Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_Fj1oiutXGsaZyjtVy0bNFxV4Ck.roa
File: _Fj1oiutXGsaZyjtVy0bNFxV4Ck.roa (raw, json)
Hash identifier: p++VE82Cts52bYA/rX+Wa5ytJAuVmQTAa3YABC4bASQ=
Subject key identifier: FC:58:F5:A2:2B:AD:5C:6B:1A:67:28:ED:57:2D:1B:34:5C:55:E0:29
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019FAE58F9CD999336BA0E4F8F32287C7FE9
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_Fj1oiutXGsaZyjtVy0bNFxV4Ck.roa
Signing time: Wed 29 Jul 2026 14:48:14 +0000
ROA not before: Wed 29 Jul 2026 14:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154725
IP address blocks: 89.43.45.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:58:f9:cd:99:93:36:ba:0e:4f:8f:32:28:7c:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 29 14:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc58f5a22bad5c6b1a6728ed572d1b345c55e029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:7e:1e:83:7f:de:1b:15:b0:9a:5a:15:40:
f2:29:82:cc:eb:28:c5:e8:8a:d7:a6:48:a3:c3:53:
b6:74:bc:22:f7:50:ba:b3:e8:3d:04:2d:0a:dc:d4:
0b:73:72:1c:9d:cd:90:2d:b0:2e:92:56:25:0e:e5:
70:0e:1a:22:dd:82:e9:8a:bf:01:3c:20:ca:59:ef:
75:92:47:b0:c2:f4:b0:d4:0a:46:40:24:5d:19:51:
95:87:2c:49:94:7d:eb:2d:76:86:fb:9f:59:ba:d2:
1c:7f:8e:f8:7a:a6:92:f1:5a:1a:82:b0:2f:2c:f0:
00:b7:14:db:2c:35:e4:f8:b7:4a:a1:c2:eb:8a:e9:
5a:05:72:20:3d:51:7f:00:af:bc:1a:f1:de:84:a6:
ae:a0:77:16:18:61:25:44:cd:e1:e8:aa:a4:c9:ad:
7e:e9:a2:d9:45:55:9b:7f:56:36:60:17:2a:c1:9c:
8c:2c:0e:1c:d9:26:b5:d2:b3:be:82:ad:dc:2a:47:
e6:42:93:77:89:0c:67:2d:71:f3:2f:79:32:d6:eb:
4a:63:94:5f:c0:97:f6:c9:c4:6a:d3:1b:a2:7e:be:
f4:9f:b0:9a:3b:70:7e:60:70:78:87:31:c5:48:25:
eb:a9:a7:b7:4f:32:54:e7:38:16:3d:67:05:45:9c:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:F5:A2:2B:AD:5C:6B:1A:67:28:ED:57:2D:1B:34:5C:55:E0:29
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_Fj1oiutXGsaZyjtVy0bNFxV4Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0/24
89.43.73.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0f:05:9c:a5:b2:36:78:d0:d5:43:9d:f2:c5:e5:a8:43:eb:
e6:53:64:a0:93:73:22:3a:92:ae:3f:60:f5:85:10:68:40:9e:
09:83:60:51:c5:46:73:aa:31:15:b2:4e:80:a7:58:c9:b3:ae:
66:fc:41:8a:c8:04:b4:b7:74:74:cc:1f:86:d3:d4:68:cf:d0:
9f:b8:b2:7d:a4:a6:d8:b2:98:ad:b9:fd:c0:17:fd:13:52:cc:
ba:c6:ca:5f:7c:71:1c:c4:cc:af:80:a4:a8:e5:ab:42:3e:75:
02:38:08:dd:68:b2:35:54:60:61:25:4d:2f:f6:fb:d6:b6:92:
ed:ed:25:77:d4:73:55:3e:be:5b:19:1a:45:b9:4a:a4:38:7c:
ba:9a:bb:80:20:81:d1:06:93:5d:8c:b4:1b:94:5e:5d:8c:ef:
48:fd:5c:43:6e:6f:db:e6:a7:f2:a9:0b:60:31:81:d5:9c:c2:
98:cc:89:34:f1:ca:6a:b2:b8:c9:80:7a:f9:86:88:e5:7c:74:
9d:6d:47:c2:8f:e4:cb:8c:6e:73:b8:83:d6:58:69:fb:68:98:
3d:3b:67:2a:cb:f1:a7:09:e5:05:bf:d4:82:0d:0e:98:41:cd:
8c:91:c9:7e:66:85:77:16:87:ae:fa:d9:19:d2:04:cd:1e:f1:
80:9b:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:25 2026 by rpki-client