Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/89iIC1P2vMZINfnDPEVYBrG5YNo.roa
File: 89iIC1P2vMZINfnDPEVYBrG5YNo.roa (raw, json)
Hash identifier: RLgR4UZD50FWkZGgPH0onW3VFJjF0TSQi+7anqzbUoQ=
Subject key identifier: F3:D8:88:0B:53:F6:BC:C6:48:35:F9:C3:3C:45:58:06:B1:B9:60:DA
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019FD16305D7F47CE919D51B7F20F5A8AD8F
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/89iIC1P2vMZINfnDPEVYBrG5YNo.roa
Signing time: Wed 05 Aug 2026 10:05:55 +0000
ROA not before: Wed 05 Aug 2026 10:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208208
IP address blocks: 81.31.199.0/24 maxlen: 24
185.240.240.0/24 maxlen: 24
185.240.241.0/24 maxlen: 24
185.240.242.0/24 maxlen: 24
185.240.243.0/24 maxlen: 24
2a09:6302::/32 maxlen: 32
2a09:6305::/32 maxlen: 32
2a09:6306::/32 maxlen: 32
2a09:6307::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:63:05:d7:f4:7c:e9:19:d5:1b:7f:20:f5:a8:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Aug 5 10:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3d8880b53f6bcc64835f9c33c455806b1b960da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:d4:fe:f1:24:3f:0b:96:cf:49:a4:ba:b0:
6d:06:63:be:40:90:4d:ee:7e:b2:8f:72:27:eb:12:
bf:2c:8c:82:e5:b5:5c:e7:fd:03:9f:15:dc:68:47:
84:ab:8b:69:49:1f:e6:60:fb:9a:45:8e:35:5d:16:
5d:6b:ad:10:af:b0:e5:1b:45:d9:08:3c:4b:47:70:
d1:67:6f:7c:e4:f4:f4:57:08:17:17:83:df:d4:42:
aa:6e:08:79:6c:37:b5:f6:d8:41:45:12:ff:44:0f:
5f:6e:48:78:a2:35:8e:77:6c:70:cd:13:8a:84:7d:
fe:44:02:71:70:25:cd:96:4f:ec:f5:31:a5:87:ac:
28:ea:55:be:45:87:f1:e8:62:10:db:ff:08:e5:7f:
46:48:09:14:4b:c1:5f:8d:d7:6d:21:d4:ea:9b:81:
72:aa:b3:fa:13:e2:ac:76:30:88:a4:b0:da:37:ee:
ca:96:fe:19:43:65:61:a8:90:1e:61:b9:e6:69:f6:
e0:d2:6d:1c:6c:e5:02:2d:ae:ae:b0:8c:3a:ad:b2:
54:2d:1f:d6:44:1a:e0:65:ec:cc:07:59:c7:33:9c:
8c:57:16:50:61:6d:eb:1f:5e:fd:e3:c6:6d:5d:81:
ad:f7:10:4c:32:b4:07:be:6d:38:41:4b:62:5b:06:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:88:0B:53:F6:BC:C6:48:35:F9:C3:3C:45:58:06:B1:B9:60:DA
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/89iIC1P2vMZINfnDPEVYBrG5YNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.199.0/24
185.240.240.0/22
IPv6:
2a09:6302::/32
2a09:6305::-2a09:6307:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:33:d0:5a:fb:63:4d:81:04:0a:92:0d:a1:19:0d:fc:5f:20:
19:66:42:97:46:2f:b8:d6:b2:43:e2:ff:7a:49:99:48:3e:b5:
05:e9:74:cb:53:7d:a6:06:a4:ad:17:a1:f1:21:2a:86:a5:a6:
c9:58:09:54:6c:05:d9:4b:1e:37:98:0c:0e:c6:c0:8f:9e:cf:
ca:ff:24:d3:fa:f3:be:b9:ab:b2:35:2d:ce:25:41:4b:0f:24:
71:84:2f:a9:3a:53:28:2e:b4:3c:6f:7b:b9:e6:7e:f0:d9:d6:
ff:fe:b2:2f:e7:23:08:9b:d2:e3:1c:b7:cb:c2:aa:b6:6d:ca:
8c:48:7a:46:7c:e2:94:ea:bd:ff:41:44:9a:d5:81:6b:fe:c4:
da:21:c7:33:eb:70:96:5a:0d:7e:34:58:0a:a9:f5:ac:b3:fe:
2e:e5:14:1f:bc:b9:c0:cc:2d:1c:8b:2c:42:69:05:2c:49:e1:
e1:34:ca:e4:43:e9:83:42:1a:bd:63:18:22:6f:b8:b3:15:c6:
b0:c2:31:dc:aa:a9:5f:4a:2f:2a:91:55:4e:87:02:db:0b:d8:
18:37:0d:55:57:5f:43:fa:3a:2c:77:df:22:c2:21:52:7b:b8:
72:6b:8b:b7:8c:d3:62:db:9e:11:00:95:cb:96:97:e0:86:99:
4a:74:48:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:10 2026 by rpki-client