Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SI9dRHZIDH0IQ6ODON5sqSFjm5Q.roa
File: SI9dRHZIDH0IQ6ODON5sqSFjm5Q.roa (raw, json)
Hash identifier: twFPgYej9XsKC4o/0EQ3XjQsIHlUJDR/kwVUXo+dOUw=
Subject key identifier: 48:8F:5D:44:76:48:0C:7D:08:43:A3:83:38:DE:6C:A9:21:63:9B:94
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F6544A364A7B4C50A56E3B1C3940345B3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SI9dRHZIDH0IQ6ODON5sqSFjm5Q.roa
Signing time: Wed 15 Jul 2026 10:13:44 +0000
ROA not before: Wed 15 Jul 2026 10:13:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 89.213.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:44:a3:64:a7:b4:c5:0a:56:e3:b1:c3:94:03:45:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 15 10:13:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=488f5d4476480c7d0843a38338de6ca921639b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:ce:ea:72:20:4c:b1:e2:db:25:6a:9e:77:
14:c9:bc:ec:bd:fd:72:e2:21:3e:f0:04:eb:ee:7c:
7a:23:a4:ee:c1:c4:56:3d:b3:f2:05:3f:5b:bb:34:
91:39:95:a3:83:76:50:dc:29:57:fd:ac:c4:a5:2b:
30:15:39:bd:6f:99:da:54:77:5e:a2:23:0a:de:d8:
20:64:0e:9b:0a:b8:86:a9:79:3a:8b:7a:77:75:9f:
af:f4:dd:05:d5:7f:f0:de:42:e5:5e:36:e0:dc:d6:
cf:62:3e:d5:98:da:5c:7a:b3:f4:5a:d4:f3:f4:32:
23:05:35:30:98:2e:41:56:15:30:e7:05:3f:98:a9:
d3:a0:a7:9b:4e:06:27:21:1d:d0:12:ac:53:87:ec:
4b:41:5b:8c:ec:47:eb:dd:52:8b:4a:56:d5:df:17:
f0:a7:6b:b7:73:ea:3d:5d:cc:1d:e7:b0:3b:1d:70:
44:2c:fe:53:7d:e1:50:1f:9b:24:f6:c7:a9:e1:73:
da:8c:c4:3a:59:62:83:1a:2b:34:bd:75:00:b5:7f:
9e:46:9b:dd:24:35:77:3c:59:60:5f:f7:b4:24:d7:
eb:4d:b5:66:d6:e9:2a:2d:4b:ac:10:ce:ee:9a:37:
42:a8:83:a3:fc:4a:b2:bb:92:ba:66:a1:d6:e9:b7:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:5D:44:76:48:0C:7D:08:43:A3:83:38:DE:6C:A9:21:63:9B:94
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SI9dRHZIDH0IQ6ODON5sqSFjm5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.68.0/24
Signature Algorithm: sha256WithRSAEncryption
68:38:67:d9:e1:9c:9d:5a:1b:df:60:34:6a:d2:69:87:38:31:
0f:e0:49:d8:67:f8:d3:40:a2:30:85:80:ec:c7:70:75:d9:a3:
e1:7f:6c:1f:24:5e:53:37:56:7d:0f:e4:dd:85:a1:9b:27:26:
ba:16:48:ba:c7:af:92:e6:7c:04:e3:0c:ce:fe:5e:22:92:d3:
c2:33:0d:31:8b:61:56:36:37:a9:91:f8:39:7a:9e:dd:c2:d1:
29:ae:2f:c3:33:2f:b6:cc:81:fd:91:e2:39:de:03:46:9b:b9:
0e:5d:f8:0b:78:5e:b2:a5:f9:28:5f:8b:24:62:87:72:0e:68:
45:2d:15:b0:45:6b:5b:b5:f4:2f:b7:bd:88:54:0b:50:ee:86:
28:8a:34:55:11:a3:43:3c:b6:ef:04:2f:26:90:3b:08:74:5d:
c5:f7:b6:8f:2f:df:48:f1:a5:ca:67:52:c3:4e:6d:3e:21:7f:
1e:69:c1:79:bc:d5:4a:c4:4c:08:ec:f5:be:e0:fd:05:05:95:
dd:27:2e:5a:e3:bc:c2:9e:07:85:ef:c2:d8:0e:0e:93:8c:77:
58:69:c8:1c:af:fb:22:4f:a8:21:a8:d6:22:d1:58:ec:e8:f2:
fa:55:2b:bf:fd:b7:ec:0e:31:7f:5f:2b:b1:4f:2e:10:37:34:
eb:16:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client