Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y3jNd9-j4t0QVBFIM_BEYS4-CWc.roa
File: Y3jNd9-j4t0QVBFIM_BEYS4-CWc.roa (raw, json)
Hash identifier: 1ODUQplACeyXylMNYca2FclxqNhHyIfZyVn1VaAgRDA=
Subject key identifier: 63:78:CD:77:DF:A3:E2:DD:10:54:11:48:33:F0:44:61:2E:3E:09:67
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05208A6419611FA462B36848B1931D11B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y3jNd9-j4t0QVBFIM_BEYS4-CWc.roa
Signing time: Sun 30 Aug 2026 09:38:13 +0000
ROA not before: Sun 30 Aug 2026 09:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 89.213.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:08:a6:41:96:11:fa:46:2b:36:84:8b:19:31:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 30 09:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6378cd77dfa3e2dd1054114833f044612e3e0967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:7a:07:84:4f:85:ab:03:5f:c4:80:a4:3a:
64:dc:1d:2f:88:0e:2c:c0:0a:be:d6:d5:a7:ec:9d:
af:68:c3:b8:f3:fb:79:82:82:40:8c:c5:71:01:fa:
87:93:a6:2d:3e:4e:f8:f9:0e:75:9b:3f:92:88:84:
9f:51:9c:93:0a:40:32:c8:d9:ec:d2:5c:e1:17:a3:
f0:29:10:56:ae:02:0c:ba:ce:27:e5:50:e7:d4:e5:
73:8b:8d:f4:dc:4a:8e:1d:3c:f1:45:89:bd:d5:a7:
5f:ec:bc:77:11:46:da:a1:f6:4a:cc:a2:1c:82:9e:
3f:c6:ef:4e:04:2d:c9:ba:72:11:69:71:4c:bd:a4:
6c:7f:ff:c6:dd:09:9d:cd:69:c7:ca:55:77:25:1e:
29:06:54:75:e9:34:7e:0d:ef:3f:fd:aa:15:83:1c:
5d:f9:9e:7a:35:45:04:55:94:68:6e:1b:df:1e:96:
38:e3:41:7d:94:8b:d2:42:c2:f7:c3:e0:c7:29:ba:
59:e7:be:14:00:52:83:20:3c:e7:ad:0c:02:68:6f:
e5:c5:9e:d8:1b:cc:98:00:b4:9a:6f:d4:bc:8f:e8:
6f:07:b7:8f:71:4b:90:72:ad:88:14:65:43:d3:c9:
99:81:51:33:22:6e:5f:8b:3d:16:82:f4:1f:bb:8d:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:CD:77:DF:A3:E2:DD:10:54:11:48:33:F0:44:61:2E:3E:09:67
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y3jNd9-j4t0QVBFIM_BEYS4-CWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.7.0/24
Signature Algorithm: sha256WithRSAEncryption
45:08:a1:d4:5e:f7:57:e4:79:9a:8b:04:1c:89:6f:eb:23:03:
67:16:f9:a5:ca:d0:86:50:f0:c4:79:5d:5e:4b:fd:e3:70:6d:
54:31:8f:41:c9:82:97:95:79:ce:24:90:b4:c3:67:a0:4e:15:
3d:09:39:90:d4:63:9b:7b:2e:a2:70:a3:1b:15:9d:de:5a:a2:
2d:06:1d:38:40:64:b8:25:85:da:05:6a:3f:02:66:85:fc:bf:
19:85:d7:77:64:36:59:04:8d:b6:1b:c8:8e:46:57:74:f4:55:
b1:31:4f:85:a4:66:6f:2f:a8:6b:b7:ef:64:41:c6:52:24:a1:
fd:72:8b:64:8f:cc:f6:85:a1:27:75:ff:47:20:59:45:de:7a:
b2:c9:bc:87:4f:76:6c:26:91:b3:f3:73:f9:4d:03:38:b7:3a:
77:58:1c:18:6b:f6:53:53:bc:32:2d:0c:85:39:ec:08:66:f1:
cb:97:b0:b4:e9:d9:ee:4e:c0:3b:56:0c:81:87:a2:bb:5d:51:
a9:38:05:95:ec:9b:87:87:55:a8:aa:ed:b6:35:93:bb:dd:7c:
0d:bf:dc:c0:e4:38:4b:45:de:1c:4b:9e:fe:dc:12:91:f5:0a:
a1:6f:5c:3a:36:6f:37:7e:00:5c:95:25:3d:78:bc:31:6f:25:
26:2b:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:16 2026 by rpki-client