Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kaTRlDoyluczDwkCMN9lUlVXcys.roa
File: kaTRlDoyluczDwkCMN9lUlVXcys.roa (raw, json)
Hash identifier: Y/cXjWf58KJBpo9AoS04Y/lS4iOuu987GrVPaPfgXJo=
Subject key identifier: 91:A4:D1:94:3A:32:96:E7:33:0F:09:02:30:DF:65:52:55:57:73:2B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0EC0C89B94095BC588ACC2872A5C95B5B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kaTRlDoyluczDwkCMN9lUlVXcys.roa
Signing time: Tue 29 Sep 2026 07:23:59 +0000
ROA not before: Tue 29 Sep 2026 07:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 89.213.69.0/24 maxlen: 24
89.213.72.0/24 maxlen: 24
89.213.75.0/24 maxlen: 24
89.213.76.0/24 maxlen: 24
89.213.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:0c:89:b9:40:95:bc:58:8a:cc:28:72:a5:c9:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 29 07:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91a4d1943a3296e7330f090230df65525557732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:69:ec:bf:17:07:fe:3c:68:4b:f8:eb:9a:
a4:f9:f9:02:bf:aa:4a:1a:3e:9c:0e:1a:e2:9a:b5:
39:b0:27:f3:93:8b:49:14:cd:f7:b9:55:dc:33:b5:
47:cb:30:11:76:f7:b8:bc:96:b4:a6:ca:41:2f:62:
3a:3e:70:24:0e:3c:54:63:3c:2d:da:6e:bb:f2:db:
b3:cb:18:5e:3a:62:1a:e3:bc:a7:5f:df:07:27:e7:
aa:ea:e7:83:e0:5e:2d:c0:c7:e1:c2:50:2e:27:bc:
9f:02:af:f3:31:30:ff:fa:e8:3c:b2:9d:f9:16:29:
05:97:0a:65:c6:00:5e:6e:9b:ff:5c:c7:38:23:18:
77:2f:1e:9d:81:70:0d:54:71:b2:c9:be:68:4d:4e:
de:27:d5:c7:8c:64:9d:4a:fa:5d:00:b1:ae:74:47:
a5:dc:c0:b7:05:67:9e:91:b4:2c:67:17:63:68:4e:
8d:65:0c:87:f2:b7:ef:09:3b:66:e9:8f:5a:4e:5b:
05:1c:88:56:28:9c:e8:7b:fe:33:e9:00:4b:e3:8e:
59:a5:14:e6:b3:7e:95:60:22:16:a4:53:a8:4e:24:
f2:a5:38:af:48:3b:7d:a7:cd:8f:13:13:64:7c:42:
f8:b9:a7:cc:ed:fa:59:50:22:ce:8d:a9:f2:4a:42:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:D1:94:3A:32:96:E7:33:0F:09:02:30:DF:65:52:55:57:73:2B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kaTRlDoyluczDwkCMN9lUlVXcys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.69.0/24
89.213.72.0/24
89.213.75.0-89.213.76.255
89.213.78.0/24
Signature Algorithm: sha256WithRSAEncryption
15:49:d6:b3:d9:4a:cd:f1:1c:ea:6c:ce:00:86:3a:7e:1d:47:
14:13:d4:37:b7:14:e6:a7:2b:39:58:3f:f8:91:65:14:bc:f0:
77:fb:39:bb:8e:3c:df:f9:a9:de:8a:aa:49:71:88:31:97:35:
e8:46:22:e7:c5:cb:22:aa:a0:8a:e3:e2:cb:b7:0e:02:bb:d8:
3b:aa:07:2e:2c:d4:5e:ba:cf:c9:13:21:42:06:44:54:5f:55:
7a:43:3b:c9:a2:f6:3f:89:c6:f8:8c:80:f5:55:45:c5:5b:a7:
e0:fc:91:d4:7c:7d:dc:f9:1f:f5:45:97:5a:66:65:4b:c0:9e:
5f:e6:90:aa:c9:d1:14:ec:ac:3c:42:c2:d7:39:85:d3:5f:02:
ec:af:48:a9:a3:b3:48:61:fb:eb:b8:21:f5:2d:d1:ed:06:27:
61:04:7f:97:1e:fe:dd:27:72:15:67:59:26:1c:66:68:78:96:
28:a6:25:f0:68:05:ee:1c:8c:0d:c2:e7:2c:65:3c:65:03:8a:
3e:09:35:a8:15:6e:e1:d7:04:d4:54:e9:8b:77:6b:04:d4:45:
cf:97:82:7a:fe:35:29:b1:51:5e:67:71:e2:fb:c8:7f:be:fe:
8f:bb:67:c9:f0:d1:a3:f2:10:09:14:e3:90:a1:73:95:63:ba:
e6:fa:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:17 2026 by rpki-client