09:
b7:6a:21:e4:3c:86:cd:88:4f:7a:ee:7f:ea:cd:9e:2b:f9:ed:
c5:95:49:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEMHlRe+DAbPkYUOsXdi+YTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYxMDA1MTI1MTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjM4OWJiZjc5MDYwOWJkNTc4MDFiZDk5YTU4YWUzNWVjMTU3NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAURAtjHG1Fb9TVCF2opDiJRQpNx
UVJB8FN2McNu4f0h6VyYtvCDKmyJR4QJk+4LyNFpoE/BbqYGVGaoo9wPMjf/7fiu
zTan6hmyz/h3G7r4qf+n5ol82QyREKnbzLXZZlgeLBs9LXjW09gmbyrRwn4Lu17b
QLmcOVVDAltj+0tpnI4VB9zI3k2CX6SxR0OREzVBWgXiU3RxBwGqi5l7aB651A83
aR1DmJecVrIHbLOWXiHtZ0efWsFJbNglV5hyZaL8Dw6/kAQv7rJLcRouM8RXOmYK
a0QjxOw3/38wkYH5PKM4g4+h0YUyMZ4LNOPOp4Njk3bIzVkZr3lZtLForQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP84m795Bgm9V4Ab2ZpYrjXsFXdXMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvX3ppYnYza0dDYjFYZ0J2Wm1saXVOZXdWZDFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS93MA0G
CSqGSIb3DQEBCwUAA4IBAQBPeOmEsxFaiAPh9rGtPeQVLy5AXesUp7ZSROfAna+r
GRjyVJopAG+jl0eOlDV9+26aVIugBkuZWSglaxhxOtSavx5J51BRchgYzN898Hfs
lzu28YdT3NyBFteS5VjuMxL/tPj57DuEY1q7PFcfANLhTUxB6P8jJPn6B+AKCsAG
23lV8lu8lAlO7yGquHvm3PvPMXiX7CWOUgok6ugnP0bUvoIyUKTmYDjmx6C7s/VR
45OX7MM7xHdPUtBDXWaGfq/y2VkX2JNP6kYbwKlDbCa1T+AdH/Tyy/9pdlFAmdyo
iP1zAoM4OYL/hQm3aiHkPIbNiE967n/qzZ4r+e3FlUlv
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:20:31 2026 by rpki-client