Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/padF-8FYk4JrXRR0IOCsaaTuZyU.roa
File: padF-8FYk4JrXRR0IOCsaaTuZyU.roa (raw, json)
Hash identifier: pZ9O+4JLCQEd/t7N+Ba0zqJFOeJ29M2ZNtAF26m6c/A=
Subject key identifier: A5:A7:45:FB:C1:58:93:82:6B:5D:14:74:20:E0:AC:69:A4:EE:67:25
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A023532F548B913FCF2EFEC0CDDCE5B986
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/padF-8FYk4JrXRR0IOCsaaTuZyU.roa
Signing time: Fri 21 Aug 2026 07:57:29 +0000
ROA not before: Fri 21 Aug 2026 07:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219068
IP address blocks: 89.213.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:53:2f:54:8b:91:3f:cf:2e:fe:c0:cd:dc:e5:b9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 21 07:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5a745fbc15893826b5d147420e0ac69a4ee6725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:cd:78:f1:54:13:bd:43:e7:00:b9:0b:34:
fc:66:16:c7:a2:01:e4:ac:b5:85:60:dc:36:ee:d0:
12:ee:2e:60:55:20:75:1b:49:14:cd:e0:7f:e0:b2:
6d:21:1d:97:ed:78:8e:b0:72:08:9e:01:9f:04:0c:
95:b0:ba:20:a7:e6:f3:87:b0:be:cc:a2:45:24:44:
42:92:9a:87:2f:73:3a:6f:47:5f:da:ce:77:82:a6:
0b:ee:a7:c3:ff:48:8a:e1:61:c7:0d:10:7f:05:7a:
e8:b4:48:ab:3d:15:a6:4c:50:2b:e1:48:2e:79:e3:
15:85:4e:64:7a:41:46:3f:ad:ad:f9:cc:48:ab:fd:
35:72:e3:dc:73:fe:25:a7:a4:74:0e:86:ab:c7:57:
39:96:f4:99:86:d1:1d:36:83:7a:89:79:36:fe:35:
8a:90:3c:25:09:01:c4:5d:24:0c:37:1a:87:53:f6:
b0:26:bb:01:bb:b8:6d:69:0a:fc:b9:63:0d:d4:b6:
68:0b:ac:05:6a:0f:44:8d:e1:6d:1b:60:5e:04:f1:
73:d7:74:ad:5e:78:1d:ad:6a:05:c9:ee:ab:0d:c8:
01:c5:23:2f:1d:67:eb:8f:a8:bc:6b:fd:4c:52:46:
f0:7b:b3:09:07:da:a6:65:4e:d4:ba:10:23:65:03:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:45:FB:C1:58:93:82:6B:5D:14:74:20:E0:AC:69:A4:EE:67:25
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/padF-8FYk4JrXRR0IOCsaaTuZyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f5:62:09:22:8d:46:b1:c1:d2:7e:f0:98:41:7f:cd:1c:ec:
e0:df:f9:60:15:21:86:06:36:11:de:b3:e8:2d:79:d0:73:a5:
31:e0:ac:e7:cc:69:8f:36:1c:8d:f4:97:2c:9d:2d:d7:75:01:
9e:d5:86:af:91:9a:ec:8f:c8:30:3d:02:0f:cb:11:d5:99:25:
dc:f0:de:3e:fa:fe:c2:42:52:93:a7:f7:61:58:de:a4:b1:26:
8c:35:e9:44:bf:54:ec:4d:66:d2:ab:89:43:a7:d6:86:c1:e2:
9a:df:51:ba:01:33:4d:7a:d5:0f:3f:a8:61:30:18:f7:7d:d2:
22:0a:95:2c:60:81:3c:3f:d8:b2:37:56:14:c7:a9:b8:12:f5:
7d:d1:2c:a7:31:28:6d:0d:b9:22:de:ec:9a:12:db:6c:5b:46:
fa:e4:b5:af:86:58:4a:54:54:20:33:2b:5b:e0:7c:94:51:b4:
31:82:81:d3:53:3c:6e:17:74:ed:19:5a:4f:e7:f1:48:69:f9:
2d:01:24:a3:a8:0f:84:36:47:ea:84:1d:5e:1c:1e:35:40:64:
13:e1:fb:e5:c8:9a:28:1b:65:29:54:17:7f:52:ec:8d:df:e8:
e1:12:4b:8e:e3:c4:be:d4:61:0e:d5:1c:66:5e:bb:3c:d6:f5:
bb:1b:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 10:35:37 2026 by rpki-client