Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/Um8x4FnVBBKSkcy47VZrVv_LDxE.roa
File: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (raw, json)
Hash identifier: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=
Subject key identifier: 52:6F:31:E0:59:D5:04:12:92:91:CC:B8:ED:56:6B:56:FF:CB:0F:11
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019DD4DD5890B2F589065E717036E19C253D
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/Um8x4FnVBBKSkcy47VZrVv_LDxE.roa
Signing time: Tue 28 Apr 2026 16:12:49 +0000
ROA not before: Tue 28 Apr 2026 16:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213522
IP address blocks: 89.150.46.0/24 maxlen: 24
89.150.47.0/24 maxlen: 24
89.150.52.0/24 maxlen: 24
89.150.62.0/24 maxlen: 24
185.48.5.0/24 maxlen: 24
2a14:ec0::/29 maxlen: 48
2a14:ec0:16::/48 maxlen: 48
2a14:ec0:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:dd:58:90:b2:f5:89:06:5e:71:70:36:e1:9c:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Apr 28 16:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=526f31e059d504129291ccb8ed566b56ffcb0f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:07:e8:66:b2:4c:64:4d:96:7a:a0:98:55:
db:41:c3:c1:10:dd:93:aa:a0:01:49:0b:d9:20:a6:
62:71:d1:5a:72:6f:94:d1:e1:c1:ac:b4:59:ed:6c:
88:70:9a:ae:19:ce:35:1a:ef:69:d2:67:80:25:e1:
d5:83:61:cb:0b:42:58:2f:ed:e0:9f:2c:7a:25:af:
01:01:33:92:28:f3:21:8b:16:a8:1b:28:62:86:f2:
8e:ed:56:72:da:ae:28:0d:9a:fe:8a:a1:fc:bb:73:
94:9b:fc:20:2a:c8:aa:8a:fe:de:99:c4:49:60:47:
52:94:a4:55:e9:38:41:39:6f:c1:0b:78:1a:d1:13:
2c:e7:c5:c3:58:82:f4:e5:56:c0:ea:db:ea:75:55:
9d:40:16:de:c8:1c:9e:80:75:86:e8:dc:76:ed:dc:
db:f6:fe:2d:94:9b:4f:51:eb:e2:2e:d4:cb:21:8f:
a3:23:63:4d:dc:1e:20:9b:15:7a:0e:1b:9b:46:c6:
2b:7d:4c:67:2c:ca:14:cb:f0:08:71:e8:6f:5f:b7:
23:f6:b6:6b:a1:b6:82:59:58:37:6f:96:f9:29:db:
ec:1c:2d:3e:12:83:ac:4e:6e:86:e3:12:46:b2:13:
49:51:d7:cd:93:a8:23:f8:0a:02:b1:9e:c3:7f:f7:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6F:31:E0:59:D5:04:12:92:91:CC:B8:ED:56:6B:56:FF:CB:0F:11
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/Um8x4FnVBBKSkcy47VZrVv_LDxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.46.0/23
89.150.52.0/24
89.150.62.0/24
185.48.5.0/24
IPv6:
2a14:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:14:c2:96:00:58:bf:50:d1:33:95:f5:f0:22:66:57:2e:eb:
15:79:24:29:05:94:56:1f:70:a5:6e:e0:cc:64:3b:38:7a:73:
55:f2:15:58:28:89:ea:cf:c0:11:18:19:5d:8e:a3:60:b4:16:
60:c9:6f:0f:6f:29:40:24:6f:bd:90:34:ce:ab:b7:66:94:16:
ee:b9:8f:7d:55:fb:87:81:32:61:92:f6:dd:c8:c1:7a:77:6e:
4a:3b:7b:2a:69:e4:e4:02:c2:a8:d7:16:38:0a:ba:f6:3c:cd:
f8:fa:83:74:1d:02:0e:5d:7f:f9:66:3b:f2:f1:11:8b:1e:ec:
15:c2:3a:f9:bd:e8:25:5d:f3:33:e5:01:d3:9e:fb:52:04:0f:
9e:12:db:b7:46:cb:4b:2c:05:ba:67:9e:00:79:68:28:e5:57:
d0:b7:42:0c:17:d4:1f:20:fa:30:0f:1f:e5:25:3a:e4:36:9d:
1c:16:0c:ce:55:b4:8c:1a:a8:00:84:bc:bb:5d:84:94:e2:58:
b2:5c:0b:fd:09:29:a7:c4:b2:d7:ba:87:94:7a:0a:0a:49:42:
19:71:13:e4:71:c7:d1:76:2d:6a:4a:a0:17:c5:91:67:4f:d4:
80:7a:73:71:b5:6b:4f:d9:99:c1:da:4c:b5:95:57:63:17:5d:
09:1f:e4:86
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ3U3ViQsvWJBl5xcDbhnCU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjYwNDI4MTYxMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjZmMzFlMDU5ZDUwNDEyOTI5MWNjYjhlZDU2NmI1NmZmY2IwZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogkH6GayTGRNlnqgmFXbQcPBEN2T
qqABSQvZIKZicdFacm+U0eHBrLRZ7WyIcJquGc41Gu9p0meAJeHVg2HLC0JYL+3g
nyx6Ja8BATOSKPMhixaoGyhihvKO7VZy2q4oDZr+iqH8u3OUm/wgKsiqiv7emcRJ
YEdSlKRV6ThBOW/BC3ga0RMs58XDWIL05VbA6tvqdVWdQBbeyByegHWG6Nx27dzb
9v4tlJtPUeviLtTLIY+jI2NN3B4gmxV6DhubRsYrfUxnLMoUy/AIcehvX7cj9rZr
obaCWVg3b5b5KdvsHC0+EoOsTm6G4xJGshNJUdfNk6gj+AoCsZ7Df/erVwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFJvMeBZ1QQSkpHMuO1Wa1b/yw8RMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvVW04eDRGblZCQktTa2N5NDdWWnJWdl9MRHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBWZYuAwQA
WZY0AwQAWZY+AwQAuTAFMA0EAgACMAcDBQMqFA7AMA0GCSqGSIb3DQEBCwUAA4IB
AQCmFMKWAFi/UNEzlfXwImZXLusVeSQpBZRWH3ClbuDMZDs4enNV8hVYKInqz8AR
GBldjqNgtBZgyW8PbylAJG+9kDTOq7dmlBbuuY99VfuHgTJhkvbdyMF6d25KO3sq
aeTkAsKo1xY4Crr2PM34+oN0HQIOXX/5Zjvy8RGLHuwVwjr5veglXfMz5QHTnvtS
BA+eEtu3RstLLAW6Z54AeWgo5VfQt0IMF9QfIPowDx/lJTrkNp0cFgzOVbSMGqgA
hLy7XYSU4liyXAv9CSmnxLLXuoeUegoKSUIZcRPkccfRdi1qSqAXxZFnT9SAenNx
tWtP2ZnB2ky1lVdjF10JH+SG
-----END CERTIFICATE-----
Generated at Wed May 13 10:23:20 2026 by rpki-client