Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_cmpA8bSHgxqbnylD-2E5JeshHM.roa
File: _cmpA8bSHgxqbnylD-2E5JeshHM.roa (raw, json)
Hash identifier: XuWpLH2R0Bj8zFg63o7ASO1/uaB/2IqXl3qXZc+3ado=
Subject key identifier: FD:C9:A9:03:C6:D2:1E:0C:6A:6E:7C:A5:0F:ED:84:E4:97:AC:84:73
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A03E0B118A3E56CC07C499AA9EFCEBBA59
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_cmpA8bSHgxqbnylD-2E5JeshHM.roa
Signing time: Wed 26 Aug 2026 12:28:27 +0000
ROA not before: Wed 26 Aug 2026 12:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58325
IP address blocks: 89.32.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:0b:11:8a:3e:56:cc:07:c4:99:aa:9e:fc:eb:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Aug 26 12:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdc9a903c6d21e0c6a6e7ca50fed84e497ac8473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:04:ee:c1:69:d3:e7:38:8a:04:50:6d:be:
4b:a7:5e:1e:73:fb:43:48:98:6a:d6:33:29:46:13:
b3:ca:cb:dd:11:5d:b4:94:4c:1d:6b:b7:f3:17:a4:
bf:26:19:76:ea:aa:f2:77:e3:13:39:c5:47:71:84:
19:5c:31:b6:8f:ca:37:69:b0:ff:ba:7a:45:0f:86:
ec:3b:e9:d4:c1:a4:b2:30:0f:88:f1:1c:c5:5a:89:
75:7b:0b:c5:f0:ae:04:17:5d:49:da:6c:dc:3a:ff:
e5:c5:71:c9:d8:1c:2f:9a:29:45:d8:cd:de:39:33:
d7:db:fa:21:05:30:70:c2:08:0d:ee:76:99:e6:91:
c9:d5:7e:d6:f2:6e:0d:b1:14:74:26:d9:30:38:6f:
de:fd:84:33:90:97:5c:d9:66:ec:77:09:51:d2:38:
bc:d7:85:23:f7:37:ec:16:3c:c9:b9:0d:68:23:72:
43:c4:7b:de:99:52:23:00:47:e0:44:de:e7:2b:10:
70:db:ff:62:ea:ed:2a:08:be:9d:94:1c:a4:18:70:
3f:e7:33:8f:5f:e3:8d:bc:69:36:6e:d8:1f:43:1e:
9c:60:22:47:c7:69:e3:6f:d3:85:a9:be:b3:d8:e0:
c9:5b:55:27:6f:68:74:c8:15:41:7b:c6:61:20:89:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:A9:03:C6:D2:1E:0C:6A:6E:7C:A5:0F:ED:84:E4:97:AC:84:73
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_cmpA8bSHgxqbnylD-2E5JeshHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:90:d2:d1:50:99:53:09:f8:9e:09:1b:24:9e:37:6e:28:cc:
0a:3d:2e:b2:4e:cb:7f:49:84:9e:80:65:73:11:d6:0d:18:75:
fa:9c:82:70:73:61:ae:bd:8b:65:a5:f4:16:64:95:a2:45:a7:
ee:da:47:87:3b:8b:3d:ec:6d:c9:19:53:a9:d6:d0:ad:85:4c:
c1:90:2e:8c:f7:b9:d2:bf:76:45:65:10:bc:6c:97:e5:6c:62:
62:05:5a:52:4c:ee:c9:82:00:a1:53:32:ff:99:10:28:86:97:
fe:c4:c8:57:0f:cf:65:02:96:21:38:f9:91:fd:27:08:46:eb:
59:ac:df:2c:64:f6:28:06:9e:7f:29:32:d6:4b:ed:85:59:7c:
72:4a:fe:82:9f:96:3e:d5:2a:f4:1d:53:9b:05:55:34:0a:00:
e7:1f:91:06:a8:52:61:19:b7:15:43:b2:56:43:47:fe:d9:8c:
a2:84:b2:04:75:5e:2d:51:ae:b9:91:03:5b:e0:73:c2:35:88:
e3:74:34:f6:f7:cd:d9:1b:0d:c5:8c:d3:01:20:cc:80:71:4f:
20:68:c9:ca:26:05:eb:60:97:be:a8:b7:d8:d1:34:31:08:58:
f2:df:a1:48:78:10:27:8c:0e:cb:75:be:54:71:32:78:8c:47:
c9:94:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:31 2026 by rpki-client