Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/C5cvkpLgAxRPbmRR1Xnr9IgOBOg.roa
File: C5cvkpLgAxRPbmRR1Xnr9IgOBOg.roa (raw, json)
Hash identifier: DRe8BBuY3trDvHyhgz8zYPvPROY3WavC5+JbPLkC71M=
Subject key identifier: 0B:97:2F:92:92:E0:03:14:4F:6E:64:51:D5:79:EB:F4:88:0E:04:E8
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A1631DEADAAD0CB2043A437CDEC8796512
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/C5cvkpLgAxRPbmRR1Xnr9IgOBOg.roa
Signing time: Thu 22 Oct 2026 10:17:47 +0000
ROA not before: Thu 22 Oct 2026 10:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57973
IP address blocks: 89.221.233.0/24 maxlen: 24
89.221.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:1d:ea:da:ad:0c:b2:04:3a:43:7c:de:c8:79:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 10:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b972f9292e003144f6e6451d579ebf4880e04e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:d5:4d:8f:31:08:fa:26:2f:9b:fc:bd:1f:
c5:c5:15:3a:89:5e:d9:77:33:b2:66:22:78:7c:45:
c8:07:d6:ff:7f:54:a8:f1:a6:13:87:c5:d6:6a:54:
0e:a3:28:3d:0d:3c:28:25:50:92:63:68:89:07:f6:
8f:76:0c:c1:4d:0f:1c:fd:d9:aa:5d:9b:be:68:00:
1d:13:4f:12:b5:db:ed:41:bb:6c:88:13:1d:b8:c4:
37:9b:da:6b:3e:3c:16:19:6a:f5:59:dc:01:ca:da:
60:b9:04:f6:11:8b:88:9c:02:ca:c8:9f:8e:a0:04:
66:6a:8b:b7:66:d7:fd:7e:27:10:1f:f5:5f:89:f1:
f3:be:f4:11:07:8a:df:16:6e:e0:40:43:a7:14:4f:
5f:48:79:15:44:da:d9:41:c3:83:ac:8d:cb:a0:9b:
95:c0:28:65:40:f7:20:df:4c:39:47:a5:58:fd:cd:
f7:39:b4:29:fa:c3:9d:ed:db:c6:ed:5a:b9:9b:b7:
d6:78:be:53:bb:64:07:c6:a3:2f:5d:7b:ab:2d:10:
48:ae:d9:08:8d:10:7f:89:c6:b0:30:83:94:42:24:
f3:fb:1e:c5:a8:1c:d1:78:ef:fc:c6:14:d7:b0:81:
b0:1e:eb:53:26:77:95:d2:d4:02:30:33:fe:f7:d7:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:97:2F:92:92:E0:03:14:4F:6E:64:51:D5:79:EB:F4:88:0E:04:E8
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/C5cvkpLgAxRPbmRR1Xnr9IgOBOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.233.0-89.221.234.255
Signature Algorithm: sha256WithRSAEncryption
a7:3e:08:a9:3d:7f:3a:53:59:f4:9e:63:76:18:30:55:a0:6c:
46:60:79:c0:47:29:31:73:ac:65:ce:64:e1:0c:5b:4a:1e:79:
d7:8a:b2:92:ec:d6:96:42:27:3a:a1:37:7e:eb:b5:65:59:59:
cd:0e:8d:08:87:c9:5e:79:4d:1e:f0:02:55:c4:9f:f8:09:1a:
8f:95:a0:3f:47:2d:7d:44:49:8d:77:4a:37:ff:9f:cd:f7:34:
c8:44:9a:21:2f:d0:8d:0a:d2:43:11:41:76:44:94:61:55:16:
92:bd:ff:40:d2:01:03:58:07:3f:29:6a:22:f1:eb:12:31:7a:
08:bd:d8:8e:1a:10:45:e5:fb:bb:c2:35:bc:90:70:3d:34:ab:
99:11:f1:bf:88:d0:81:30:75:f2:59:b0:2b:19:6a:36:7e:86:
ff:a2:9c:26:e3:36:6b:e0:e1:40:d5:28:d9:a1:ab:d6:d0:a8:
46:26:a5:2e:92:3d:b1:87:ce:a8:f9:0b:56:de:03:1f:12:74:
48:9b:fd:71:b5:73:fa:e9:f3:96:12:d4:f3:04:51:57:f5:97:
ab:1f:fe:a3:dd:b4:b8:51:b4:6c:2a:55:4f:22:34:56:b7:e2:
dd:b5:fc:f9:a9:cb:72:d8:52:43:70:10:4c:95:f0:20:f4:fb:
ee:10:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:45 2026 by rpki-client