Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/K8OjdeZE4Br2GTESQBNt1eSDPwY.roa
File: K8OjdeZE4Br2GTESQBNt1eSDPwY.roa (raw, json)
Hash identifier: fIWa2xGxlcYKnph2SKf7XRil77W6h0VckxbilfoHwsA=
Subject key identifier: 2B:C3:A3:75:E6:44:E0:1A:F6:19:31:12:40:13:6D:D5:E4:83:3F:06
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A0487FD6128F18EC4EEED35AB1419A53F5
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/K8OjdeZE4Br2GTESQBNt1eSDPwY.roa
Signing time: Fri 28 Aug 2026 13:12:12 +0000
ROA not before: Fri 28 Aug 2026 13:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 189.13.164.0/24 maxlen: 24
189.13.165.0/24 maxlen: 24
189.13.166.0/24 maxlen: 24
189.13.167.0/24 maxlen: 24
189.13.168.0/24 maxlen: 24
189.13.174.0/24 maxlen: 24
189.13.175.0/24 maxlen: 24
189.13.176.0/24 maxlen: 24
189.13.177.0/24 maxlen: 24
189.13.178.0/24 maxlen: 24
189.13.179.0/24 maxlen: 24
189.13.180.0/24 maxlen: 24
189.13.181.0/24 maxlen: 24
189.13.182.0/24 maxlen: 24
189.13.183.0/24 maxlen: 24
189.13.184.0/24 maxlen: 24
189.13.185.0/24 maxlen: 24
189.13.186.0/24 maxlen: 24
189.13.187.0/24 maxlen: 24
189.13.188.0/24 maxlen: 24
189.13.189.0/24 maxlen: 24
189.13.190.0/24 maxlen: 24
189.13.191.0/24 maxlen: 24
189.13.192.0/24 maxlen: 24
189.13.193.0/24 maxlen: 24
189.13.194.0/24 maxlen: 24
189.13.195.0/24 maxlen: 24
189.13.196.0/24 maxlen: 24
189.13.197.0/24 maxlen: 24
189.13.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:7f:d6:12:8f:18:ec:4e:ee:d3:5a:b1:41:9a:53:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Aug 28 13:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bc3a375e644e01af619311240136dd5e4833f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:83:86:4d:7c:7b:37:7e:24:e0:66:e4:db:
28:ba:52:9f:78:8e:28:25:f4:6a:98:87:c3:0b:4b:
e5:a0:2c:11:46:a7:62:c5:6d:b6:48:fb:ed:cd:91:
02:c6:61:56:df:e5:72:7d:b2:eb:8c:0b:cc:af:2d:
98:05:aa:d2:e3:81:c2:d9:3c:82:7a:35:73:29:9e:
2d:e7:99:d1:16:86:6e:18:85:de:03:11:64:5f:93:
77:f8:fb:67:ab:d6:27:31:cb:35:47:01:80:59:cf:
51:d7:58:f2:a6:0f:5d:3a:5a:a7:93:b9:b6:9f:65:
0c:0a:65:1d:94:8d:8b:8a:76:a3:1c:56:50:33:15:
36:11:7d:1e:c5:79:7f:15:a8:32:fd:20:48:34:21:
c4:af:42:7d:c0:85:75:7a:4e:60:1e:54:32:04:70:
0e:ac:ff:58:5a:53:9f:27:8b:38:b2:dd:0f:44:ef:
5e:4b:76:6e:29:ca:c2:53:c6:c2:b1:3e:25:4b:84:
f4:c7:dd:ab:c1:fe:59:41:d8:1f:e6:32:dc:50:15:
9b:ce:74:17:aa:76:ad:a0:31:e3:7f:52:5e:92:9e:
10:a7:d0:1f:5b:28:ab:5c:a6:1a:21:17:cd:1b:82:
45:de:1e:7e:a6:bb:ee:0d:c8:7e:5a:0f:d2:b2:64:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:A3:75:E6:44:E0:1A:F6:19:31:12:40:13:6D:D5:E4:83:3F:06
