Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/f7OtLDmafykh_ezrHmW5EAPAM6k.roa
File: f7OtLDmafykh_ezrHmW5EAPAM6k.roa (raw, json)
Hash identifier: 3sJ01XhdIGzVM6EQOuugmwE8+iHD1kWf+68h9LZEvdI=
Subject key identifier: 7F:B3:AD:2C:39:9A:7F:29:21:FD:EC:EB:1E:65:B9:10:03:C0:33:A9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A05789A1AA46E89E1C2925F03A2FB356BE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/f7OtLDmafykh_ezrHmW5EAPAM6k.roa
Signing time: Mon 31 Aug 2026 11:17:12 +0000
ROA not before: Mon 31 Aug 2026 11:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 89.21.87.0/24 maxlen: 24
89.251.22.0/23 maxlen: 23
91.226.57.0/24 maxlen: 24
176.97.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:89:a1:aa:46:e8:9e:1c:29:25:f0:3a:2f:b3:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 31 11:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb3ad2c399a7f2921fdeceb1e65b91003c033a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:05:32:4f:ab:ae:34:c0:17:cd:57:6d:39:
e6:35:b5:96:b0:72:70:3a:c5:42:3d:20:14:97:70:
6f:92:a6:c5:ae:27:ff:08:44:93:32:6e:c0:6b:89:
cc:df:a4:76:b1:53:ac:00:f5:05:f3:c4:1a:f7:51:
7e:d3:b9:13:8f:14:21:4b:e4:1b:96:64:b2:d2:5b:
12:92:c9:7c:13:3c:38:20:04:57:34:af:ff:35:71:
f6:9e:e5:aa:6e:c3:28:c4:a1:ac:56:2f:2d:32:4c:
f0:65:fd:1d:dc:2b:9b:16:ac:a5:3d:ac:1a:35:8d:
fa:6f:f3:1d:b1:2c:d8:9a:61:a8:42:58:58:9c:b7:
ab:bc:d0:fb:a2:41:98:77:34:23:95:9a:95:f7:92:
69:e1:e5:54:ab:95:a3:08:38:d0:69:f9:1b:6c:04:
45:b9:fa:23:19:26:3f:f9:24:2d:25:3d:d3:70:ae:
fb:e5:20:ee:41:ad:f5:da:60:de:ce:a8:14:68:09:
3c:2a:29:4c:ec:06:0f:85:54:f1:0e:36:e6:38:4f:
43:7b:f5:65:53:24:f2:d5:ee:75:0a:4d:13:4f:42:
51:b3:c0:c7:88:0d:2c:2e:27:78:76:83:62:7b:c8:
b3:27:69:30:c5:df:36:89:1c:af:81:1b:a8:e1:e0:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:AD:2C:39:9A:7F:29:21:FD:EC:EB:1E:65:B9:10:03:C0:33:A9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/f7OtLDmafykh_ezrHmW5EAPAM6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.87.0/24
89.251.22.0/23
91.226.57.0/24
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:49:18:68:7b:90:d1:6a:c7:06:58:7c:3f:dc:9e:5d:2e:76:
1e:af:09:e8:0a:32:59:68:8f:1c:5b:b1:eb:c8:52:0f:b8:3b:
c1:84:50:2a:b4:bb:2d:af:5c:a3:fe:75:29:da:b7:6b:bb:8d:
70:09:47:1a:a2:03:de:5c:22:32:c7:20:a8:05:2c:dc:77:11:
58:10:7b:8c:a5:22:73:a6:7d:f3:91:73:5c:bf:88:0c:18:e0:
d9:8b:21:d9:96:80:f1:60:1f:42:28:46:68:59:75:a4:2f:96:
ad:23:ac:20:42:57:ae:d5:b0:a4:e8:5f:b8:d0:b3:77:cb:70:
e2:fa:ab:aa:a8:72:f9:f7:96:3b:8c:22:99:03:41:53:b2:58:
98:57:c3:34:af:fe:b9:5e:b9:97:da:bd:27:27:0b:8d:42:11:
26:b9:aa:f2:a5:30:28:df:02:8e:e9:12:e2:b6:38:62:81:ce:
db:a5:56:6c:1c:ed:9c:db:48:39:1c:10:20:e4:59:7e:9a:05:
56:bb:0e:0c:52:8c:82:d0:03:37:d7:47:38:63:da:3f:c6:19:
ab:3c:e4:5d:87:8d:c0:42:23:43:8d:d0:fc:0d:3b:df:15:28:
23:ec:93:3d:33:93:f3:a0:19:14:35:31:2e:7d:1b:b5:4f:c2:
db:85:4c:5b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaBXiaGqRuieHCkl8Dovs1a+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwODMxMTExNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmIzYWQyYzM5OWE3ZjI5MjFmZGVjZWIxZTY1YjkxMDAzYzAzM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjIFMk+rrjTAF81XbTnmNbWWsHJw
OsVCPSAUl3BvkqbFrif/CESTMm7Aa4nM36R2sVOsAPUF88Qa91F+07kTjxQhS+Qb
lmSy0lsSksl8Ezw4IARXNK//NXH2nuWqbsMoxKGsVi8tMkzwZf0d3CubFqylPawa
NY36b/MdsSzYmmGoQlhYnLervND7okGYdzQjlZqV95Jp4eVUq5WjCDjQafkbbARF
ufojGSY/+SQtJT3TcK775SDuQa312mDezqgUaAk8KilM7AYPhVTxDjbmOE9De/Vl
UyTy1e51Ck0TT0JRs8DHiA0sLid4doNie8izJ2kwxd82iRyvgRuo4eCG1wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH+zrSw5mn8pIf3s6x5luRADwDOpMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZjdPdExEbWFmeWtoX2V6ckhtVzVFQVBBTTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWRVXAwQB
WfsWAwQAW+I5AwQAsGHNMA0GCSqGSIb3DQEBCwUAA4IBAQAMSRhoe5DRascGWHw/
3J5dLnYerwnoCjJZaI8cW7HryFIPuDvBhFAqtLstr1yj/nUp2rdru41wCUcaogPe
XCIyxyCoBSzcdxFYEHuMpSJzpn3zkXNcv4gMGODZiyHZloDxYB9CKEZoWXWkL5at
I6wgQleu1bCk6F+40LN3y3Di+quqqHL595Y7jCKZA0FTsliYV8M0r/65XrmX2r0n
JwuNQhEmuarypTAo3wKO6RLitjhigc7bpVZsHO2c20g5HBAg5Fl+mgVWuw4MUoyC
0AM310c4Y9o/xhmrPORdh43AQiNDjdD8DTvfFSgj7JM9M5PzoBkUNTEufRu1T8Lb
hUxb
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:36 2026 by rpki-client