Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9wbTMnaWbb97EIX9hkihtbDVeuo.roa
File: 9wbTMnaWbb97EIX9hkihtbDVeuo.roa (raw, json)
Hash identifier: rfeLVCfwBexei8k+S+NnmkfHHsZQvRdOhHyFd7s+NhQ=
Subject key identifier: F7:06:D3:32:76:96:6D:BF:7B:10:85:FD:86:48:A1:B5:B0:D5:7A:EA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B61CFE1AE119852B92340FFFD0EA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9wbTMnaWbb97EIX9hkihtbDVeuo.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32693
IP address blocks: 89.213.113.0/24 maxlen: 24
89.213.115.0/24 maxlen: 24
89.213.120.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:1c:fe:1a:e1:19:85:2b:92:34:0f:ff:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f706d33276966dbf7b1085fd8648a1b5b0d57aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:39:f8:f2:40:6f:27:c8:48:11:0c:fa:0a:
60:48:50:39:b7:fa:4b:dc:ff:0f:91:53:ca:7a:d8:
2b:5c:25:b4:a0:41:15:55:c9:93:78:26:da:5c:dd:
fe:49:b1:7b:43:69:48:3d:96:03:21:0e:32:71:7f:
c0:cf:6b:a6:86:37:4a:a6:64:d5:4e:56:e5:f6:59:
37:b1:f8:8d:95:af:be:9e:40:21:a5:4e:3d:f0:4a:
9b:b6:11:da:ea:16:f2:eb:57:01:90:93:6c:71:50:
5d:12:53:5c:df:a0:cc:81:aa:d2:d3:bf:37:54:da:
8a:9a:b1:ea:4d:bc:d1:49:39:b2:c9:aa:09:a6:21:
59:34:9f:1d:4e:88:a4:2a:ce:26:45:14:20:e4:bc:
5d:97:2c:75:fe:97:2d:ed:e1:af:79:84:4d:44:e5:
96:27:b0:e5:df:1d:a5:17:3f:dd:75:d4:69:00:07:
ac:e0:e2:18:53:4f:e9:03:ea:6f:85:ef:b2:62:a9:
a3:92:e1:2f:76:7f:ea:bf:e3:49:87:df:13:88:e2:
08:e7:f8:de:85:48:ad:a6:81:5b:b0:c0:50:b5:d9:
5a:7f:b1:26:62:9f:25:92:80:79:1c:fb:c0:8a:0e:
28:fc:5e:3e:d3:ac:98:d0:bc:ff:44:66:6d:b0:fc:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:D3:32:76:96:6D:BF:7B:10:85:FD:86:48:A1:B5:B0:D5:7A:EA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9wbTMnaWbb97EIX9hkihtbDVeuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.113.0/24
89.213.115.0/24
89.213.120.0/24
89.213.122.0/24
89.213.126.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1e:86:7f:13:71:b6:b8:29:12:35:7b:bf:6c:0d:a1:b2:40:
aa:18:c6:ee:3a:2e:a0:62:03:6b:84:5d:e1:0c:c2:a0:1a:9b:
d9:02:ed:f3:24:56:96:d9:4a:07:86:69:33:5d:a5:13:d4:c8:
15:25:8c:4b:a4:a7:ab:b8:33:7b:31:78:62:50:cd:98:c7:6a:
66:79:29:f7:67:34:ec:31:bf:3e:ee:f2:5b:db:5b:65:3c:c0:
24:11:ab:b9:e8:03:75:b5:6a:1a:92:05:36:7f:1d:3a:17:20:
9a:fb:9f:64:7f:c8:59:8a:ac:e0:78:03:b2:f9:bd:29:b1:ad:
ab:f2:61:31:07:10:a0:d7:29:5d:a2:dd:26:fc:f7:ea:d7:57:
23:d1:c0:fc:96:d9:21:6f:1c:01:67:3d:00:dd:43:66:20:23:
c1:47:e2:a2:5a:6b:53:80:4f:69:88:49:82:81:83:6c:58:9b:
fe:47:e2:7d:1f:2f:38:42:19:38:89:82:46:ee:7d:eb:55:a7:
e3:7c:08:de:1a:0b:13:bd:a6:3c:33:04:ea:99:77:b4:1b:d9:
8f:1e:bb:be:f0:c5:7d:d9:25:fc:d1:b2:92:96:0f:e1:d1:2b:
2a:11:3f:b3:8b:ce:f6:31:fc:53:dd:f3:e0:f2:32:7f:81:27:
07:3d:b2:f0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8jaLYc/hrhGYUrkjQP/9DqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzA2ZDMzMjc2OTY2ZGJmN2IxMDg1ZmQ4NjQ4YTFiNWIwZDU3YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb45+PJAbyfISBEM+gpgSFA5t/pL
3P8PkVPKetgrXCW0oEEVVcmTeCbaXN3+SbF7Q2lIPZYDIQ4ycX/Az2umhjdKpmTV
Tlbl9lk3sfiNla++nkAhpU498EqbthHa6hby61cBkJNscVBdElNc36DMgarS0783
VNqKmrHqTbzRSTmyyaoJpiFZNJ8dToikKs4mRRQg5Lxdlyx1/pct7eGveYRNROWW
J7Dl3x2lFz/dddRpAAes4OIYU0/pA+pvhe+yYqmjkuEvdn/qv+NJh98TiOII5/je
hUitpoFbsMBQtdlaf7EmYp8lkoB5HPvAig4o/F4+06yY0Lz/RGZtsPzdWwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPcG0zJ2lm2/exCF/YZIobWw1XrqMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvOXdiVE1uYVdiYjk3RUlYOWhraWh0YkRWZXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWdVxAwQA
WdVzAwQAWdV4AwQAWdV6AwQAWdV+MA0GCSqGSIb3DQEBCwUAA4IBAQBiHoZ/E3G2
uCkSNXu/bA2hskCqGMbuOi6gYgNrhF3hDMKgGpvZAu3zJFaW2UoHhmkzXaUT1MgV
JYxLpKeruDN7MXhiUM2Yx2pmeSn3ZzTsMb8+7vJb21tlPMAkEau56AN1tWoakgU2
fx06FyCa+59kf8hZiqzgeAOy+b0psa2r8mExBxCg1yldot0m/Pfq11cj0cD8ltkh
bxwBZz0A3UNmICPBR+KiWmtTgE9piEmCgYNsWJv+R+J9Hy84Qhk4iYJG7n3rVafj
fAjeGgsTvaY8MwTqmXe0G9mPHru+8MV92SX80bKSlg/h0SsqET+zi872MfxT3fPg
8jJ/gScHPbLw
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:12 2026 by rpki-client