Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4noyBMzOCNKYuK7WX_dw4pE45No.roa
File: 4noyBMzOCNKYuK7WX_dw4pE45No.roa (raw, json)
Hash identifier: Yr1+eCyVe6rAqEGkfCOpgvBoF+WvkrURk9Nzz/EX8RM=
Subject key identifier: E2:7A:32:04:CC:CE:08:D2:98:B8:AE:D6:5F:F7:70:E2:91:38:E4:DA
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A04706D4C157DF366A0A0C1751350DEC4C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4noyBMzOCNKYuK7WX_dw4pE45No.roa
Signing time: Fri 28 Aug 2026 06:20:25 +0000
ROA not before: Fri 28 Aug 2026 06:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 89.21.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:06:d4:c1:57:df:36:6a:0a:0c:17:51:35:0d:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 28 06:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e27a3204ccce08d298b8aed65ff770e29138e4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:d3:41:11:14:f5:f2:18:f8:97:10:a7:c3:
13:8f:b4:1d:ed:6e:24:d1:68:b2:aa:5e:9c:64:9c:
4f:b8:62:37:48:91:a3:af:fe:cf:1d:2a:18:87:19:
47:ab:00:7a:62:f3:d8:84:1a:e6:95:08:10:41:6a:
f3:1a:04:f6:a9:5a:30:c0:81:ff:49:eb:5c:a7:13:
94:01:51:75:fa:59:1d:ab:32:51:a8:2d:61:d1:ee:
cb:2f:4d:81:ef:b0:88:c0:c4:f2:3b:04:04:a7:bf:
1a:b6:e4:75:c6:f6:6c:b0:68:db:d9:81:90:35:63:
43:83:d7:d5:fb:cc:ee:be:db:dc:c8:1c:5c:4d:a9:
30:26:05:6d:c8:eb:e7:7e:d0:4a:c6:3f:06:48:fe:
d6:49:fb:62:52:52:32:39:12:3a:00:c6:0c:85:76:
c5:79:c5:63:50:4c:9f:11:d8:0d:03:3b:8b:91:05:
29:f9:93:c3:95:5d:59:a4:2b:8f:3d:d0:65:73:b2:
78:c7:1a:be:a7:97:ed:99:30:aa:6a:48:09:9d:1b:
e8:d9:f7:f9:f5:48:b7:c2:74:52:ce:b1:81:77:e7:
cf:59:fa:a3:58:fd:d8:e2:cc:c5:b4:ce:50:fd:2c:
a4:1b:a9:da:42:fb:db:55:27:0c:48:a9:0e:77:4c:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:32:04:CC:CE:08:D2:98:B8:AE:D6:5F:F7:70:E2:91:38:E4:DA
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4noyBMzOCNKYuK7WX_dw4pE45No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.87.0/24
Signature Algorithm: sha256WithRSAEncryption
38:07:24:53:1c:93:0a:5c:3d:4d:76:4d:cd:23:25:25:0b:5e:
f4:12:98:5a:48:12:21:63:7a:4b:ba:7d:0f:ba:80:1a:19:a8:
a1:19:12:98:dd:93:f7:16:e9:4d:fb:7b:ce:d7:48:e4:66:9c:
a4:a9:3e:b8:66:2d:db:77:83:0a:60:03:dd:ce:61:75:e5:b3:
4a:91:b7:ee:6f:32:63:3c:75:7b:4e:9a:0e:bf:d2:dc:e0:7f:
a8:09:47:b9:4c:90:1c:8d:a0:49:01:cc:cc:7a:93:5f:50:f9:
55:e0:34:79:1e:59:41:11:fa:41:48:16:23:ea:18:3d:a8:b9:
43:50:9f:b6:e4:c4:55:21:ca:b1:b6:bc:1d:7f:eb:98:26:7f:
af:b4:5d:aa:d4:a2:f6:6f:bd:d6:9b:bd:11:35:91:74:33:c8:
72:50:e8:a8:93:42:ae:44:4a:44:f2:d7:5d:25:70:2e:c0:ad:
4b:31:11:ab:8a:eb:47:ba:83:4a:69:87:82:33:02:9f:08:85:
e6:15:d1:f4:4c:5c:5a:06:d8:23:e1:ae:67:d4:7b:e1:f3:5f:
89:42:a2:48:db:f6:e2:dc:26:d9:28:6d:22:8b:0d:36:db:1f:
2d:07:d2:ac:b9:5a:96:aa:98:46:3e:58:c4:f1:3f:85:f6:84:
1f:94:60:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHBtTBV982agoMF1E1DexMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwODI4MDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjdhMzIwNGNjY2UwOGQyOThiOGFlZDY1ZmY3NzBlMjkxMzhlNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozDTQREU9fIY+JcQp8MTj7Qd7W4k
0Wiyql6cZJxPuGI3SJGjr/7PHSoYhxlHqwB6YvPYhBrmlQgQQWrzGgT2qVowwIH/
SetcpxOUAVF1+lkdqzJRqC1h0e7LL02B77CIwMTyOwQEp78atuR1xvZssGjb2YGQ
NWNDg9fV+8zuvtvcyBxcTakwJgVtyOvnftBKxj8GSP7WSftiUlIyORI6AMYMhXbF
ecVjUEyfEdgNAzuLkQUp+ZPDlV1ZpCuPPdBlc7J4xxq+p5ftmTCqakgJnRvo2ff5
9Ui3wnRSzrGBd+fPWfqjWP3Y4szFtM5Q/SykG6naQvvbVScMSKkOd0zGDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJ6MgTMzgjSmLiu1l/3cOKROOTaMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvNG5veUJNek9DTktZdUs3V1hfZHc0cEU0NU5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRVXMA0G
CSqGSIb3DQEBCwUAA4IBAQA4ByRTHJMKXD1Ndk3NIyUlC170EphaSBIhY3pLun0P
uoAaGaihGRKY3ZP3FulN+3vO10jkZpykqT64Zi3bd4MKYAPdzmF15bNKkbfubzJj
PHV7TpoOv9Lc4H+oCUe5TJAcjaBJAczMepNfUPlV4DR5HllBEfpBSBYj6hg9qLlD
UJ+25MRVIcqxtrwdf+uYJn+vtF2q1KL2b73Wm70RNZF0M8hyUOiok0KuREpE8tdd
JXAuwK1LMRGriutHuoNKaYeCMwKfCIXmFdH0TFxaBtgj4a5n1Hvh81+JQqJI2/bi
3CbZKG0iiw022x8tB9KsuVqWqphGPljE8T+F9oQflGDf
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:42:07 2026 by rpki-client