Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R0xDBDaXrV_eyAz8WkN_JQUZ4AE.roa
File: R0xDBDaXrV_eyAz8WkN_JQUZ4AE.roa (raw, json)
Hash identifier: W6wQ1LNspk01Db2gHMVWYb9tj9T7c9Bu4eVPrScws8A=
Subject key identifier: 47:4C:43:04:36:97:AD:5F:DE:C8:0C:FC:5A:43:7F:25:05:19:E0:01
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019FEB10C48F6F0B42EDAE86673EDFA5300F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R0xDBDaXrV_eyAz8WkN_JQUZ4AE.roa
Signing time: Mon 10 Aug 2026 09:46:12 +0000
ROA not before: Mon 10 Aug 2026 09:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60707
IP address blocks: 89.251.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:10:c4:8f:6f:0b:42:ed:ae:86:67:3e:df:a5:30:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 10 09:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474c43043697ad5fdec80cfc5a437f250519e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8f:ee:14:6e:49:c2:91:ba:2d:b0:29:58:5d:
c9:e4:97:67:38:a7:eb:27:66:75:66:78:45:cc:c4:
3a:82:74:69:a4:df:47:6e:2f:6d:c8:84:78:12:1d:
5c:de:94:d2:3a:6b:8d:18:5d:ea:b3:d3:39:be:2e:
e2:61:56:b3:74:ad:77:f1:7b:cc:37:6e:cb:ca:62:
e7:04:52:24:2c:31:05:26:03:f4:c9:d3:f3:0d:32:
7c:4a:0f:79:e6:15:80:7c:55:00:89:b1:e0:14:af:
76:1c:13:c6:4f:9e:36:ac:e6:78:d5:c8:87:e7:39:
f9:dc:19:1a:f5:f9:ba:c6:de:fd:3c:c3:27:11:6c:
da:bb:ff:60:5f:7c:06:57:1c:d1:21:c6:c4:04:fe:
e4:31:52:7e:f3:bc:f3:c9:fb:98:e8:81:08:1a:63:
db:74:d5:f8:a9:f0:5e:e0:d2:52:cd:e9:51:aa:66:
dd:fa:ba:5c:21:c1:c6:02:55:1f:a7:df:8f:2d:e9:
ec:35:b4:3f:e8:e9:af:31:5e:d3:aa:6a:0b:e3:a0:
fb:8e:29:45:97:21:65:52:67:48:a1:e7:83:7b:3e:
d7:9e:67:f6:4f:30:af:18:ff:d4:db:79:b4:2f:fe:
1d:9a:92:aa:9f:e3:dd:4a:cb:d0:73:fb:80:e0:20:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:43:04:36:97:AD:5F:DE:C8:0C:FC:5A:43:7F:25:05:19:E0:01
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R0xDBDaXrV_eyAz8WkN_JQUZ4AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
35:18:cb:e1:8b:be:22:51:5a:23:c3:72:bb:5a:39:d6:fb:29:
99:41:87:ad:6b:07:c6:ff:9f:6d:30:b9:7f:93:84:b1:1a:f1:
39:e8:33:b4:87:d2:6b:83:52:cd:bb:a3:61:34:3e:15:50:75:
53:c6:1e:f2:a6:21:15:df:8f:7b:8c:0a:e1:46:66:15:53:44:
a0:d7:96:1e:ea:9e:07:46:e6:f1:71:0f:12:26:fe:8a:ef:2d:
51:3c:a5:9e:50:f5:a5:64:db:ce:d8:c4:d6:eb:5d:e1:f1:87:
2b:e2:5f:0b:b6:a4:03:a6:98:19:1c:97:1a:fd:2b:eb:76:b4:
e5:5c:e5:62:ca:6d:ca:f3:08:7e:1b:a0:df:6a:ab:57:32:05:
d5:23:93:02:f3:a6:ab:c9:47:d0:d2:a2:93:4e:fd:43:a1:41:
85:23:dc:db:22:de:84:de:ab:e5:ed:5e:75:28:7a:15:e6:38:
ce:53:d0:5f:a5:1b:f7:a4:25:22:86:07:a0:65:9b:09:99:a9:
9f:2a:4b:4b:b1:ef:0e:89:29:9c:bc:94:68:5d:75:dd:b0:3c:
cc:9b:d8:aa:5e:1d:c4:e7:f4:7b:4d:a7:74:15:ba:78:5a:f2:
54:c2:d5:78:27:4b:05:a8:36:b6:a9:87:33:af:74:5c:8c:35:
82:2e:ab:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/rEMSPbwtC7a6GZz7fpTAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwODEwMDk0NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzRjNDMwNDM2OTdhZDVmZGVjODBjZmM1YTQzN2YyNTA1MTllMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84/uFG5JwpG6LbApWF3J5JdnOKfr
J2Z1ZnhFzMQ6gnRppN9Hbi9tyIR4Eh1c3pTSOmuNGF3qs9M5vi7iYVazdK138XvM
N27LymLnBFIkLDEFJgP0ydPzDTJ8Sg955hWAfFUAibHgFK92HBPGT542rOZ41ciH
5zn53Bka9fm6xt79PMMnEWzau/9gX3wGVxzRIcbEBP7kMVJ+87zzyfuY6IEIGmPb
dNX4qfBe4NJSzelRqmbd+rpcIcHGAlUfp9+PLensNbQ/6OmvMV7TqmoL46D7jilF
lyFlUmdIoeeDez7Xnmf2TzCvGP/U23m0L/4dmpKqn+PdSsvQc/uA4CCQtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdMQwQ2l61f3sgM/FpDfyUFGeABMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvUjB4REJEYVhyVl9leUF6OFdrTl9KUVVaNEFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsXMA0G
CSqGSIb3DQEBCwUAA4IBAQA1GMvhi74iUVojw3K7WjnW+ymZQYetawfG/59tMLl/
k4SxGvE56DO0h9Jrg1LNu6NhND4VUHVTxh7ypiEV3497jArhRmYVU0Sg15Ye6p4H
RubxcQ8SJv6K7y1RPKWeUPWlZNvO2MTW613h8Ycr4l8LtqQDppgZHJca/SvrdrTl
XOViym3K8wh+G6DfaqtXMgXVI5MC86aryUfQ0qKTTv1DoUGFI9zbIt6E3qvl7V51
KHoV5jjOU9BfpRv3pCUihgegZZsJmamfKktLse8OiSmcvJRoXXXdsDzMm9iqXh3E
5/R7Tad0Fbp4WvJUwtV4J0sFqDa2qYczr3RcjDWCLqtI
-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:10 2026 by rpki-client