Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/tJRBfkltOeEmMpBp0s_Fw82V_ZQ.roa
File: tJRBfkltOeEmMpBp0s_Fw82V_ZQ.roa (raw, json)
Hash identifier: 7IZRMnOIiolL9vb2qxe2gqgVq4yYweBOY6XfPJTUiy4=
Subject key identifier: B4:94:41:7E:49:6D:39:E1:26:32:90:69:D2:CF:C5:C3:CD:95:FD:94
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0CD3091CC12CF540666F1B89FFA587BFD
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/tJRBfkltOeEmMpBp0s_Fw82V_ZQ.roa
Signing time: Wed 23 Sep 2026 07:35:07 +0000
ROA not before: Wed 23 Sep 2026 07:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 89.167.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:30:91:cc:12:cf:54:06:66:f1:b8:9f:fa:58:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 23 07:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b494417e496d39e126329069d2cfc5c3cd95fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:c5:02:03:4d:4f:02:63:02:79:07:39:87:
33:a6:9b:6a:d2:70:19:3b:b8:00:70:a7:9e:75:fe:
a4:6e:ce:b2:96:f1:61:0e:cf:e9:f3:fc:3e:74:04:
37:6f:23:de:76:76:b4:33:49:48:8b:72:a8:2d:63:
3e:f0:69:c2:1a:ce:ae:85:f2:66:15:a4:1a:ad:99:
30:2d:5b:cc:0b:8d:be:66:cd:5e:c2:9e:fe:de:e3:
4f:30:dc:c1:d1:76:bd:49:3b:f5:f9:f8:96:27:b3:
9a:81:07:30:05:36:d2:77:7c:bc:b6:31:48:9d:3b:
5f:ef:de:40:51:27:d6:2f:c7:28:2f:68:0c:9e:3a:
60:80:6d:a9:c6:e6:93:ed:85:13:4a:19:af:39:15:
83:7d:98:af:1e:a2:44:df:e3:d6:60:bb:ab:c8:08:
88:95:6e:6f:b7:21:4d:0d:ee:8a:2d:c7:c6:9f:2d:
1a:1b:da:43:63:89:1c:c5:2f:72:4b:e8:f6:ed:2b:
fa:a0:21:e1:54:cd:46:be:fd:16:73:2b:69:b5:77:
d1:cc:c1:be:f4:9c:4f:65:8d:fc:dc:67:7a:87:18:
6e:c3:84:2b:bc:66:aa:3e:43:3d:d2:b8:46:4d:e9:
e3:25:5d:2d:24:a1:22:51:88:0a:f7:2a:a2:2a:77:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:41:7E:49:6D:39:E1:26:32:90:69:D2:CF:C5:C3:CD:95:FD:94
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/tJRBfkltOeEmMpBp0s_Fw82V_ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.164.0/24
Signature Algorithm: sha256WithRSAEncryption
39:15:a1:19:76:d1:7c:a8:a3:74:8f:20:73:a1:b7:35:1e:c8:
34:00:89:2c:8a:fc:d4:7b:32:6f:f2:8a:48:0f:b6:b4:0e:f1:
03:6b:ee:6d:ad:e9:08:48:e9:70:49:57:3f:c6:f3:41:6e:e0:
6b:ed:aa:76:4c:30:7b:0c:b2:bc:4d:58:ca:eb:c7:db:64:4a:
6d:72:b0:f0:7e:c2:6f:60:14:c3:76:b9:a7:d1:fe:40:ad:b8:
aa:78:7e:6f:0e:f3:1c:56:bc:25:bc:5a:8d:6c:cf:74:a9:ff:
8c:15:a3:31:4d:b1:84:c0:c3:20:58:8d:be:69:f1:c8:64:11:
59:b5:89:fc:2c:1a:0d:9f:34:9f:98:c2:f8:47:6f:08:06:3d:
c2:aa:5d:07:c0:98:c1:50:4b:6e:62:7e:7b:6d:23:e4:23:ac:
5a:0e:cf:1f:4d:4e:25:89:32:7c:0c:e4:7a:0a:3a:59:ca:db:
5f:7e:34:b1:3f:ae:28:03:da:5f:65:25:a4:cb:e4:96:02:91:
5c:32:24:74:05:aa:82:20:87:43:e0:3a:33:5c:ce:aa:cb:27:
8d:8f:22:fa:05:a4:1c:9b:10:2f:9f:2a:ea:d3:7a:ce:3a:82:
07:5a:a5:ac:2a:f8:c8:d0:a5:06:59:b2:0b:e6:c3:c1:c4:6e:
00:98:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:03:45 2026 by rpki-client