Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S_3kHBBI-MIlqZRyDIwGldRowMc.roa
File: S_3kHBBI-MIlqZRyDIwGldRowMc.roa (raw, json)
Hash identifier: m0IlOW6U3RRFNLHbJsd/rb5tB+nO/sCnBFsk2sPJA88=
Subject key identifier: 4B:FD:E4:1C:10:48:F8:C2:25:A9:94:72:0C:8C:06:95:D4:68:C0:C7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEAB1832692497F3DBEC9B857F6E7C6F2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S_3kHBBI-MIlqZRyDIwGldRowMc.roa
Signing time: Mon 10 Aug 2026 08:02:09 +0000
ROA not before: Mon 10 Aug 2026 08:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 89.31.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b1:83:26:92:49:7f:3d:be:c9:b8:57:f6:e7:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 10 08:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bfde41c1048f8c225a994720c8c0695d468c0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:05:03:c1:63:74:3a:00:a3:49:43:99:77:
98:f1:9c:13:dd:58:7c:fb:94:ba:c1:af:71:4e:bc:
a2:90:6e:7a:a0:1a:8e:f5:ec:d1:82:c4:f9:71:c6:
58:33:a3:f5:06:65:84:98:b7:66:87:a0:a7:ed:63:
cc:8f:a0:1a:4b:a4:93:3d:c1:77:92:54:75:cf:e0:
c1:b9:0e:5d:b0:fd:0e:43:36:f6:88:e1:81:0a:90:
d2:2d:c0:79:fa:67:4a:c1:6e:35:74:f5:69:f8:33:
87:4b:f6:77:4c:b5:ca:ce:01:d4:4d:1c:89:38:d3:
be:42:c9:5f:79:bb:15:6e:43:25:12:3f:d9:18:32:
50:87:e3:a3:25:6b:dc:81:ef:2f:76:50:21:cd:82:
07:4c:29:85:6a:22:df:8b:e3:37:1a:cb:95:a6:0f:
42:62:99:0b:bf:18:6d:f6:80:9e:6a:54:42:65:48:
dc:99:c3:a7:e1:8c:89:fd:b8:82:cb:97:c5:06:7e:
81:39:2f:a4:c4:fd:3e:3d:07:10:2e:d4:e2:37:18:
8d:d4:72:7a:df:2e:7f:bf:8f:ed:2b:39:dc:ac:52:
43:3e:87:69:1e:49:6c:92:71:42:f6:11:f2:ef:e2:
b6:de:28:cc:d7:ad:ad:d4:65:4d:75:6f:6c:d5:fd:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:E4:1C:10:48:F8:C2:25:A9:94:72:0C:8C:06:95:D4:68:C0:C7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S_3kHBBI-MIlqZRyDIwGldRowMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.239.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2f:bd:e6:f9:69:2c:37:53:fc:d3:a9:e9:96:fe:5f:ba:65:
e8:fd:ee:4c:60:d8:db:f4:3b:f7:cf:f9:6c:07:3a:ba:a1:d3:
c9:27:c7:5b:45:9a:4d:66:f2:b6:1b:13:23:9c:99:fc:4b:be:
07:ff:be:d9:fb:3b:2f:97:68:2c:0d:af:f1:31:1d:e9:aa:b9:
a6:8e:24:62:2c:64:62:9f:e7:ce:f8:3d:67:36:8b:9f:77:30:
f9:5a:50:95:c2:c8:cd:70:e6:f3:79:99:07:f2:76:9d:8c:3d:
15:73:06:e7:62:9f:57:30:2e:ec:94:c1:6c:8a:c1:95:9f:90:
27:99:2c:8f:92:d6:d4:e8:65:89:2c:b9:0f:8e:42:5a:e7:92:
8b:fb:99:90:13:8b:f8:25:3b:11:f5:ee:f4:86:64:eb:11:5e:
33:f7:e9:fb:a5:6e:e2:78:26:1b:a6:83:91:64:d8:e1:e4:76:
23:9e:a4:1f:34:3c:d5:06:55:6e:dc:32:e0:c3:00:2b:0b:85:
f5:10:d8:19:5f:b3:51:af:8e:08:63:d5:ea:40:f8:33:6e:96:
87:9a:81:0c:f7:df:b9:c3:fd:4b:a0:23:eb:04:cc:da:2d:55:
0c:4e:b7:1f:2c:80:9a:ab:d4:c3:03:90:15:39:81:d7:73:dd:
9e:7a:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:30 2026 by rpki-client