Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1fjC7ELorgLXBd3YNxD4QZJdrtM.roa
File: 1fjC7ELorgLXBd3YNxD4QZJdrtM.roa (raw, json)
Hash identifier: ama+4+Qdwfom5kd1R4FcXHlYr8xjfI7nHwwfrmlH+mY=
Subject key identifier: D5:F8:C2:EC:42:E8:AE:02:D7:05:DD:D8:37:10:F8:41:92:5D:AE:D3
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C0805DC198F25FE754FAF08382F4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1fjC7ELorgLXBd3YNxD4QZJdrtM.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50385
IP address blocks: 89.213.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:80:5d:c1:98:f2:5f:e7:54:fa:f0:83:82:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5f8c2ec42e8ae02d705ddd83710f841925daed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:af:2a:cb:e4:e4:bb:32:02:52:b7:2a:1e:
9a:43:6a:fa:a2:f7:4d:7b:32:bf:60:1a:02:3c:a3:
69:77:64:71:4c:bf:c0:aa:21:24:d5:cc:ce:1f:83:
ad:7b:da:30:4d:4e:5d:e3:27:30:98:96:6e:26:e3:
62:7d:9b:a2:28:d8:72:50:b6:a6:53:29:91:44:cd:
c6:de:e6:5b:a9:ef:8a:89:75:f4:13:03:d3:63:e1:
71:6e:45:86:3e:dc:28:64:f2:28:5d:66:36:2d:14:
7d:1d:82:59:64:c0:1e:26:61:0d:bb:36:80:57:93:
90:9f:e4:de:f8:3b:0e:96:a8:27:27:9f:f1:91:c7:
35:ef:a7:e8:b3:20:76:12:ca:ae:52:39:e2:b3:7d:
d6:c8:ac:26:dd:cc:0c:75:2d:09:36:b6:d6:29:f1:
15:63:ef:9b:b3:7f:33:97:b6:5e:d9:8c:8e:e8:83:
82:a2:01:71:f0:a2:59:ae:59:f5:8a:48:e6:0d:44:
94:d2:81:de:d6:94:b7:e2:df:e6:c5:8c:f3:c8:93:
7b:a4:dc:6d:30:b7:63:49:e9:54:0c:09:3c:a0:c8:
44:91:4e:bf:1f:12:64:79:c8:81:69:e1:d8:1e:14:
f0:b8:df:51:1c:ee:94:b3:59:21:ab:53:e5:66:3b:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:C2:EC:42:E8:AE:02:D7:05:DD:D8:37:10:F8:41:92:5D:AE:D3
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1fjC7ELorgLXBd3YNxD4QZJdrtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.230.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1f:1c:f4:45:f1:ec:1a:24:96:9e:e2:d5:3c:c2:00:3d:85:
56:06:15:af:a8:2b:8c:24:26:ab:ad:15:de:aa:1c:68:5e:91:
d9:2d:a4:b8:89:7f:e3:db:4e:cd:30:3e:72:fb:95:5e:9f:ae:
ce:9a:dd:62:c9:a7:f9:ea:e5:e8:4c:0e:70:8a:aa:48:a0:43:
34:ce:14:a0:fa:10:9f:91:c8:bd:33:08:b3:4f:0c:79:5c:db:
01:1f:aa:28:9e:27:13:0e:21:9d:8c:58:d2:1e:e4:c5:6f:bf:
de:f3:40:f6:5f:37:76:b7:69:e1:61:b9:70:f8:b3:e1:16:9f:
a2:03:b9:5e:12:77:83:72:67:0e:6f:3d:9e:15:29:cb:51:74:
df:8a:32:78:e0:de:2a:2c:11:5c:c9:17:9a:fe:cc:38:e2:a7:
d3:79:ba:5d:cf:c9:d0:3f:5c:43:42:c0:da:df:d9:47:a2:0d:
2d:a3:16:a0:b6:98:0c:7d:a4:a4:ee:4a:01:c9:1a:f1:bf:59:
84:04:b0:d8:31:bc:26:aa:22:a0:95:05:e4:a8:a0:4c:b5:96:
d1:c0:d6:f5:81:d3:ac:3d:2b:f0:22:b1:0d:6f:6d:ab:05:16:
4c:3f:47:1f:f5:01:41:6f:56:aa:b8:e6:1c:75:02:96:e7:9e:
e6:1d:ac:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMCAXcGY8l/nVPrwg4L0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWY4YzJlYzQyZThhZTAyZDcwNWRkZDgzNzEwZjg0MTkyNWRhZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYCvKsvk5LsyAlK3Kh6aQ2r6ovdN
ezK/YBoCPKNpd2RxTL/AqiEk1czOH4Ote9owTU5d4ycwmJZuJuNifZuiKNhyULam
UymRRM3G3uZbqe+KiXX0EwPTY+FxbkWGPtwoZPIoXWY2LRR9HYJZZMAeJmENuzaA
V5OQn+Te+DsOlqgnJ5/xkcc176fosyB2EsquUjnis33WyKwm3cwMdS0JNrbWKfEV
Y++bs38zl7Ze2YyO6IOCogFx8KJZrln1ikjmDUSU0oHe1pS34t/mxYzzyJN7pNxt
MLdjSelUDAk8oMhEkU6/HxJkeciBaeHYHhTwuN9RHO6Us1khq1PlZjsrSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNX4wuxC6K4C1wXd2DcQ+EGSXa7TMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMWZqQzdFTG9yZ0xYQmQzWU54RDRRWkpkcnRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXmMA0G
CSqGSIb3DQEBCwUAA4IBAQATHxz0RfHsGiSWnuLVPMIAPYVWBhWvqCuMJCarrRXe
qhxoXpHZLaS4iX/j207NMD5y+5Ven67Omt1iyaf56uXoTA5wiqpIoEM0zhSg+hCf
kci9MwizTwx5XNsBH6oonicTDiGdjFjSHuTFb7/e80D2Xzd2t2nhYblw+LPhFp+i
A7leEneDcmcObz2eFSnLUXTfijJ44N4qLBFcyRea/sw44qfTebpdz8nQP1xDQsDa
39lHog0toxagtpgMfaSk7koByRrxv1mEBLDYMbwmqiKglQXkqKBMtZbRwNb1gdOs
PSvwIrENb22rBRZMP0cf9QFBb1aquOYcdQKW557mHayj
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:28 2026 by rpki-client