Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/taOgBCauCj402ANII_9cesJt0E8.roa
File: taOgBCauCj402ANII_9cesJt0E8.roa (raw, json)
Hash identifier: VmZ1Yo4Pnv47ZFzgJ7w2E7WKWe6hk1eSZ0GQUQJHFME=
Subject key identifier: B5:A3:A0:04:26:AE:0A:3E:34:D8:03:48:23:FF:5C:7A:C2:6D:D0:4F
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F390877242081FA4BA65569D42D54988E
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/taOgBCauCj402ANII_9cesJt0E8.roa
Signing time: Mon 06 Jul 2026 20:04:43 +0000
ROA not before: Mon 06 Jul 2026 20:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 89.187.24.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:08:77:24:20:81:fa:4b:a6:55:69:d4:2d:54:98:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 6 20:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a3a00426ae0a3e34d8034823ff5c7ac26dd04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:b1:36:33:ec:4b:68:cc:39:a8:a8:7a:60:
e2:ef:79:2c:a8:10:f6:69:d9:87:2d:15:76:31:36:
49:6f:c0:f2:1a:4e:ed:90:f3:b6:c6:3c:7c:8e:da:
8d:ec:74:48:37:63:cf:4c:1d:09:8d:48:ea:a1:5f:
07:eb:e6:85:da:30:6d:29:d8:3c:0f:9c:46:49:28:
7c:bb:29:97:a2:be:ec:5a:ce:22:4b:41:c6:7d:0b:
6f:28:74:a3:62:aa:28:84:ab:d6:05:c4:2e:7e:e7:
e0:49:29:fc:2c:94:16:50:d6:01:42:26:ee:7f:51:
c2:ff:3f:f0:c1:79:d9:55:90:77:16:2b:58:a8:91:
37:a9:8f:fb:67:51:fe:11:36:68:ba:3c:ba:0b:93:
09:ff:92:f4:b7:30:c6:17:fe:07:40:df:de:51:f6:
0c:56:4e:ff:de:48:1c:9a:31:64:9d:cc:5e:21:3c:
87:4a:d4:8d:9a:40:41:c5:4e:ac:32:e4:6b:1a:39:
fc:59:99:15:18:f3:65:f4:eb:89:19:2b:e2:db:eb:
e6:25:47:10:79:d8:df:f0:c9:5a:a7:b9:01:bc:e9:
28:4b:7f:a5:11:1d:23:3f:5c:d8:74:a0:a6:70:5c:
41:f5:56:e6:80:3f:31:e7:d6:8c:ac:f6:c5:f0:6b:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:A0:04:26:AE:0A:3E:34:D8:03:48:23:FF:5C:7A:C2:6D:D0:4F
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/taOgBCauCj402ANII_9cesJt0E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.24.0/24
89.187.26.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f7:65:90:f4:f7:ba:a3:60:51:45:03:57:59:78:1c:99:55:
32:4c:aa:2b:b0:f8:c9:05:48:82:c8:23:96:33:9d:8e:87:d4:
76:c0:ee:82:f0:0e:9b:49:89:b2:72:f8:b5:c8:73:ba:b0:1c:
a4:11:2d:17:3d:24:f7:21:87:9b:39:49:a5:bd:d6:49:8e:7b:
21:cc:83:95:41:64:54:15:7a:54:15:80:55:4a:08:96:4b:fc:
c0:7b:bf:66:61:15:63:ee:91:ff:be:23:6f:dd:65:46:6a:0f:
35:0e:54:1d:4f:fc:45:61:9c:aa:7a:2d:52:44:88:8b:e7:05:
67:64:fe:19:68:63:04:d2:06:4e:3c:e0:f6:51:0e:b2:7e:75:
f3:f5:fd:6d:06:33:11:64:d8:e8:09:db:51:72:79:80:d2:53:
17:35:7b:d6:ac:00:d9:b5:60:e0:c3:74:23:47:ca:e2:2d:bc:
21:f9:d1:2a:eb:5a:19:fe:81:dd:69:34:04:9c:b1:95:53:c6:
5e:d3:cd:50:aa:81:65:21:16:db:60:03:83:99:97:4d:9c:2b:
97:21:81:4d:60:83:e3:17:ad:a8:b5:14:92:df:a6:79:a5:b4:
e1:d3:34:fe:e4:b1:48:fe:4d:57:a9:a9:3b:e7:a1:17:7e:fa:
ce:4c:89:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ85CHckIIH6S6ZVadQtVJiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYwNzA2MjAwNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWEzYTAwNDI2YWUwYTNlMzRkODAzNDgyM2ZmNWM3YWMyNmRkMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR+xNjPsS2jMOaioemDi73ksqBD2
admHLRV2MTZJb8DyGk7tkPO2xjx8jtqN7HRIN2PPTB0JjUjqoV8H6+aF2jBtKdg8
D5xGSSh8uymXor7sWs4iS0HGfQtvKHSjYqoohKvWBcQufufgSSn8LJQWUNYBQibu
f1HC/z/wwXnZVZB3FitYqJE3qY/7Z1H+ETZoujy6C5MJ/5L0tzDGF/4HQN/eUfYM
Vk7/3kgcmjFkncxeITyHStSNmkBBxU6sMuRrGjn8WZkVGPNl9OuJGSvi2+vmJUcQ
edjf8Mlap7kBvOkoS3+lER0jP1zYdKCmcFxB9VbmgD8x59aMrPbF8GvnrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLWjoAQmrgo+NNgDSCP/XHrCbdBPMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvdGFPZ0JDYXVDajQwMkFOSUlfOWNlc0p0MEU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsYAwQA
WbsaMA0GCSqGSIb3DQEBCwUAA4IBAQCS92WQ9Pe6o2BRRQNXWXgcmVUyTKorsPjJ
BUiCyCOWM52Oh9R2wO6C8A6bSYmycvi1yHO6sBykES0XPST3IYebOUmlvdZJjnsh
zIOVQWRUFXpUFYBVSgiWS/zAe79mYRVj7pH/viNv3WVGag81DlQdT/xFYZyqei1S
RIiL5wVnZP4ZaGME0gZOPOD2UQ6yfnXz9f1tBjMRZNjoCdtRcnmA0lMXNXvWrADZ
tWDgw3QjR8riLbwh+dEq61oZ/oHdaTQEnLGVU8Ze081QqoFlIRbbYAODmZdNnCuX
IYFNYIPjF62otRSS36Z5pbTh0zT+5LFI/k1Xqak756EXfvrOTInr
-----END CERTIFICATE-----
Generated at Wed Jul 8 00:10:04 2026 by rpki-client