Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/_rYwJ4TWHcF1y8EEzrygbXoHmpQ.roa
File: _rYwJ4TWHcF1y8EEzrygbXoHmpQ.roa (raw, json)
Hash identifier: wnNdXntzf9bziyX5dvKMHLfXpFRnvT7MtFHSvmWcYek=
Subject key identifier: FE:B6:30:27:84:D6:1D:C1:75:CB:C1:04:CE:BC:A0:6D:7A:07:9A:94
Certificate issuer: /CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Certificate serial: 019F236865F8AC70CB2841C0A7532226E5B7
Authority key identifier: 89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/_rYwJ4TWHcF1y8EEzrygbXoHmpQ.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39817
IP address blocks: 83.119.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:f8:ac:70:cb:28:41:c0:a7:53:22:26:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb6302784d61dc175cbc104cebca06d7a079a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:21:d9:2d:93:c5:0a:e7:5a:dd:e9:30:c4:
bd:6d:2a:17:fa:44:cb:f5:6e:0c:55:9c:7f:ad:2c:
bc:0b:dc:2f:4d:f7:55:4e:22:c3:d6:c8:08:38:fd:
c3:86:b0:7b:da:8e:63:be:27:da:b1:de:d1:6a:47:
ac:2b:ab:70:43:33:e9:82:f8:3d:0b:23:73:7a:a8:
27:3a:2e:cd:56:92:56:d0:10:0c:4c:af:9f:fc:1e:
59:bf:20:0c:aa:fc:47:bf:b8:06:51:63:fb:5e:30:
63:51:fb:85:2e:6a:22:5e:ec:d2:ca:c4:95:d3:95:
51:cc:55:ee:e7:17:b1:39:01:03:b3:d8:72:2a:5d:
bd:17:d5:de:d0:d5:46:fe:8d:7b:da:1d:20:d5:33:
5c:37:d5:59:02:66:69:1a:74:55:fb:90:f3:1e:cd:
80:b1:81:5b:04:c9:06:f9:1d:24:0a:ca:1d:ad:90:
55:39:c0:2a:ad:58:17:a7:7d:29:70:c5:16:85:8d:
c3:5d:86:38:be:e5:6d:80:f8:6e:2b:3f:95:bd:af:
04:06:5f:b7:96:a1:70:5d:9b:63:89:56:77:09:ea:
4c:5b:07:0f:94:2d:e4:0a:e5:7b:8d:f1:b6:73:8e:
21:ef:95:08:70:3e:29:d0:bc:bf:7e:d8:f7:87:27:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:30:27:84:D6:1D:C1:75:CB:C1:04:CE:BC:A0:6D:7A:07:9A:94
X509v3 Authority Key Identifier:
keyid:89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/_rYwJ4TWHcF1y8EEzrygbXoHmpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.14.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bc:9c:f5:31:cb:6e:e2:43:24:30:c7:e8:d7:8c:5f:c3:49:
7b:ba:bc:a9:bf:3f:4f:c2:58:ff:f0:2f:74:7f:49:5c:ae:fd:
8b:08:de:ac:be:01:99:ec:db:ef:4f:2f:e5:45:26:bd:82:9c:
5a:46:34:78:ff:fb:9a:93:76:56:e7:7f:da:f6:08:f8:76:ff:
e1:04:1d:e7:e8:40:09:dc:3e:41:0b:d1:ba:24:05:d6:5a:20:
cd:99:59:3b:41:29:d4:b2:7b:ba:bc:10:35:fa:a1:07:b6:61:
39:51:6d:25:16:e6:23:e3:9d:61:09:8c:d1:37:3e:e0:43:0a:
02:a6:62:90:de:02:d9:0b:4e:8a:2e:79:86:74:0c:49:97:b0:
5e:a5:e5:86:17:83:a4:fa:77:f2:8c:60:fe:0e:76:a4:6f:af:
45:21:2a:9f:e7:bc:cd:cf:a6:5b:99:92:e7:2d:f9:27:20:10:
62:66:b5:c2:e8:93:86:ce:2f:1f:fd:42:58:2c:00:bf:3e:49:
f5:4e:47:7e:86:32:ab:87:43:e6:0c:a2:b9:9a:82:d6:95:b9:
bd:0c:3b:e5:a7:b0:14:27:fc:c8:7f:ab:94:cc:60:6a:4d:1b:
a1:dc:14:e4:11:de:01:fe:14:c9:a2:67:50:aa:61:fd:e3:9c:
39:b1:d4:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaGX4rHDLKEHAp1MiJuW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTY1ZWFiNGE2MzJhYWRmODJmZDlhZmJjODY3ZDE2MWMx
YWM0Y2UwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWI2MzAyNzg0ZDYxZGMxNzVjYmMxMDRjZWJjYTA2ZDdhMDc5YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdoh2S2TxQrnWt3pMMS9bSoX+kTL
9W4MVZx/rSy8C9wvTfdVTiLD1sgIOP3DhrB72o5jvifasd7RakesK6twQzPpgvg9
CyNzeqgnOi7NVpJW0BAMTK+f/B5ZvyAMqvxHv7gGUWP7XjBjUfuFLmoiXuzSysSV
05VRzFXu5xexOQEDs9hyKl29F9Xe0NVG/o172h0g1TNcN9VZAmZpGnRV+5DzHs2A
sYFbBMkG+R0kCsodrZBVOcAqrVgXp30pcMUWhY3DXYY4vuVtgPhuKz+Vva8EBl+3
lqFwXZtjiVZ3CepMWwcPlC3kCuV7jfG2c44h75UIcD4p0Ly/ftj3hydscQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP62MCeE1h3BdcvBBM68oG16B5qUMB8GA1UdIwQY
MBaAFIlWXqtKYyqt+C/Zr7yGfRYcGsTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZaZXEwcGpLcTM0TDltdnZJWjlGaHdheE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvX3JZd0o0VFdIY0YxeThFRXpyeWdiWG9IbXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvaVZaZXEwcGpLcTM0TDltdnZJWjlGaHdheE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU3cOMA0G
CSqGSIb3DQEBCwUAA4IBAQCTvJz1Mctu4kMkMMfo14xfw0l7urypvz9Pwlj/8C90
f0lcrv2LCN6svgGZ7NvvTy/lRSa9gpxaRjR4//uak3ZW53/a9gj4dv/hBB3n6EAJ
3D5BC9G6JAXWWiDNmVk7QSnUsnu6vBA1+qEHtmE5UW0lFuYj451hCYzRNz7gQwoC
pmKQ3gLZC06KLnmGdAxJl7BepeWGF4Ok+nfyjGD+Dnakb69FISqf57zNz6ZbmZLn
LfknIBBiZrXC6JOGzi8f/UJYLAC/Pkn1Tkd+hjKrh0PmDKK5moLWlbm9DDvlp7AU
J/zIf6uUzGBqTRuh3BTkEd4B/hTJomdQqmH945w5sdTA
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:23 2026 by rpki-client