Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CIBTu_a3fZnHtkUmSxwcH4fH7d8.roa
File: CIBTu_a3fZnHtkUmSxwcH4fH7d8.roa (raw, json)
Hash identifier: fhBzLgdwVilk5T+3M31nyc9Im6bd1Mf6bSTZy2U5h7w=
Subject key identifier: 08:80:53:BB:F6:B7:7D:99:C7:B6:45:26:4B:1C:1C:1F:87:C7:ED:DF
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEB8A3B2D4FADD1A8A44D3A035A186D1C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CIBTu_a3fZnHtkUmSxwcH4fH7d8.roa
Signing time: Mon 10 Aug 2026 11:58:52 +0000
ROA not before: Mon 10 Aug 2026 11:58:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 89.213.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:8a:3b:2d:4f:ad:d1:a8:a4:4d:3a:03:5a:18:6d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 10 11:58:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=088053bbf6b77d99c7b645264b1c1c1f87c7eddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:bb:09:1b:43:b0:48:2c:2e:c4:43:16:3e:
64:31:fd:70:fd:3b:10:da:9b:dc:d0:b4:df:12:ca:
c0:1a:a7:dd:4c:d9:ca:64:b0:b1:84:e0:15:0d:2c:
ee:1c:aa:ab:9c:c0:13:0d:9a:4f:84:51:92:f9:9b:
db:15:49:33:05:fa:1a:3c:a7:19:7a:b8:db:9f:d3:
4c:85:0f:ee:27:12:78:67:3f:0e:a0:13:e6:dc:66:
ff:3e:2c:fc:e2:6a:0d:9c:59:fc:ca:6a:50:23:bb:
51:88:79:a5:5c:ea:52:46:38:47:64:9e:5a:d5:82:
1e:b2:aa:d8:13:34:f5:6e:5a:33:7f:ff:9a:ee:c0:
69:bc:07:90:67:78:db:46:d6:3d:a5:3a:7d:60:c0:
54:f1:57:37:7f:09:8a:50:20:fb:04:a0:e2:79:f1:
ff:eb:49:ae:c6:14:ff:1f:f8:04:99:f5:20:37:33:
60:a3:74:37:6a:37:00:93:cc:4e:94:f1:fe:fb:4b:
f3:3b:3c:19:e2:0a:6d:e3:e6:2c:ba:85:25:9b:d9:
a4:a1:0f:53:b5:56:95:dd:47:45:fb:89:0d:e7:eb:
6b:5e:66:53:20:6b:01:9a:08:b1:6d:e9:6b:e6:34:
2c:75:69:a3:f1:fe:e8:0f:4e:62:32:51:45:24:64:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:80:53:BB:F6:B7:7D:99:C7:B6:45:26:4B:1C:1C:1F:87:C7:ED:DF
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CIBTu_a3fZnHtkUmSxwcH4fH7d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.47.0/24
Signature Algorithm: sha256WithRSAEncryption
09:39:c3:ed:30:16:02:df:0f:08:ed:71:72:ec:1d:3f:5e:56:
12:6e:35:87:7a:20:85:ee:7e:0a:37:19:2a:bc:8f:8f:bc:47:
da:26:0b:53:f5:45:f5:c3:db:5a:4e:3c:8c:5f:9c:69:f7:ec:
5a:2c:bc:9d:ce:37:1e:77:dd:a5:15:0d:17:e0:53:93:80:36:
b1:17:32:08:8c:a0:8e:6e:18:86:3d:b7:9d:61:a4:fa:ef:c0:
a6:ad:33:9d:1f:74:7c:17:1b:f9:cb:85:8f:88:ee:ae:4c:fb:
5d:47:fd:39:9c:36:4e:93:9a:e3:97:59:a8:6a:ec:28:e0:f2:
8c:52:57:ae:9c:6c:6e:0a:83:1a:05:87:64:5f:dc:c3:f3:e3:
2b:97:50:e9:ea:88:c5:ab:eb:d2:cf:d5:e9:a6:70:b9:1e:b1:
f0:b1:da:2f:c0:43:c8:95:70:d9:a2:25:d9:d0:bc:47:40:90:
06:36:5f:aa:1c:c8:09:ec:de:1f:7c:b7:1c:95:3c:b1:50:15:
26:11:50:5d:7a:df:db:45:36:7e:e2:e3:1d:f9:f2:28:3d:80:
3c:dd:e8:25:3e:1f:71:ec:20:00:a1:7b:02:fc:ea:34:aa:38:
f1:14:c6:88:7a:e3:0e:c4:18:f6:ee:4d:46:44:09:69:0e:cd:
1a:94:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:23 2026 by rpki-client