Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hivgg6TA6xjKYqOzxacn3b-m1O8.roa
File: hivgg6TA6xjKYqOzxacn3b-m1O8.roa (raw, json)
Hash identifier: zqFeUG28yJh89hY33HQ11mHb8oZ/GZPsHf7ueiE6YaM=
Subject key identifier: 86:2B:E0:83:A4:C0:EB:18:CA:62:A3:B3:C5:A7:27:DD:BF:A6:D4:EF
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368EC8F933E8285A48BEB8D7EE4E32F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hivgg6TA6xjKYqOzxacn3b-m1O8.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209336
IP address blocks: 89.213.62.0/24 maxlen: 24
212.38.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:8f:93:3e:82:85:a4:8b:eb:8d:7e:e4:e3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=862be083a4c0eb18ca62a3b3c5a727ddbfa6d4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:99:37:a4:cd:3b:dd:32:ea:f1:4e:55:ea:
3f:ca:dc:76:fc:c3:bb:87:d7:1f:71:c2:c4:1f:45:
e8:a1:62:85:90:18:40:f7:44:b2:2c:51:34:f7:06:
b8:27:83:32:55:37:87:51:4b:3c:82:3b:7a:e8:c4:
47:67:fe:27:2e:88:89:3c:d4:4d:55:ec:ca:fb:bf:
cd:a6:79:68:2a:83:e3:03:b8:25:5e:ff:1d:31:ae:
8a:b6:2a:fd:e3:70:20:07:40:42:8a:43:ce:e6:14:
17:9e:51:ac:e0:9d:a8:51:bb:14:d3:5d:a0:2d:93:
92:d9:13:50:77:a9:ee:70:8c:07:47:39:33:8e:02:
13:6e:b6:36:c3:22:c1:8b:10:3e:18:e1:a9:6d:27:
1c:ee:e1:c5:6c:8e:7a:1c:78:a1:13:8f:be:f9:62:
1f:6b:42:2d:02:ce:0f:f7:ef:63:0b:17:c4:5a:68:
02:63:89:4c:6b:08:88:bc:7d:25:a4:57:4f:cc:35:
1f:73:3d:3b:07:c3:22:5a:95:38:ca:ce:d2:f7:c6:
74:64:80:96:5a:7f:38:8f:23:0a:c3:b4:64:c4:d7:
59:a8:a4:68:04:9b:de:99:7d:00:9c:5e:37:11:8c:
0b:ef:22:b4:5e:87:63:7e:45:41:94:d0:3e:9c:da:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:E0:83:A4:C0:EB:18:CA:62:A3:B3:C5:A7:27:DD:BF:A6:D4:EF
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hivgg6TA6xjKYqOzxacn3b-m1O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.62.0/24
212.38.71.0/24
Signature Algorithm: sha256WithRSAEncryption
19:49:1d:83:e1:08:06:fb:4e:5b:78:a0:9e:97:e6:6d:01:18:
e6:5b:a0:d1:f0:14:85:14:9f:6e:c3:70:06:61:eb:47:50:bf:
80:ec:90:79:34:bf:a5:b6:ff:a7:39:be:0c:7e:53:88:87:fe:
1e:33:53:e3:7c:43:c7:63:ff:64:92:a4:19:90:f2:be:6e:ab:
22:b9:c9:34:17:9e:49:de:e0:9f:9c:3d:18:98:da:f1:1d:6e:
f0:69:d4:07:0c:a1:dc:e1:a0:93:59:2f:7d:ef:cb:8a:32:a2:
93:66:40:b6:52:68:1d:09:e0:75:9e:a9:fb:5e:9d:f2:c0:24:
39:f3:73:bd:8c:53:d7:9b:50:27:ad:e2:d4:c2:27:89:f6:8d:
4e:de:e5:db:6e:95:fe:1c:7f:3e:1f:00:ff:01:81:a1:dd:2a:
8f:1d:52:28:fe:71:cf:1d:1c:85:47:a0:7b:fb:25:94:e5:1d:
4b:0f:11:85:71:d5:74:90:62:69:32:ed:b9:31:7a:dd:61:d5:
2a:40:38:e6:cd:08:b0:66:a3:a6:09:7f:95:fc:2b:c9:af:91:
a4:41:66:4d:24:c2:c6:46:19:77:fa:71:54:c0:45:8e:de:4e:
64:2f:18:de:2c:f2:a0:d2:c8:00:2a:cf:18:8f:b0:52:30:06:
aa:d8:ad:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaOyPkz6ChaSL641+5OMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjJiZTA4M2E0YzBlYjE4Y2E2MmEzYjNjNWE3MjdkZGJmYTZkNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYmZN6TNO90y6vFOVeo/ytx2/MO7
h9cfccLEH0XooWKFkBhA90SyLFE09wa4J4MyVTeHUUs8gjt66MRHZ/4nLoiJPNRN
VezK+7/NpnloKoPjA7glXv8dMa6Ktir943AgB0BCikPO5hQXnlGs4J2oUbsU012g
LZOS2RNQd6nucIwHRzkzjgITbrY2wyLBixA+GOGpbScc7uHFbI56HHihE4+++WIf
a0ItAs4P9+9jCxfEWmgCY4lMawiIvH0lpFdPzDUfcz07B8MiWpU4ys7S98Z0ZICW
Wn84jyMKw7RkxNdZqKRoBJvemX0AnF43EYwL7yK0XodjfkVBlNA+nNrfzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIYr4IOkwOsYymKjs8WnJ92/ptTvMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvaGl2Z2c2VEE2eGpLWXFPenhhY24zYi1tMU84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdU+AwQA
1CZHMA0GCSqGSIb3DQEBCwUAA4IBAQAZSR2D4QgG+05beKCel+ZtARjmW6DR8BSF
FJ9uw3AGYetHUL+A7JB5NL+ltv+nOb4MflOIh/4eM1PjfEPHY/9kkqQZkPK+bqsi
uck0F55J3uCfnD0YmNrxHW7wadQHDKHc4aCTWS9978uKMqKTZkC2UmgdCeB1nqn7
Xp3ywCQ583O9jFPXm1AnreLUwieJ9o1O3uXbbpX+HH8+HwD/AYGh3SqPHVIo/nHP
HRyFR6B7+yWU5R1LDxGFcdV0kGJpMu25MXrdYdUqQDjmzQiwZqOmCX+V/CvJr5Gk
QWZNJMLGRhl3+nFUwEWO3k5kLxjeLPKg0sgAKs8Yj7BSMAaq2K2Y
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:56 2026 by rpki-client