Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ivesAc680JnUeWSUHDxuYowE9E0.roa
File: ivesAc680JnUeWSUHDxuYowE9E0.roa (raw, json)
Hash identifier: s0QsxXI3vBZLCn/DcwEIEgrjWzwUsD0DkKEib67yuMM=
Subject key identifier: 8A:F7:AC:01:CE:BC:D0:99:D4:79:64:94:1C:3C:6E:62:8C:04:F4:4D
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A09EABB269177F5DE0D860D2E696418667
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ivesAc680JnUeWSUHDxuYowE9E0.roa
Signing time: Mon 14 Sep 2026 06:47:27 +0000
ROA not before: Mon 14 Sep 2026 06:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218741
IP address blocks: 89.167.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ab:b2:69:17:7f:5d:e0:d8:60:d2:e6:96:41:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 14 06:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8af7ac01cebcd099d47964941c3c6e628c04f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:f4:b2:f9:3c:04:34:e5:ad:34:14:34:dd:
12:00:7e:af:dd:b1:3d:67:29:3d:a4:f0:e3:09:3a:
ce:90:8b:9d:d7:47:b3:be:a6:fc:d5:8a:86:3b:8b:
52:cb:fe:b1:8d:f8:fc:8e:e3:d9:c6:ef:0c:3c:45:
16:b5:17:bb:fa:9b:87:98:00:47:c7:87:f9:b8:9f:
34:e2:5b:24:49:cd:bd:f4:45:db:14:8f:c2:14:65:
12:43:86:5d:7b:35:a2:6a:d3:75:ba:4b:15:b2:3d:
51:eb:82:44:54:7c:3f:61:05:7e:5b:02:35:fc:f2:
76:2e:33:b0:3d:1b:ad:16:3a:5b:58:e5:e2:a8:eb:
1b:b6:db:bc:05:00:c3:99:18:22:62:6e:d6:1b:8c:
37:26:ea:83:05:3a:25:e3:de:a1:d3:0d:e7:7b:2e:
c4:43:0d:86:e4:cc:93:17:b4:87:58:eb:6e:e3:0c:
25:f6:72:41:29:60:ac:77:7e:85:0e:79:8b:70:89:
29:3e:7a:c8:43:f9:4c:88:1c:1f:58:54:a7:f6:f5:
25:5b:ab:d7:61:47:c6:8f:ef:d6:b0:3c:7c:57:e0:
08:c0:d8:a4:a5:05:61:03:8b:5a:6c:77:27:2e:cd:
7f:8a:9f:2a:fe:39:dd:6c:89:7c:92:eb:7e:16:f6:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:AC:01:CE:BC:D0:99:D4:79:64:94:1C:3C:6E:62:8C:04:F4:4D
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ivesAc680JnUeWSUHDxuYowE9E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.238.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b9:80:a1:69:5f:a2:8f:e9:d3:e3:6f:0f:f3:a1:8f:1b:65:
b3:8c:38:58:1d:f6:b8:67:43:fa:33:f3:df:48:dc:db:59:27:
29:73:1f:e9:a0:12:5f:47:58:db:2c:1d:ce:ff:e5:52:86:7c:
e9:03:87:1c:f2:be:46:ab:e0:9b:b0:65:e6:29:bd:33:df:10:
30:6f:5f:45:f0:1e:0a:91:a3:d5:65:eb:37:d8:e3:60:9d:a0:
0d:bf:c1:18:48:0d:bd:18:b1:4d:4f:c7:50:1e:dc:d2:a4:b0:
97:dc:8f:c7:ee:72:3b:9d:9f:02:c9:42:7c:15:ee:b0:3d:fb:
ce:81:96:5d:d0:76:ba:93:c8:17:f4:b6:ba:27:87:ee:b3:ca:
3f:6d:a0:33:43:4f:3b:7d:1f:92:a1:f5:93:7b:88:6b:6b:0a:
40:a2:0a:5f:b6:a0:04:99:59:35:69:32:b3:83:81:fe:07:f0:
6d:1c:49:44:fe:c7:b5:a7:48:9c:ad:2e:be:0e:ab:41:44:9b:
93:3c:2d:f8:7b:97:5e:d2:d7:db:da:df:cd:1d:df:ae:69:ed:
c9:8b:05:2d:c7:5b:93:03:83:94:78:b9:b6:a6:f7:26:54:8e:
99:da:30:79:67:38:c7:ac:49:67:3a:e6:8e:04:b3:e8:de:7d:
ab:ac:23:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCeq7JpF39d4Nhg0uaWQYZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTE0MDY0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWY3YWMwMWNlYmNkMDk5ZDQ3OTY0OTQxYzNjNmU2MjhjMDRmNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/30svk8BDTlrTQUNN0SAH6v3bE9
Zyk9pPDjCTrOkIud10ezvqb81YqGO4tSy/6xjfj8juPZxu8MPEUWtRe7+puHmABH
x4f5uJ804lskSc299EXbFI/CFGUSQ4ZdezWiatN1uksVsj1R64JEVHw/YQV+WwI1
/PJ2LjOwPRutFjpbWOXiqOsbttu8BQDDmRgiYm7WG4w3JuqDBTol496h0w3ney7E
Qw2G5MyTF7SHWOtu4wwl9nJBKWCsd36FDnmLcIkpPnrIQ/lMiBwfWFSn9vUlW6vX
YUfGj+/WsDx8V+AIwNikpQVhA4tabHcnLs1/ip8q/jndbIl8kut+Fvb2nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIr3rAHOvNCZ1HlklBw8bmKMBPRNMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvaXZlc0FjNjgwSm5VZVdTVUhEeHVZb3dFOUUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWafuMA0G
CSqGSIb3DQEBCwUAA4IBAQCJuYChaV+ij+nT428P86GPG2WzjDhYHfa4Z0P6M/Pf
SNzbWScpcx/poBJfR1jbLB3O/+VShnzpA4cc8r5Gq+CbsGXmKb0z3xAwb19F8B4K
kaPVZes32ONgnaANv8EYSA29GLFNT8dQHtzSpLCX3I/H7nI7nZ8CyUJ8Fe6wPfvO
gZZd0Ha6k8gX9La6J4fus8o/baAzQ087fR+SofWTe4hrawpAogpftqAEmVk1aTKz
g4H+B/BtHElE/se1p0icrS6+DqtBRJuTPC34e5de0tfb2t/NHd+uae3JiwUtx1uT
A4OUeLm2pvcmVI6Z2jB5ZzjHrElnOuaOBLPo3n2rrCNw
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:46 2026 by rpki-client