Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q_ZnFgW5aHJF6bdBXPKYxz2o6hk.roa
File: Q_ZnFgW5aHJF6bdBXPKYxz2o6hk.roa (raw, json)
Hash identifier: R5gwwhGlbugGoXq+gquMF2LgOZa8Zd9CHCjbgvSXFV0=
Subject key identifier: 43:F6:67:16:05:B9:68:72:45:E9:B7:41:5C:F2:98:C7:3D:A8:EA:19
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A023532EC388BB905953A5AEA8A5C032DB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q_ZnFgW5aHJF6bdBXPKYxz2o6hk.roa
Signing time: Fri 21 Aug 2026 07:57:28 +0000
ROA not before: Fri 21 Aug 2026 07:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 89.213.47.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:53:2e:c3:88:bb:90:59:53:a5:ae:a8:a5:c0:32:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 21 07:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f6671605b9687245e9b7415cf298c73da8ea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:f4:c6:ff:9e:82:33:1a:1c:01:ba:2c:07:
e4:1c:5e:b8:2e:d6:11:22:e1:99:ca:e5:c5:93:b1:
9c:10:d1:33:b0:7b:f0:87:f3:0d:87:22:0b:7d:a9:
c7:19:5c:c5:79:1e:48:4c:87:48:62:de:4c:fc:ec:
91:22:1c:6c:4c:55:2c:eb:13:4a:81:36:9a:c2:6d:
51:24:ec:6b:19:2f:86:20:cd:6a:68:77:6e:6e:a2:
cd:c6:bf:88:4b:cb:ba:8b:5e:1f:f9:46:ab:dd:49:
f3:a9:cb:5a:1a:73:45:4e:25:26:13:f6:b6:28:d8:
28:37:6a:e6:19:00:d6:94:5e:e7:18:2e:40:e3:fb:
a8:ae:ce:52:86:fe:91:0c:fd:fa:ca:a4:ca:d4:3c:
9e:02:86:0e:8f:b9:e7:82:15:fc:38:99:74:77:00:
bf:3f:99:48:08:c6:d7:f7:d9:e0:04:1d:9b:e6:b6:
92:8f:50:70:16:31:16:40:51:2b:bd:01:77:69:9c:
02:74:c1:f8:e5:d5:ae:13:64:7a:6a:82:dc:88:69:
01:0f:a5:fd:c0:19:b1:f9:fc:f6:24:2a:a5:cb:96:
4f:6f:70:c5:2d:74:53:7e:ca:9e:63:a9:88:c1:df:
f2:0d:24:a7:c3:34:85:3f:aa:c4:8d:02:ee:3c:af:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:67:16:05:B9:68:72:45:E9:B7:41:5C:F2:98:C7:3D:A8:EA:19
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q_ZnFgW5aHJF6bdBXPKYxz2o6hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.47.0/24
89.213.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d7:e4:6c:f1:49:67:bc:45:b4:44:51:15:65:f7:3f:9e:51:
34:57:2d:71:f5:34:65:be:32:05:e6:8d:6e:0a:74:88:8f:7f:
c9:dd:cc:0e:80:63:4f:18:54:6c:57:1f:79:97:27:6f:75:b2:
7e:8e:7f:59:10:f0:c3:90:39:95:f4:8f:48:74:e2:84:bc:81:
07:f3:38:6e:1e:5f:fc:39:d1:c3:ce:66:37:a1:5f:af:e2:f0:
97:92:ca:98:0b:16:96:0d:1f:21:8e:a9:48:a1:06:5f:ad:2e:
67:4a:79:5a:9e:4c:32:98:03:23:ee:84:2d:d5:8a:12:3a:02:
2b:4c:53:53:3e:be:4c:01:17:18:e6:88:e4:97:38:79:93:ac:
e9:0c:40:49:c4:2f:0c:e7:45:c9:79:aa:f6:36:56:d0:21:2c:
6c:ad:8b:48:ad:f2:fe:b1:8a:5d:c6:80:9a:06:b6:51:b2:5f:
dd:23:30:ce:65:86:98:b3:88:28:eb:79:83:dc:5f:a8:c5:bf:
f5:dd:87:f5:aa:5e:5e:71:5c:fb:ac:3c:dc:41:76:e4:fd:4f:
3f:ed:18:5b:5c:74:5b:85:df:e4:a6:b4:49:2d:b1:d0:38:cc:
70:77:1c:75:19:d9:a2:5a:f7:88:37:e0:e7:31:2d:0c:b9:63:
ae:e8:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:01 2026 by rpki-client