Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/ieXmCAI8pK0_izV462-4Shdw2Os.roa
File: ieXmCAI8pK0_izV462-4Shdw2Os.roa (raw, json)
Hash identifier: LEsz2kBf52kXStUHt0OtF4M71jBqEUetYd4hXItJxmE=
Subject key identifier: 89:E5:E6:08:02:3C:A4:AD:3F:8B:35:78:EB:6F:B8:4A:17:70:D8:EB
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A1752956BF6A47EC436AE53A7575020071
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/ieXmCAI8pK0_izV462-4Shdw2Os.roa
Signing time: Sun 25 Oct 2026 22:23:25 +0000
ROA not before: Sun 25 Oct 2026 22:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209505
IP address blocks: 89.33.9.0/24 maxlen: 24
185.250.8.0/22 maxlen: 22
195.10.233.0/24 maxlen: 24
2a0b:9400::/30 maxlen: 30
2a0b:9404::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:29:56:bf:6a:47:ec:43:6a:e5:3a:75:75:02:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Oct 25 22:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89e5e608023ca4ad3f8b3578eb6fb84a1770d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:06:b5:d6:22:b9:c5:db:d3:ba:52:1f:73:
16:37:ff:6b:cc:b1:e1:ea:37:69:a3:80:86:7c:6c:
cb:4c:71:67:57:34:34:42:03:1f:12:33:b9:5f:b6:
44:ca:a2:ef:17:31:9c:fd:73:71:09:29:7f:45:9c:
bd:b0:7f:d6:43:26:93:43:9b:37:37:b8:2e:93:f8:
e8:94:53:8b:b5:f8:c9:24:5c:a4:ea:a1:9a:f6:d8:
cf:4a:e9:b5:90:ed:37:a5:bf:ce:a9:a2:65:2b:6f:
f5:7c:9a:b0:ec:a8:59:21:4f:9d:0a:cc:9d:10:1b:
6c:87:d3:7c:f6:64:8c:88:f0:fc:b1:8f:a2:de:55:
5a:fa:a4:6f:e4:73:f1:ee:c0:9b:00:58:92:93:43:
36:dc:a0:e9:55:57:fc:26:ef:85:43:ae:8b:dd:d8:
bd:68:f4:b6:8b:fd:fc:7d:71:16:98:4a:ee:4f:10:
b1:d4:73:8d:92:32:25:9e:0e:6d:aa:80:f7:63:67:
a0:3f:aa:8e:15:70:9c:a9:d5:a8:0a:e4:bc:5c:51:
3d:d0:55:6b:54:24:6a:1b:aa:86:5d:32:5f:8d:ea:
08:6e:44:6a:37:da:be:1f:80:1d:f0:78:2a:b5:40:
99:4f:a6:13:48:9e:f9:cb:bf:4c:46:fa:02:89:f3:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E5:E6:08:02:3C:A4:AD:3F:8B:35:78:EB:6F:B8:4A:17:70:D8:EB
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/ieXmCAI8pK0_izV462-4Shdw2Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.9.0/24
185.250.8.0/22
195.10.233.0/24
IPv6:
2a0b:9400::-2a0b:9404:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:8f:3b:f0:0e:ee:fc:47:90:b3:65:40:26:1c:45:6f:1f:31:
9b:91:78:0d:15:02:69:d0:4f:4a:f0:8b:84:d1:0d:9f:46:01:
1e:75:0b:c1:5d:96:8c:df:ae:98:1f:9b:63:f7:a8:b7:5d:d1:
7c:09:4d:10:98:18:62:2b:f4:4b:a8:88:9a:f7:e2:e4:af:d1:
0e:04:ce:d6:0c:ee:59:76:e4:c3:cd:0d:77:f5:42:2f:48:d6:
9f:4a:33:8a:bf:a9:76:09:30:30:b3:8b:00:37:87:5c:61:59:
59:1a:00:1c:cf:57:f0:6b:03:f3:5d:09:93:be:db:98:e8:17:
e2:66:89:58:66:36:b7:19:5c:a6:75:14:2b:32:8e:84:bb:b2:
ad:06:27:dc:bb:e0:23:bd:05:f2:62:ed:20:5e:46:5a:15:af:
a8:2b:17:74:75:55:8b:00:ac:a1:09:bc:1c:59:c2:88:95:a8:
b7:1a:6e:79:f4:d1:f9:e8:86:ca:f2:90:6d:26:d8:34:3d:6e:
c0:b6:43:8b:8f:ad:97:fe:51:8d:0f:36:d6:e8:7f:af:7d:3e:
4f:3b:93:1f:0a:6f:2d:75:46:3a:31:40:05:3f:b7:e1:19:df:
41:2e:42:fd:fc:4d:39:50:fa:62:3b:f0:23:7f:86:ae:37:ab:
24:d7:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:57 2026 by rpki-client