Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XoI-KrHl4XtKsIXsbtnWTdPC9XA.roa
File: XoI-KrHl4XtKsIXsbtnWTdPC9XA.roa (raw, json)
Hash identifier: RM4gG+5wAeAOfIlq7/zsrdO9IFfU7F3S2H5V1bWRW8c=
Subject key identifier: 5E:82:3E:2A:B1:E5:E1:7B:4A:B0:85:EC:6E:D9:D6:4D:D3:C2:F5:70
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01A15A477394482B023EBC3C6503A1BE7468
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XoI-KrHl4XtKsIXsbtnWTdPC9XA.roa
Signing time: Tue 20 Oct 2026 17:06:34 +0000
ROA not before: Tue 20 Oct 2026 17:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44807
IP address blocks: 89.39.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:47:73:94:48:2b:02:3e:bc:3c:65:03:a1:be:74:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 20 17:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e823e2ab1e5e17b4ab085ec6ed9d64dd3c2f570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:fb:2c:8e:7a:6e:5c:45:8f:7d:8a:ca:04:
c6:d7:39:90:07:90:e4:65:ce:c7:db:00:d8:98:fb:
31:41:76:4e:df:76:58:e4:90:c6:fc:68:42:7e:b2:
1e:ce:f5:3a:67:ab:b7:3e:01:04:84:4e:b1:51:2f:
54:d9:71:1d:0a:16:a6:6c:a7:f8:75:c9:f9:9f:56:
9d:56:c3:32:aa:df:2d:73:9e:b5:2c:41:a2:0a:2a:
f3:26:ed:23:c8:ee:85:8e:6f:f1:98:2f:ab:2f:c4:
a0:4f:66:b4:31:f2:22:65:16:8f:52:42:c3:b0:67:
cb:b6:8c:c4:4d:90:4c:f8:6c:17:14:01:80:5b:cd:
f2:5e:1e:6a:82:25:5c:67:8b:ee:36:4b:f6:40:08:
16:25:70:d2:ff:3d:51:a1:d0:74:a2:3e:30:73:be:
b2:ff:4a:54:e0:78:d8:35:ad:4c:23:fd:2f:2f:13:
5f:cc:f9:ee:08:45:a8:cd:1b:03:86:40:fd:63:8e:
fc:62:bc:55:05:f0:fd:a8:0f:fb:b7:bd:4c:5a:eb:
01:4e:53:35:1e:29:99:07:58:cd:73:f0:0a:67:df:
5f:3e:08:3d:9e:40:ba:30:e5:97:e6:e4:a2:fb:1e:
6b:61:fc:b2:4e:b5:fe:e4:9b:7e:a9:1d:50:8b:1a:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:82:3E:2A:B1:E5:E1:7B:4A:B0:85:EC:6E:D9:D6:4D:D3:C2:F5:70
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XoI-KrHl4XtKsIXsbtnWTdPC9XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.109.0/24
Signature Algorithm: sha256WithRSAEncryption
f6:30:d9:a2:e0:07:60:4d:ef:ab:23:95:bc:d9:84:a0:67:f5:
0a:11:d6:8b:84:9a:ad:e2:c8:76:e1:02:d4:c3:c7:a1:65:00:
58:41:f8:c8:37:c5:03:5e:08:fb:e1:e6:9f:ea:8d:fc:dd:aa:
db:9d:06:33:8a:0f:c5:51:83:37:0d:ab:1a:d4:ea:0a:3d:32:
9f:ea:8e:24:d5:d4:dc:92:bd:b4:fe:ee:db:97:00:cc:fc:d4:
a4:e2:4d:d5:fb:89:07:33:ec:7b:e9:45:45:2c:5f:c7:4f:e6:
35:f1:fd:05:8d:a5:82:53:e9:c9:90:1b:f3:28:aa:8b:c2:ef:
89:63:a1:3f:74:97:04:36:25:50:6c:3d:11:2c:be:3d:69:fa:
a9:d0:1b:3f:98:15:b2:94:01:a1:0e:96:a3:64:0d:3c:f2:0f:
22:bf:e1:63:0d:48:83:ad:79:82:66:9c:21:7f:bc:1b:c6:62:
92:6c:d8:f8:1f:01:64:90:b7:3f:6b:23:1c:99:9a:4e:74:5c:
42:9c:a3:46:db:9f:68:82:f3:77:24:d9:78:08:e2:d6:28:b7:
e2:25:45:6e:61:f5:92:13:4a:4a:38:79:8d:ca:02:6d:66:53:
1a:6c:b6:a6:b7:40:ba:45:84:13:14:59:62:b2:b7:2c:99:20:
32:4e:9e:8a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaFaR3OUSCsCPrw8ZQOhvnRoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjYxMDIwMTcwNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTgyM2UyYWIxZTVlMTdiNGFiMDg1ZWM2ZWQ5ZDY0ZGQzYzJmNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudD7LI56blxFj32KygTG1zmQB5Dk
Zc7H2wDYmPsxQXZO33ZY5JDG/GhCfrIezvU6Z6u3PgEEhE6xUS9U2XEdChambKf4
dcn5n1adVsMyqt8tc561LEGiCirzJu0jyO6Fjm/xmC+rL8SgT2a0MfIiZRaPUkLD
sGfLtozETZBM+GwXFAGAW83yXh5qgiVcZ4vuNkv2QAgWJXDS/z1RodB0oj4wc76y
/0pU4HjYNa1MI/0vLxNfzPnuCEWozRsDhkD9Y478YrxVBfD9qA/7t71MWusBTlM1
HimZB1jNc/AKZ99fPgg9nkC6MOWX5uSi+x5rYfyyTrX+5Jt+qR1Qixo7TwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFF6CPiqx5eF7SrCF7G7Z1k3TwvVwMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1hvSS1LckhsNFh0S3NJWHNidG5XVGRQQzlYQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZJ20w
DQYJKoZIhvcNAQELBQADggEBAPYw2aLgB2BN76sjlbzZhKBn9QoR1ouEmq3iyHbh
AtTDx6FlAFhB+Mg3xQNeCPvh5p/qjfzdqtudBjOKD8VRgzcNqxrU6go9Mp/qjiTV
1NySvbT+7tuXAMz81KTiTdX7iQcz7HvpRUUsX8dP5jXx/QWNpYJT6cmQG/MoqovC
74ljoT90lwQ2JVBsPREsvj1p+qnQGz+YFbKUAaEOlqNkDTzyDyK/4WMNSIOteYJm
nCF/vBvGYpJs2PgfAWSQtz9rIxyZmk50XEKco0bbn2iC83ck2XgI4tYot+IlRW5h
9ZITSko4eY3KAm1mUxpstqa3QLpFhBMUWWKytyyZIDJOnoo=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:08 2026 by rpki-client