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/K8OjdeZE4Br2GTESQBNt1eSDPwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.164.0-189.13.168.255
189.13.174.0-189.13.198.255
Signature Algorithm: sha256WithRSAEncryption
3c:60:98:19:27:a9:4f:a4:c5:28:08:6b:a5:d5:c3:d1:f3:e9:
d1:69:25:aa:7e:21:44:e4:f4:79:e5:32:3a:8b:e6:ca:d4:b9:
1b:b5:aa:e4:25:2e:8e:0c:c6:f8:64:34:90:8f:f7:ed:af:23:
5e:a8:ec:6a:68:65:c3:3c:85:3c:18:e3:cc:83:bf:44:a2:ec:
d3:c1:03:20:cd:ec:2d:a4:7e:2b:9b:d4:1a:78:ca:cf:50:57:
ba:cb:85:af:83:9f:e7:80:e3:28:08:71:16:1e:75:2f:81:b3:
94:ec:b9:b4:ef:3d:ec:e1:e4:eb:79:b8:a1:f9:ea:2d:8e:94:
78:00:d4:2e:9d:f7:e7:fd:e4:47:b6:13:55:22:4a:35:6a:cd:
11:8b:ca:5d:86:dd:c6:7b:e4:47:ae:53:04:fa:13:99:46:f1:
c2:8f:13:20:48:56:df:2d:5b:fe:92:72:0f:0a:74:b1:8b:3a:
10:2d:02:0a:f7:db:f5:cc:fe:71:a7:22:71:15:9e:f1:a8:49:
7f:53:11:49:85:5a:db:eb:4f:46:5d:8d:81:bf:19:16:9b:ab:
3d:67:cc:76:56:af:0c:c5:b1:4e:5f:fd:f8:1d:11:8a:51:e0:
f5:3f:36:de:16:4c:2c:87:d3:88:12:d9:bd:95:64:dd:31:71:
8e:6b:2c:c9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaBIf9YSjxjsTu7TWrFBmlP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi
MzJiNmQwHhcNMjYwODI4MTMxMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmMzYTM3NWU2NDRlMDFhZjYxOTMxMTI0MDEzNmRkNWU0ODMzZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYuDhk18ezd+JOBm5NsoulKfeI4o
JfRqmIfDC0vloCwRRqdixW22SPvtzZECxmFW3+VyfbLrjAvMry2YBarS44HC2TyC
ejVzKZ4t55nRFoZuGIXeAxFkX5N3+Ptnq9YnMcs1RwGAWc9R11jypg9dOlqnk7m2
n2UMCmUdlI2LinajHFZQMxU2EX0exXl/Fagy/SBINCHEr0J9wIV1ek5gHlQyBHAO
rP9YWlOfJ4s4st0PRO9eS3ZuKcrCU8bCsT4lS4T0x92rwf5ZQdgf5jLcUBWbznQX
qnatoDHjf1Jekp4Qp9AfWyirXKYaIRfNG4JF3h5+prvuDch+Wg/SsmT4OQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFCvDo3XmROAa9hkxEkATbdXkgz8GMB8GA1UdIwQY
MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt
YjdjYTFmNDcyOGQwLzEvSzhPamRlWkU0QnIyR1RFU1FCTnQxZVNEUHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw
LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAK9DaQD
BAC9DagwDAMEAb0NrgMEAL0NxjANBgkqhkiG9w0BAQsFAAOCAQEAPGCYGSepT6TF
KAhrpdXD0fPp0Wklqn4hROT0eeUyOovmytS5G7Wq5CUujgzG+GQ0kI/37a8jXqjs
amhlwzyFPBjjzIO/RKLs08EDIM3sLaR+K5vUGnjKz1BXusuFr4Of54DjKAhxFh51
L4GzlOy5tO897OHk63m4ofnqLY6UeADULp335/3kR7YTVSJKNWrNEYvKXYbdxnvk
R65TBPoTmUbxwo8TIEhW3y1b/pJyDwp0sYs6EC0CCvfb9cz+cacicRWe8ahJf1MR
SYVa2+tPRl2Ngb8ZFpurPWfMdlavDMWxTl/9+B0RilHg9T823hZMLIfTiBLZvZVk
3TFxjmssyQ==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:01 2026 by rpki-client