Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa
File: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (raw, json)
Hash identifier: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=
Subject key identifier: 57:E9:8F:78:D5:B2:54:88:D0:D4:E5:0A:D9:3D:8C:14:7B:9E:6C:A3
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019E113EEC4DD5624F8604E2135151CBBD46
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa
Signing time: Sun 10 May 2026 09:36:36 +0000
ROA not before: Sun 10 May 2026 09:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.28.204.0/24 maxlen: 24
152.89.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:3e:ec:4d:d5:62:4f:86:04:e2:13:51:51:cb:bd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 10 09:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57e98f78d5b25488d0d4e50ad93d8c147b9e6ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:a0:7f:8a:0a:7b:d8:b2:19:a7:8e:a4:52:
c5:68:3c:1a:e5:3c:20:32:c1:02:b9:f1:ad:b3:c9:
9d:75:a1:ba:a1:73:cb:9e:02:5f:9e:45:c2:1e:3f:
86:df:3e:74:03:49:78:ad:14:89:21:10:d7:fd:d5:
bc:94:70:07:4d:bf:57:e4:06:01:71:f7:5d:b3:a3:
46:9a:14:dc:8c:29:f9:90:ba:34:40:15:c1:9d:dd:
54:42:d4:41:00:bf:67:d9:49:c1:a0:6f:a3:a1:16:
34:54:d8:d2:f0:ad:63:52:8c:a9:55:d6:74:33:17:
cb:35:97:0e:47:c3:c8:58:48:10:f9:11:38:7e:e2:
eb:68:35:bd:9d:e5:9d:1c:89:e8:06:0c:c4:90:5b:
80:bb:9a:a4:8e:c4:c0:66:90:04:e5:f8:a8:dd:a6:
d1:82:c7:d8:24:ee:72:e5:f5:3d:48:16:0a:3e:cc:
1f:be:94:cb:ec:5c:cb:d3:0e:a2:d0:b0:93:26:c1:
0c:35:82:1d:6b:f8:a3:48:66:7d:73:e1:84:fd:e0:
b0:7b:49:da:80:4c:38:9f:60:b9:3d:86:e7:7c:a9:
9b:b7:0b:23:aa:16:05:9c:8c:fa:6a:f8:c0:3b:7d:
d4:00:08:15:ce:43:e2:cc:8f:d6:66:ff:fb:65:40:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:8F:78:D5:B2:54:88:D0:D4:E5:0A:D9:3D:8C:14:7B:9E:6C:A3
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.204.0/24
152.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d5:22:93:00:9b:33:2d:46:97:95:4f:66:08:17:10:5e:52:
8e:2e:86:86:51:e2:06:5c:6e:43:30:03:0c:59:73:dc:61:22:
18:4e:f0:a3:9e:c4:d1:82:83:c8:14:89:80:50:c2:45:89:ce:
54:18:a4:09:87:8a:c2:69:56:be:ce:f0:b6:ee:1e:d3:5b:0f:
1a:a5:be:28:69:b1:29:89:76:f7:9d:53:73:15:d1:cd:2a:fe:
90:c3:33:cd:8b:f3:80:9d:b7:10:ea:56:fd:5f:3c:12:97:95:
4e:7e:1b:ff:32:57:13:96:01:6b:32:93:2f:d0:ac:75:bf:6e:
f4:e2:53:be:03:74:8a:d9:af:ea:b1:4c:7e:ac:b0:3c:8b:9f:
db:c4:fc:94:1a:3e:ba:e9:d8:f3:22:64:18:d7:f1:bd:ae:ad:
85:ca:fa:5f:96:a9:2b:75:0d:bb:0f:aa:5a:ca:e1:3c:70:a3:
af:6f:c1:5f:48:30:e8:17:b4:59:cc:b3:ad:4f:a1:7f:35:9b:
06:38:0a:37:fb:c6:de:73:03:1b:41:47:5f:6b:76:f8:b1:86:
08:0b:98:d0:a0:ec:1c:8f:56:d1:8d:cf:c0:72:06:77:ab:e7:
9f:78:9c:00:da:02:59:96:96:7a:09:4e:9c:99:d4:1e:2f:f7:
fb:cd:36:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4RPuxN1WJPhgTiE1FRy71GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwNTEwMDkzNjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2U5OGY3OGQ1YjI1NDg4ZDBkNGU1MGFkOTNkOGMxNDdiOWU2Y2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Sgf4oKe9iyGaeOpFLFaDwa5Twg
MsECufGts8mddaG6oXPLngJfnkXCHj+G3z50A0l4rRSJIRDX/dW8lHAHTb9X5AYB
cfdds6NGmhTcjCn5kLo0QBXBnd1UQtRBAL9n2UnBoG+joRY0VNjS8K1jUoypVdZ0
MxfLNZcOR8PIWEgQ+RE4fuLraDW9neWdHInoBgzEkFuAu5qkjsTAZpAE5fio3abR
gsfYJO5y5fU9SBYKPswfvpTL7FzL0w6i0LCTJsEMNYIda/ijSGZ9c+GE/eCwe0na
gEw4n2C5PYbnfKmbtwsjqhYFnIz6avjAO33UAAgVzkPizI/WZv/7ZUCkfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFfpj3jVslSI0NTlCtk9jBR7nmyjMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvVi1tUGVOV3lWSWpRMU9VSzJUMk1GSHVlYktNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRzMAwQA
mFnBMA0GCSqGSIb3DQEBCwUAA4IBAQAk1SKTAJszLUaXlU9mCBcQXlKOLoaGUeIG
XG5DMAMMWXPcYSIYTvCjnsTRgoPIFImAUMJFic5UGKQJh4rCaVa+zvC27h7TWw8a
pb4oabEpiXb3nVNzFdHNKv6QwzPNi/OAnbcQ6lb9XzwSl5VOfhv/MlcTlgFrMpMv
0Kx1v2704lO+A3SK2a/qsUx+rLA8i5/bxPyUGj666djzImQY1/G9rq2Fyvpflqkr
dQ27D6payuE8cKOvb8FfSDDoF7RZzLOtT6F/NZsGOAo3+8becwMbQUdfa3b4sYYI
C5jQoOwcj1bRjc/AcgZ3q+efeJwA2gJZlpZ6CU6cmdQeL/f7zTbg
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:44 2026 by rpki-client