Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h5o8VP-l1V6rRPdKnU0AlJqror4.roa
File: h5o8VP-l1V6rRPdKnU0AlJqror4.roa (raw, json)
Hash identifier: Za83LWwnOAlN4fuqIw0tDCR/sWfUux5EkvFKxvjFSXk=
Subject key identifier: 87:9A:3C:54:FF:A5:D5:5E:AB:44:F7:4A:9D:4D:00:94:9A:AB:A2:BE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A08589957D8948A7E0B3C61AB69CC21886
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h5o8VP-l1V6rRPdKnU0AlJqror4.roa
Signing time: Wed 09 Sep 2026 09:39:41 +0000
ROA not before: Wed 09 Sep 2026 09:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 89.21.87.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:89:95:7d:89:48:a7:e0:b3:c6:1a:b6:9c:c2:18:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 9 09:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=879a3c54ffa5d55eab44f74a9d4d00949aaba2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:11:7c:be:35:5e:f8:d9:85:a0:94:c1:30:
b0:70:57:ed:9f:c1:44:83:c9:93:a0:94:84:80:04:
93:6e:83:a8:79:79:f4:01:f9:44:50:d7:91:c1:d1:
fb:1a:5e:a6:93:63:86:81:ea:6e:82:4f:8e:18:07:
7c:9a:1a:b1:a7:b4:3b:4f:08:fe:d0:d5:ce:85:e2:
6a:63:b0:7f:94:c4:2f:f8:d2:00:ab:05:19:8a:a6:
64:a9:c3:9d:bb:06:2b:17:d9:93:d4:4f:3d:57:f4:
58:03:3a:1b:2e:76:9a:68:26:41:00:af:22:63:d2:
19:78:a3:92:1b:a2:bf:71:af:fa:ff:dd:30:6f:e7:
02:ac:da:b6:78:70:b2:38:19:03:c3:1a:65:74:27:
71:2a:34:f1:15:fc:1d:5d:73:25:25:13:2c:ea:18:
d0:39:d3:9e:ae:15:7c:f6:f4:1e:1f:09:48:17:9f:
2b:2c:03:cb:6d:66:46:bd:25:aa:6f:20:31:c5:d0:
38:bb:ed:0d:5f:0e:44:c4:94:0c:47:7c:50:e9:3e:
c6:9e:5b:2c:38:6f:5f:bd:e9:aa:ad:59:cd:97:da:
8d:cd:f7:ff:e7:d4:26:9e:96:64:5b:77:f4:16:ff:
6d:2b:42:6c:c6:54:5c:ee:6c:06:19:1f:f3:6c:20:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:3C:54:FF:A5:D5:5E:AB:44:F7:4A:9D:4D:00:94:9A:AB:A2:BE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h5o8VP-l1V6rRPdKnU0AlJqror4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.87.0/24
91.226.57.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ae:f0:f2:f1:86:87:23:0b:54:9d:3d:b0:c7:50:85:aa:5c:
20:07:8d:59:34:33:9c:28:c1:bc:07:ab:66:66:aa:23:f7:64:
d7:62:40:bb:5f:5f:37:51:43:02:d7:f0:36:6c:e3:3e:5e:55:
1a:df:bd:ef:f9:9a:f0:64:fd:03:64:36:31:59:78:f4:08:5f:
e5:7d:4b:9b:cd:28:e3:b4:4a:de:ec:1d:90:d4:9f:96:f7:c7:
b2:f3:fb:87:28:e0:4a:3e:12:24:f5:ed:df:a4:ee:99:7d:a7:
d0:a2:b9:81:43:d7:f2:e2:91:9c:ae:c6:61:bc:46:7e:1e:4f:
2d:90:8e:c3:f1:f3:48:ac:8c:5b:54:f8:50:f0:9e:69:cd:5c:
42:a0:88:fc:93:ed:6f:23:61:e6:cf:b1:2b:0a:c0:9c:d5:19:
22:41:0f:29:30:3b:c0:7c:2e:6d:0e:5c:d8:8e:44:83:53:ac:
61:d3:d2:1b:17:de:df:36:eb:1a:ac:5c:f2:a4:9f:fd:18:1c:
ab:af:b6:48:7c:b8:99:f4:25:e2:b2:c5:42:ab:ab:6b:d7:39:
0d:1f:02:56:12:2b:54:c7:0c:a8:fe:82:9c:29:83:c4:eb:53:
a2:1e:17:e3:39:c1:b8:e9:ae:6c:7b:c1:f0:b8:99:cd:29:01:
91:d4:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:58:44 2026 by rpki-client