Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Upr794Q4VvMYUA4DfOymWz96xD0.roa
File: Upr794Q4VvMYUA4DfOymWz96xD0.roa (raw, json)
Hash identifier: nl3gfH5K/PugQ1/nAAIhKH6UQzrpuNu/J6SKUhsk/JA=
Subject key identifier: 52:9A:FB:F7:84:38:56:F3:18:50:0E:03:7C:EC:A6:5B:3F:7A:C4:3D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B9AF8ECF49468FB80415F3177692
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Upr794Q4VvMYUA4DfOymWz96xD0.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44803
IP address blocks: 89.28.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:af:8e:cf:49:46:8f:b8:04:15:f3:17:76:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=529afbf7843856f318500e037ceca65b3f7ac43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:46:b0:29:7c:09:d9:06:67:b8:6d:73:2e:
cb:30:01:ab:1e:1c:42:5d:bd:06:5d:6e:e9:57:76:
39:12:41:7a:b9:ab:b8:41:a4:2c:db:06:15:d9:f6:
43:fb:20:2e:b9:61:6e:1d:f3:32:4e:50:42:bb:1f:
c7:ca:63:6a:f9:a1:8a:a7:e2:8c:b2:52:56:26:13:
0a:60:85:21:c9:f0:11:28:57:7a:60:c2:3a:0a:09:
a9:5b:5c:aa:ca:64:2c:f8:99:0a:dc:74:30:5c:9c:
68:f1:00:d7:83:11:a7:82:ab:94:a9:c9:56:80:c7:
2a:4e:d4:d1:ed:02:4b:cd:18:ab:6c:b3:84:3c:54:
11:7b:03:e5:76:b6:19:d4:a3:2b:eb:03:e0:18:3e:
d7:cf:13:ef:40:a5:ea:55:b1:61:a4:b6:fa:1f:4e:
c3:5a:09:3e:10:92:f2:ba:d5:40:7f:17:a5:ec:ba:
af:2a:45:40:34:01:a4:f6:aa:cc:ab:70:f6:bd:62:
2d:e5:0f:7d:4e:b5:68:eb:bb:2a:52:a3:93:27:f7:
ed:db:b8:ad:2c:be:a0:0f:b5:2c:cd:73:a0:1e:ea:
4f:f5:a8:d5:ef:76:75:2c:b6:9a:83:45:27:36:46:
e2:6e:07:a3:32:5d:cd:cd:3c:4c:90:99:d8:c6:0a:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9A:FB:F7:84:38:56:F3:18:50:0E:03:7C:EC:A6:5B:3F:7A:C4:3D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Upr794Q4VvMYUA4DfOymWz96xD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.236.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4d:a1:9c:8d:b2:7a:19:0b:d0:09:3a:8d:85:c1:8a:03:de:
a3:9a:54:f5:f3:0f:6a:da:b1:86:4c:94:be:45:d0:27:a2:34:
59:d6:83:bd:43:e5:2c:ae:41:81:89:92:38:65:74:95:37:49:
df:db:7e:44:7a:30:a3:8c:dc:66:38:07:bf:6e:fa:8b:7f:1f:
63:a1:cd:26:1d:78:fc:0f:d5:b2:d5:84:57:b8:f4:fb:10:2e:
3a:d0:24:e9:e3:ba:d6:38:44:1d:74:6e:7b:ba:36:0a:d8:e5:
1a:45:ae:4b:eb:67:47:db:e9:fe:9e:b5:96:da:5e:95:2c:ff:
e5:aa:1b:75:79:12:b3:da:24:50:ac:a5:ef:35:7e:89:27:87:
f8:24:77:39:18:63:90:f0:39:1f:ee:25:c0:ce:10:c4:ec:ce:
e1:d4:ef:97:39:70:e6:e1:62:43:bd:ea:72:15:a7:82:2f:d1:
3d:bf:c4:77:9e:72:90:2b:b0:0b:dc:e3:10:0e:a3:f9:84:46:
8d:7d:5c:48:f8:3b:f0:6f:c8:ea:8f:ce:6f:54:0c:da:50:09:
0c:be:60:58:99:40:fd:c5:a9:28:06:78:6e:6a:f3:d9:4b:ed:
9c:28:28:37:f1:77:2a:a2:65:fc:ce:05:a9:62:5e:79:70:06:
0d:e0:af:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLmvjs9JRo+4BBXzF3aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjlhZmJmNzg0Mzg1NmYzMTg1MDBlMDM3Y2VjYTY1YjNmN2FjNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFGsCl8CdkGZ7htcy7LMAGrHhxC
Xb0GXW7pV3Y5EkF6uau4QaQs2wYV2fZD+yAuuWFuHfMyTlBCux/HymNq+aGKp+KM
slJWJhMKYIUhyfARKFd6YMI6CgmpW1yqymQs+JkK3HQwXJxo8QDXgxGngquUqclW
gMcqTtTR7QJLzRirbLOEPFQRewPldrYZ1KMr6wPgGD7XzxPvQKXqVbFhpLb6H07D
Wgk+EJLyutVAfxel7LqvKkVANAGk9qrMq3D2vWIt5Q99TrVo67sqUqOTJ/ft27it
LL6gD7UszXOgHupP9ajV73Z1LLaag0UnNkbibgejMl3NzTxMkJnYxgozXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFKa+/eEOFbzGFAOA3zspls/esQ9MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvVXByNzk0UTRWdk1ZVUE0RGZPeW1Xejk2eEQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzsMA0G
CSqGSIb3DQEBCwUAA4IBAQApTaGcjbJ6GQvQCTqNhcGKA96jmlT18w9q2rGGTJS+
RdAnojRZ1oO9Q+UsrkGBiZI4ZXSVN0nf235EejCjjNxmOAe/bvqLfx9joc0mHXj8
D9Wy1YRXuPT7EC460CTp47rWOEQddG57ujYK2OUaRa5L62dH2+n+nrWW2l6VLP/l
qht1eRKz2iRQrKXvNX6JJ4f4JHc5GGOQ8Dkf7iXAzhDE7M7h1O+XOXDm4WJDvepy
FaeCL9E9v8R3nnKQK7AL3OMQDqP5hEaNfVxI+Dvwb8jqj85vVAzaUAkMvmBYmUD9
xakoBnhuavPZS+2cKCg38XcqomX8zgWpYl55cAYN4K+J
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:13 2026 by rpki-client