Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jHItfzilIOvTjNWI1LB8akQjA2s.roa
File: jHItfzilIOvTjNWI1LB8akQjA2s.roa (raw, json)
Hash identifier: ajZEVNGjGCKDWMTlN+D1Hhx4Ne1mNSoVU8fQIYtSOuI=
Subject key identifier: 8C:72:2D:7F:38:A5:20:EB:D3:8C:D5:88:D4:B0:7C:6A:44:23:03:6B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019CF083B7AD7CDC8B905FAAA3718298B5E3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jHItfzilIOvTjNWI1LB8akQjA2s.roa
Signing time: Sun 15 Mar 2026 08:01:29 +0000
ROA not before: Sun 15 Mar 2026 08:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205374
IP address blocks: 89.46.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:83:b7:ad:7c:dc:8b:90:5f:aa:a3:71:82:98:b5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 15 08:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c722d7f38a520ebd38cd588d4b07c6a4423036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:2f:3e:e8:f7:95:87:c8:7f:e9:cc:a9:48:
81:27:98:9c:88:fb:cc:12:82:24:81:99:62:58:b4:
44:e8:e9:78:47:2a:84:4f:fd:4c:86:2b:0b:b2:cf:
91:6b:64:24:a4:b5:36:c8:d0:ff:60:bf:16:fa:64:
20:09:82:15:99:96:ff:e0:71:f2:cf:b2:8e:9b:5b:
91:33:db:55:73:a3:24:62:a5:7f:dd:fd:4e:c6:c8:
ac:be:bb:35:5a:fd:9f:bd:32:ed:eb:60:fa:22:d4:
e0:53:af:fb:f3:ac:50:0f:80:33:d5:7d:b4:39:8d:
bd:66:fb:14:ab:0f:63:7b:bc:2b:60:e6:6a:75:28:
66:f6:1f:c0:6d:87:68:bc:da:43:16:8f:51:fd:4a:
e9:d7:dd:b9:91:4f:6d:7c:79:08:af:ab:d0:e9:bc:
0d:c2:6f:43:1d:01:c8:28:1b:b1:36:4e:70:37:b3:
98:90:3d:c3:11:21:92:8b:ba:32:1f:b2:2e:67:75:
fa:51:5b:87:ba:89:1b:d7:a2:9f:e7:b9:b8:1d:2d:
d2:ac:5d:51:fd:bd:47:28:52:33:87:52:e6:8b:12:
db:0c:b3:60:1f:68:27:3e:6d:e2:60:3a:77:19:b8:
5c:b4:bd:c4:97:97:0c:b7:41:88:99:2c:51:fe:d5:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:2D:7F:38:A5:20:EB:D3:8C:D5:88:D4:B0:7C:6A:44:23:03:6B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jHItfzilIOvTjNWI1LB8akQjA2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8b:fa:ee:20:1b:bc:0a:2a:20:59:53:2e:84:b2:7b:7f:5a:
da:aa:99:e7:6e:a7:1b:db:b3:c0:f3:05:15:b5:1c:7a:d5:35:
4c:50:f3:c6:3e:63:15:39:45:47:7e:f1:38:dc:c0:b0:80:34:
10:ae:aa:36:9f:f5:79:05:3b:ef:cb:a3:5d:05:93:fc:4f:50:
66:82:dc:3f:6c:cb:a9:0d:23:3c:f1:5c:b7:5f:8c:48:03:fd:
3f:33:29:c6:7e:9c:46:de:00:06:1d:71:7c:3f:91:9a:a7:ff:
2f:3e:fd:8e:f8:50:6c:45:d4:ea:b3:a5:f2:63:17:d6:81:af:
26:96:67:f5:10:35:29:10:a0:fe:fb:f5:c4:42:19:fc:aa:fe:
05:77:22:57:a3:7a:43:e9:e8:35:f7:98:29:00:1f:75:11:29:
3f:84:20:ee:a8:ca:ae:2e:69:d6:70:f8:03:9e:4e:48:0d:f4:
95:34:13:6b:22:dd:97:a0:9d:25:2f:f9:ff:0a:e0:6a:12:04:
86:85:57:83:d4:2a:38:84:31:e9:71:34:54:1d:8f:3f:eb:71:
27:d0:25:bb:e6:47:56:e7:04:1d:e5:01:b4:30:37:c1:6c:75:
d7:60:93:2b:23:a0:8c:f6:8c:d9:ea:f5:d5:d7:a3:51:f9:41:
a0:7d:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:24 2026 by rpki-client