Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RMEWlq93VhxQXcLdT5moY82ocBk.roa
File: RMEWlq93VhxQXcLdT5moY82ocBk.roa (raw, json)
Hash identifier: 2bityMDzXWA1TcNGnPX6WNkHSYMbHnG0CYZjqcxESpA=
Subject key identifier: 44:C1:16:96:AF:77:56:1C:50:5D:C2:DD:4F:99:A8:63:CD:A8:70:19
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A14DEE2322BD37F0D093AE8ECDE8E28DEB
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RMEWlq93VhxQXcLdT5moY82ocBk.roa
Signing time: Sun 18 Oct 2026 07:33:34 +0000
ROA not before: Sun 18 Oct 2026 07:33:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:ee:23:22:bd:37:f0:d0:93:ae:8e:cd:e8:e2:8d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 18 07:33:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44c11696af77561c505dc2dd4f99a863cda87019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:9b:06:0b:f5:e1:f5:4d:cf:6f:aa:79:1a:
42:61:cb:79:fa:de:df:53:a0:4c:18:f2:2b:79:70:
8c:d8:68:f2:06:8c:3c:b0:31:d2:c2:93:d4:20:03:
ed:fc:ba:b1:9a:f9:d9:1e:a9:30:f7:71:13:38:68:
07:b1:75:ce:c6:d1:6f:8a:68:fc:1f:94:45:11:44:
80:fa:16:de:1a:65:e3:4b:e6:27:80:83:1e:3e:b5:
a4:e3:e2:aa:59:42:f1:28:4e:a8:38:e4:d3:6e:d0:
83:04:74:94:ee:62:ab:19:4c:6f:3f:ae:4e:92:99:
c4:0e:a4:f1:1f:3a:c4:3b:13:5a:2e:01:c7:b9:5b:
d3:3a:39:1e:f3:9a:4a:9f:eb:3d:4b:77:3b:42:ed:
65:89:63:ee:ed:b8:f0:97:0c:fd:59:d5:79:b5:51:
e8:e4:98:41:d9:62:bc:4e:0d:56:9e:82:4e:4a:ea:
f6:06:30:cd:df:c4:53:71:40:eb:5b:69:00:37:96:
85:55:47:28:97:0c:4d:83:95:db:e3:7d:34:59:08:
d5:d7:b4:87:a6:47:79:8a:e2:0b:66:97:e0:2b:06:
c3:a6:86:37:14:32:e9:c7:ff:3e:3a:63:7c:3a:56:
73:92:07:b9:36:15:9d:ba:15:89:57:1e:9c:30:b8:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:16:96:AF:77:56:1C:50:5D:C2:DD:4F:99:A8:63:CD:A8:70:19
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RMEWlq93VhxQXcLdT5moY82ocBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
89.42.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:83:ee:7b:69:d9:dd:93:19:e1:dd:0f:33:7c:7c:a6:8c:52:
50:e0:a6:1d:a0:56:24:f0:ff:ca:99:0a:c0:c6:c1:c2:98:ec:
51:d6:3e:45:13:2e:c8:d9:46:7c:22:7b:a4:21:ef:8f:e9:c3:
c2:9a:f9:6f:1b:ef:e3:4f:81:4f:12:e8:da:d6:1f:01:55:80:
6b:9f:4d:2b:91:5b:55:0b:ff:f2:cb:d8:a4:a3:fa:eb:d5:57:
d2:ef:5e:ae:8f:35:2a:e7:fe:09:ff:31:ac:f9:11:c7:24:45:
06:84:08:81:d9:d5:23:22:5c:2b:13:bc:89:89:8b:1b:9d:e5:
99:13:ff:5a:66:f9:89:20:a4:19:8e:23:59:ee:58:1c:85:21:
bf:d2:19:1f:d9:bf:d6:63:36:98:8e:d2:a4:bd:21:40:66:da:
8f:4c:fe:b7:26:19:68:5e:5d:6a:44:57:3a:92:60:f9:6b:cf:
ff:ba:5c:18:0d:6e:7f:39:d4:43:bb:bb:f2:41:9b:bf:fd:24:
c6:00:87:09:55:5c:d3:86:3c:c7:10:94:fc:15:45:7b:16:ee:
e1:92:3c:28:15:1f:ab:22:95:7f:19:29:3e:8f:8c:d1:eb:53:
e4:26:ca:80:e9:a6:51:ec:da:e4:00:13:11:e1:bb:9d:56:bb:
b6:2e:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:55:45 2026 by rpki-client