Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/D_7l4IRtiGgtLkXWFXmZzoeBsKM.roa
File: D_7l4IRtiGgtLkXWFXmZzoeBsKM.roa (raw, json)
Hash identifier: 74770mWn3X7ul0+qNxwSszdIcHgZFIxfun6pO5jcCYA=
Subject key identifier: 0F:FE:E5:E0:84:6D:88:68:2D:2E:45:D6:15:79:99:CE:87:81:B0:A3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A01D93E9EA1DA32115358D3B071398AD3F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/D_7l4IRtiGgtLkXWFXmZzoeBsKM.roa
Signing time: Thu 20 Aug 2026 05:10:27 +0000
ROA not before: Thu 20 Aug 2026 05:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:93:e9:ea:1d:a3:21:15:35:8d:3b:07:13:98:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 20 05:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ffee5e0846d88682d2e45d6157999ce8781b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:9b:2e:10:cd:87:0b:6c:dd:9e:85:88:d5:
64:bc:be:03:8b:c0:11:e7:e1:3b:bf:cc:00:7a:ed:
c4:2f:f6:18:da:5f:28:76:59:ff:b2:55:5b:f0:4b:
b2:7f:e5:43:a3:66:bb:10:eb:ea:a8:70:f2:c9:d1:
e5:5c:e9:bc:95:9f:41:03:4b:cf:27:f3:cf:a4:d9:
a4:5e:6f:e9:9d:7e:19:81:ab:0f:b8:57:02:cf:ce:
c5:5b:b0:13:ce:69:30:90:bd:b7:96:59:53:22:17:
0b:05:26:a0:68:e0:64:fd:21:22:7f:10:20:e4:74:
71:1a:6a:80:95:f4:cf:22:9c:31:e4:b3:23:69:6a:
03:09:48:0a:d7:3f:5f:29:c9:6d:0e:1a:be:e1:36:
46:4a:12:8c:ba:c9:a8:94:f2:43:55:3f:4b:43:f9:
32:b7:53:ad:ff:b9:57:72:dd:a4:61:5c:a0:ea:e8:
ae:7c:92:8d:bd:4f:62:25:a4:ae:9b:2b:e8:9d:22:
4e:56:b0:b0:5a:af:60:15:58:1a:a7:f6:b4:32:1f:
c8:f4:6a:24:6c:bf:b8:09:17:d0:60:3e:da:6a:52:
41:1f:6a:fa:3c:e6:29:7e:38:f2:bf:bb:19:e4:d1:
da:db:1a:ac:59:1c:e2:5f:e1:27:a5:f6:e8:d9:e9:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FE:E5:E0:84:6D:88:68:2D:2E:45:D6:15:79:99:CE:87:81:B0:A3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/D_7l4IRtiGgtLkXWFXmZzoeBsKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c6:a0:94:2f:59:8b:23:27:f0:32:1c:2d:a4:b3:88:cf:e3:
ca:9f:2e:ee:59:1e:c7:57:62:65:b6:09:83:2c:fe:bc:d0:0b:
3e:70:72:55:ac:77:0f:c4:18:31:47:51:cd:1f:a1:60:78:a1:
cb:ab:01:36:b3:2c:7f:9c:0a:90:a4:49:2a:d1:6b:8c:43:bc:
b4:5f:0c:be:c8:9b:21:29:19:56:d1:75:d8:ea:aa:c9:c8:95:
b0:e8:d1:73:51:4a:7a:c5:31:e9:6d:37:2d:47:bb:cb:7e:1e:
24:50:b7:26:f9:4d:95:91:05:db:8d:5e:c6:62:10:19:c1:4c:
a4:87:7d:85:ed:f1:bd:57:1e:b0:81:2c:e3:a2:cf:bb:c6:04:
ce:45:f3:c5:ed:1d:78:51:59:ca:fa:21:fb:8c:19:4d:ca:7a:
fe:2a:21:a3:60:6f:a0:e1:5e:f0:f3:41:16:69:cd:e1:ed:13:
d2:e1:14:98:c7:e0:bd:b9:bf:2e:c0:a7:b5:03:09:04:74:af:
48:08:bb:96:06:dc:57:a9:fa:f2:15:bb:3f:d9:b9:e1:18:66:
c9:7b:27:cc:6a:a3:e1:98:3c:e5:23:3d:5a:94:3f:08:6d:93:
dc:2e:20:be:8e:f5:7f:b1:af:21:60:9e:10:98:63:86:24:f4:
23:54:41:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAdk+nqHaMhFTWNOwcTmK0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwODIwMDUxMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmZlZTVlMDg0NmQ4ODY4MmQyZTQ1ZDYxNTc5OTljZTg3ODFiMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlGbLhDNhwts3Z6FiNVkvL4Di8AR
5+E7v8wAeu3EL/YY2l8odln/slVb8Euyf+VDo2a7EOvqqHDyydHlXOm8lZ9BA0vP
J/PPpNmkXm/pnX4ZgasPuFcCz87FW7ATzmkwkL23lllTIhcLBSagaOBk/SEifxAg
5HRxGmqAlfTPIpwx5LMjaWoDCUgK1z9fKcltDhq+4TZGShKMusmolPJDVT9LQ/ky
t1Ot/7lXct2kYVyg6uiufJKNvU9iJaSumyvonSJOVrCwWq9gFVgap/a0Mh/I9Gok
bL+4CRfQYD7aalJBH2r6POYpfjjyv7sZ5NHa2xqsWRziX+Enpfbo2ekk1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/+5eCEbYhoLS5F1hV5mc6HgbCjMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvRF83bDRJUnRpR2d0TGtYV0ZYbVp6b2VCc0tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfscMA0G
CSqGSIb3DQEBCwUAA4IBAQAqxqCUL1mLIyfwMhwtpLOIz+PKny7uWR7HV2JltgmD
LP680As+cHJVrHcPxBgxR1HNH6FgeKHLqwE2syx/nAqQpEkq0WuMQ7y0Xwy+yJsh
KRlW0XXY6qrJyJWw6NFzUUp6xTHpbTctR7vLfh4kULcm+U2VkQXbjV7GYhAZwUyk
h32F7fG9Vx6wgSzjos+7xgTORfPF7R14UVnK+iH7jBlNynr+KiGjYG+g4V7w80EW
ac3h7RPS4RSYx+C9ub8uwKe1AwkEdK9ICLuWBtxXqfryFbs/2bnhGGbJeyfMaqPh
mDzlIz1alD8IbZPcLiC+jvV/sa8hYJ4QmGOGJPQjVEFo
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:25 2026 by rpki-client