Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/a83HWrg-gm9J-fFeKvhIGb_9S94.roa
File: a83HWrg-gm9J-fFeKvhIGb_9S94.roa (raw, json)
Hash identifier: 7tyP+V2kqb4zIzwdt4KQm1MNZgFnJhNfaOUQGqGaGfA=
Subject key identifier: 6B:CD:C7:5A:B8:3E:82:6F:49:F9:F1:5E:2A:F8:48:19:BF:FD:4B:DE
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A12B05AEE8B936F4ADF3D1C50E24935206
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/a83HWrg-gm9J-fFeKvhIGb_9S94.roa
Signing time: Sun 11 Oct 2026 12:52:35 +0000
ROA not before: Sun 11 Oct 2026 12:52:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51431
IP address blocks: 89.235.79.0/24 maxlen: 24
188.75.78.0/23 maxlen: 24
213.195.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:05:ae:e8:b9:36:f4:ad:f3:d1:c5:0e:24:93:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 11 12:52:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bcdc75ab83e826f49f9f15e2af84819bffd4bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:75:12:fe:01:e3:39:0d:b8:f1:cf:6a:9c:
d1:12:99:1e:1e:4a:8a:ab:d2:46:4d:ab:43:ab:49:
36:b1:fd:e0:56:ac:0f:d9:f2:a3:56:52:e3:9b:a4:
85:a8:98:6d:ca:a8:c7:40:9e:7e:ad:6e:84:37:d1:
a9:3e:59:1c:50:97:f7:6d:f7:d3:f0:1e:65:a4:01:
fc:ed:ba:41:2c:2c:4a:23:a3:55:6e:8d:a0:d5:28:
81:c6:c7:53:35:ae:57:bd:ca:b6:bc:df:08:3c:09:
0b:8e:75:f8:20:d9:88:55:04:2b:e6:c8:96:11:4b:
b1:2f:e9:45:ea:d2:62:07:03:43:0b:63:89:62:ca:
48:c4:99:04:08:82:6e:a4:fc:1d:6d:2a:17:fd:1b:
d4:cd:28:57:ed:52:b0:c2:a9:ce:37:b1:d2:c0:a2:
de:4f:1b:36:c5:0f:c4:d1:5a:f6:37:9a:60:4d:da:
86:0b:2c:67:83:da:07:d5:67:bc:ea:14:1e:b8:24:
7d:a4:92:d3:04:2c:8d:43:b9:ba:8c:ea:d3:fc:bd:
20:66:42:7d:ee:f2:df:53:06:b7:fa:29:6d:37:28:
e3:bb:2b:f6:19:27:c5:28:11:24:d2:f0:f0:be:19:
c0:ee:f1:83:b3:f9:24:00:ae:82:93:7f:91:17:86:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:C7:5A:B8:3E:82:6F:49:F9:F1:5E:2A:F8:48:19:BF:FD:4B:DE
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/a83HWrg-gm9J-fFeKvhIGb_9S94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.235.79.0/24
188.75.78.0/23
213.195.22.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e6:fb:83:d6:8c:51:7a:4f:d9:0f:cd:31:5f:3a:79:e2:57:
af:f9:3e:ba:a9:d9:d2:f6:e1:4e:46:67:9a:9b:40:b2:df:70:
5c:a2:ad:ec:46:92:3e:4d:04:a1:82:cf:ec:68:16:10:42:bf:
92:49:1a:11:65:fe:db:00:e9:9f:3e:f0:71:ae:ce:8d:1b:f8:
00:9f:6e:50:6e:d7:42:c8:b5:a5:20:49:e8:90:62:91:5a:6b:
18:34:f4:14:8c:86:ba:6b:f3:b6:a7:fe:cd:a4:b9:65:ac:37:
9f:7b:50:5b:e5:dd:a2:81:89:73:79:8d:84:39:30:fd:e7:f9:
73:1e:69:11:47:51:9e:5e:8b:ce:70:4c:06:63:18:af:c3:9f:
9b:b3:23:bf:3c:b8:2f:ee:a6:9f:a2:5c:e0:b3:10:91:9e:82:
b9:bb:90:e5:f5:92:7e:5c:8d:e4:96:ae:5a:7f:65:76:f0:ad:
31:23:da:61:72:30:54:06:68:db:82:18:a1:73:ba:03:2e:00:
26:59:e4:5c:37:39:f9:54:12:10:5c:23:0d:50:b9:18:aa:b9:
86:05:f1:15:80:f9:6a:c7:57:c9:8d:c9:90:8f:0e:63:76:f9:
55:af:aa:47:27:d8:84:6e:c8:34:ba:fe:76:fd:e3:09:35:75:
d0:c2:ef:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaErBa7ouTb0rfPRxQ4kk1IGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYxMDExMTI1MjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmNkYzc1YWI4M2U4MjZmNDlmOWYxNWUyYWY4NDgxOWJmZmQ0YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsul1Ev4B4zkNuPHPapzREpkeHkqK
q9JGTatDq0k2sf3gVqwP2fKjVlLjm6SFqJhtyqjHQJ5+rW6EN9GpPlkcUJf3bffT
8B5lpAH87bpBLCxKI6NVbo2g1SiBxsdTNa5Xvcq2vN8IPAkLjnX4INmIVQQr5siW
EUuxL+lF6tJiBwNDC2OJYspIxJkECIJupPwdbSoX/RvUzShX7VKwwqnON7HSwKLe
Txs2xQ/E0Vr2N5pgTdqGCyxng9oH1We86hQeuCR9pJLTBCyNQ7m6jOrT/L0gZkJ9
7vLfUwa3+iltNyjjuyv2GSfFKBEk0vDwvhnA7vGDs/kkAK6Ck3+RF4YEQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGvNx1q4PoJvSfnxXir4SBm//UveMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvYTgzSFdyZy1nbTlKLWZGZUt2aElHYl85Uzk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWetPAwQB
vEtOAwQA1cMWMA0GCSqGSIb3DQEBCwUAA4IBAQAD5vuD1oxRek/ZD80xXzp54lev
+T66qdnS9uFORmeam0Cy33Bcoq3sRpI+TQShgs/saBYQQr+SSRoRZf7bAOmfPvBx
rs6NG/gAn25QbtdCyLWlIEnokGKRWmsYNPQUjIa6a/O2p/7NpLllrDefe1Bb5d2i
gYlzeY2EOTD95/lzHmkRR1GeXovOcEwGYxivw5+bsyO/PLgv7qafolzgsxCRnoK5
u5Dl9ZJ+XI3klq5af2V28K0xI9phcjBUBmjbghihc7oDLgAmWeRcNzn5VBIQXCMN
ULkYqrmGBfEVgPlqx1fJjcmQjw5jdvlVr6pHJ9iEbsg0uv52/eMJNXXQwu+J
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:05 2026 by rpki-client