Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/s8XsRBdciWVy4Y0zs0iyIJs7jQE.roa
File: s8XsRBdciWVy4Y0zs0iyIJs7jQE.roa (raw, json)
Hash identifier: w/WmzLF41DJ//lBRST3RbCdyFHioJtXQJPfN8ZnSuPw=
Subject key identifier: B3:C5:EC:44:17:5C:89:65:72:E1:8D:33:B3:48:B2:20:9B:3B:8D:01
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A19EE584581FE18B75DA5A3D2CAA8E0B77
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/s8XsRBdciWVy4Y0zs0iyIJs7jQE.roa
Signing time: Tue 03 Nov 2026 00:53:24 +0000
ROA not before: Tue 03 Nov 2026 00:53:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:e5:84:58:1f:e1:8b:75:da:5a:3d:2c:aa:8e:0b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Nov 3 00:53:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3c5ec44175c896572e18d33b348b2209b3b8d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:9d:20:8b:74:0e:46:09:43:4a:78:52:28:
d1:87:1a:98:40:c0:56:4a:2a:22:08:e6:85:5b:32:
73:4e:f3:56:01:05:b8:90:d6:d0:b4:1e:46:97:aa:
0e:27:c2:59:71:94:81:5d:a9:eb:f6:12:a3:d6:21:
20:dd:e9:c4:b6:61:b1:6b:54:d4:01:4e:2f:fd:44:
3e:4e:51:8a:56:e5:19:84:4f:43:15:bd:95:b6:97:
16:8d:f8:13:b1:06:a3:86:7c:bb:6f:74:04:d2:56:
ea:cd:00:1b:9b:77:16:33:a5:a7:43:16:25:cc:60:
63:cd:27:a6:70:7d:56:a8:5c:90:fa:01:dc:c2:86:
83:73:6b:3a:13:03:0d:00:dd:f7:59:cc:c6:60:33:
30:5f:62:90:8f:c6:f8:e7:3a:8d:b1:92:48:da:9f:
f0:9a:e6:b4:b0:ef:64:74:c0:0c:cb:b6:16:95:c9:
a4:2e:bf:3d:f5:60:f7:a8:54:92:83:e5:7b:e6:3c:
ba:95:d0:c9:f6:f4:73:51:55:9c:be:d0:99:fc:10:
9f:42:e5:01:4f:81:73:c0:36:cd:43:33:9d:ee:6e:
9b:83:60:e2:61:5e:c0:4b:d0:c8:7d:20:3c:f8:a3:
cb:ab:5b:69:c4:f8:ef:48:67:06:73:e5:cc:0a:ad:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:EC:44:17:5C:89:65:72:E1:8D:33:B3:48:B2:20:9B:3B:8D:01
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/s8XsRBdciWVy4Y0zs0iyIJs7jQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.15.0-89.187.17.255
89.187.19.0/24
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3d:03:9b:0d:f9:99:f4:2f:af:a5:ce:6f:26:6f:16:b8:fd:
8b:6f:34:fd:ed:8b:59:15:f4:51:61:c7:b2:1c:db:f6:34:29:
39:a8:9d:53:63:4e:36:8f:30:ae:d2:04:b4:ac:96:b6:08:c4:
8a:0a:f5:ab:d1:2f:d9:f0:8f:f4:e3:3d:98:71:2f:66:7a:af:
21:85:21:08:3a:8f:b6:e8:f3:87:98:bc:7b:bf:ec:c8:3e:2d:
df:e9:ba:fe:70:0a:ab:aa:f8:59:6e:55:02:b8:27:d5:5e:8d:
b3:96:98:8a:50:25:28:1e:fd:80:fc:dd:1c:12:8f:c5:9c:6f:
7f:c5:15:88:b3:6a:44:49:d2:bc:b5:bd:b5:09:45:ce:7f:a0:
8b:55:94:59:9d:68:cc:aa:d5:5f:1a:90:a3:b5:8b:df:b1:25:
60:87:9f:56:1d:f0:65:a9:2f:5a:8f:06:c4:cc:1b:dc:3b:2e:
7f:63:d7:ad:44:8c:b2:ec:e4:48:3d:2c:f8:ec:43:a3:80:32:
6e:5c:c7:fc:fc:86:30:74:72:72:af:5a:14:9f:12:db:b2:7e:
aa:a2:7a:f8:6f:1a:16:cf:23:1a:d8:26:0f:22:79:b1:51:07:
cf:01:04:64:18:c9:58:8f:20:87:25:1d:6f:66:ef:67:d8:c0:
4e:1f:8e:64
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAaGe5YRYH+GLddpaPSyqjgt3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYxMTAzMDA1MzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2M1ZWM0NDE3NWM4OTY1NzJlMThkMzNiMzQ4YjIyMDliM2I4ZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiudIIt0DkYJQ0p4UijRhxqYQMBW
SioiCOaFWzJzTvNWAQW4kNbQtB5Gl6oOJ8JZcZSBXanr9hKj1iEg3enEtmGxa1TU
AU4v/UQ+TlGKVuUZhE9DFb2VtpcWjfgTsQajhny7b3QE0lbqzQAbm3cWM6WnQxYl
zGBjzSemcH1WqFyQ+gHcwoaDc2s6EwMNAN33WczGYDMwX2KQj8b45zqNsZJI2p/w
mua0sO9kdMAMy7YWlcmkLr899WD3qFSSg+V75jy6ldDJ9vRzUVWcvtCZ/BCfQuUB
T4FzwDbNQzOd7m6bg2DiYV7AS9DIfSA8+KPLq1tpxPjvSGcGc+XMCq2HUQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFLPF7EQXXIllcuGNM7NIsiCbO40BMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvczhYc1JCZGNpV1Z5NFkwenMwaXlJSnM3alFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAWbsIAwQA
WbsKAwQAWbsMMAwDBABZuw8DBAFZuxADBABZuxMDBABZuxYwDQYJKoZIhvcNAQEL
BQADggEBAF89A5sN+Zn0L6+lzm8mbxa4/YtvNP3ti1kV9FFhx7Ic2/Y0KTmonVNj
TjaPMK7SBLSslrYIxIoK9avRL9nwj/TjPZhxL2Z6ryGFIQg6j7bo84eYvHu/7Mg+
Ld/puv5wCquq+FluVQK4J9VejbOWmIpQJSge/YD83RwSj8Wcb3/FFYizakRJ0ry1
vbUJRc5/oItVlFmdaMyq1V8akKO1i9+xJWCHn1Yd8GWpL1qPBsTMG9w7Ln9j161E
jLLs5Eg9LPjsQ6OAMm5cx/z8hjB0cnKvWhSfEtuyfqqievhvGhbPIxrYJg8iebFR
B88BBGQYyViPIIclHW9m72fYwE4fjmQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:53 2026 by rpki-client