Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/giEqSyUlnpKufkFxpxL-vcIEbLY.roa
File: giEqSyUlnpKufkFxpxL-vcIEbLY.roa (raw, json)
Hash identifier: Lq7sswVA/b35KDWtX+rICh4sxktFg88jPftJFnInBi0=
Subject key identifier: 82:21:2A:4B:25:25:9E:92:AE:7E:41:71:A7:12:FE:BD:C2:04:6C:B6
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A1D2080E3C4D392E4DE6F94552C91B9F45
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/giEqSyUlnpKufkFxpxL-vcIEbLY.roa
Signing time: Thu 12 Nov 2026 23:11:45 +0000
ROA not before: Thu 12 Nov 2026 23:11:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 89.106.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d2:08:0e:3c:4d:39:2e:4d:e6:f9:45:52:c9:1b:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Nov 12 23:11:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82212a4b25259e92ae7e4171a712febdc2046cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:3f:e5:fe:45:45:0d:c4:9c:36:1f:5a:c7:
1e:5b:87:f2:b3:bd:04:ca:da:e1:24:08:fe:1a:46:
23:08:b1:6c:df:1b:55:3f:1f:4a:1d:5c:2a:3a:a3:
91:f8:03:93:b9:4d:6d:f2:0f:21:03:d6:2f:9e:a6:
fb:55:1c:26:2f:18:9d:85:0d:e9:43:ce:23:da:bd:
53:4e:08:33:a8:ed:57:de:f9:9e:1d:8e:de:de:3d:
05:09:67:25:1a:41:9f:b8:3a:dc:5b:51:cc:4a:6c:
13:97:bd:b6:c0:3a:e4:0d:64:11:72:c0:f7:e8:d5:
7d:05:82:7a:21:50:d3:f1:ca:d5:1d:5a:44:95:cd:
10:e8:81:f9:6d:79:bc:55:35:7e:75:0e:60:1c:bf:
50:cf:78:c6:92:67:5f:31:19:20:ae:7c:38:b5:4f:
a9:28:83:da:85:f7:df:cc:37:ba:b8:9b:37:0c:a7:
d0:ca:f6:13:40:d8:5f:34:bd:10:1c:09:45:51:a8:
47:58:1a:70:8d:54:24:d7:da:72:62:12:d6:b7:4e:
7b:03:bd:b3:46:33:8a:5a:6b:60:29:a8:21:dd:98:
1f:38:45:e2:7a:44:ae:e6:3e:9d:01:f1:e3:36:35:
c0:ce:c7:55:90:5d:79:34:e2:3c:dd:09:1f:0f:59:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:21:2A:4B:25:25:9E:92:AE:7E:41:71:A7:12:FE:BD:C2:04:6C:B6
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/giEqSyUlnpKufkFxpxL-vcIEbLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bc:4b:c1:26:3f:b0:70:a0:6c:d2:63:8e:f9:5b:0e:4c:2e:
04:07:6d:7c:f9:49:38:6c:8d:02:be:98:61:5d:48:86:58:11:
bf:24:69:62:2d:b8:b6:f2:74:b8:d5:bd:26:35:df:d4:66:5a:
40:40:83:5b:12:8d:b5:1b:2b:0e:df:bc:81:2a:0a:64:88:af:
3b:58:ea:d2:f4:26:7b:3d:1e:a7:9b:d4:9f:16:eb:0f:1b:63:
7e:78:75:f9:1a:ef:01:6e:46:69:75:a2:d3:e2:87:0d:df:b3:
5e:b4:20:20:f0:2c:03:da:1e:02:3d:5e:87:bb:bc:c1:68:74:
ca:db:49:ae:b0:14:23:83:a6:04:59:6c:da:a5:1e:60:62:06:
ea:83:6f:53:65:73:09:96:bc:4f:d4:62:73:cb:ff:09:1f:8c:
28:17:e5:25:d5:02:d5:20:9e:8e:50:74:76:0a:c5:ec:e9:56:
e3:a5:45:9d:22:5c:6a:ce:5f:91:60:32:2d:c2:13:79:74:ab:
f2:4b:59:f4:c6:cc:54:d8:20:d4:3a:e5:67:8d:e3:88:05:f8:
d1:18:b6:1f:69:39:b1:db:2c:c0:4a:65:67:5d:3e:fc:ae:bf:
c6:e5:11:21:07:9d:48:4c:bf:54:65:01:d3:dd:a2:36:42:ad:
9d:20:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:29 2026 by rpki-client