Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u8o0AUXiSSSZmBgNppvwlJuTAT0.roa
File: u8o0AUXiSSSZmBgNppvwlJuTAT0.roa (raw, json)
Hash identifier: XXxjPWWi3F6yYaSvPX3H/9US8/FIUOxuU8nODwuQkkc=
Subject key identifier: BB:CA:34:01:45:E2:49:24:99:98:18:0D:A6:9B:F0:94:9B:93:01:3D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A03899A890F021B5846F3532E14EB075EB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u8o0AUXiSSSZmBgNppvwlJuTAT0.roa
Signing time: Tue 25 Aug 2026 11:06:29 +0000
ROA not before: Tue 25 Aug 2026 11:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 89.213.119.0/24 maxlen: 24
213.210.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:99:a8:90:f0:21:b5:84:6f:35:32:e1:4e:b0:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 25 11:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbca340145e249249998180da69bf0949b93013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0b:a3:27:15:c1:4a:0d:c8:d1:7e:7c:61:28:
a3:f6:d0:9e:69:24:fd:e6:1f:3d:ea:23:41:b0:67:
6e:30:ab:c5:a8:e1:53:90:e9:7a:7e:25:a1:ab:3f:
32:6b:9e:3f:08:7e:1f:4b:93:c5:4e:fa:21:ec:8f:
d5:75:3e:c3:e3:da:82:b1:4a:94:d4:de:c3:15:f6:
27:1c:b9:ee:c2:0a:88:6c:5a:1e:2c:b0:08:b4:c1:
51:95:1d:14:0a:12:b7:2f:b5:12:f4:26:a8:a6:df:
98:59:8e:48:fe:80:19:9a:1f:a7:fd:b8:15:4b:6f:
9d:d5:01:15:41:ff:f9:1b:5a:5a:ba:7a:78:36:c9:
9d:1a:1d:10:66:3f:68:2d:0f:dc:31:0b:88:f3:9c:
dc:55:40:62:67:12:1e:09:94:70:2e:98:07:59:50:
9c:3f:11:56:f6:85:fb:95:86:30:05:c2:ab:32:41:
1a:25:dd:27:52:25:ab:5f:b3:f7:80:da:77:15:bf:
67:c8:7d:2f:71:17:30:83:3b:d2:ba:30:0c:e4:b8:
2d:ab:84:48:68:91:ab:31:64:ee:15:c3:f2:65:47:
6e:5a:ff:a3:bf:dc:6e:55:ca:8a:15:0a:d8:bf:9e:
b6:69:ce:7f:cc:b7:84:83:e4:cd:44:6c:c6:54:cd:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:34:01:45:E2:49:24:99:98:18:0D:A6:9B:F0:94:9B:93:01:3D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u8o0AUXiSSSZmBgNppvwlJuTAT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.119.0/24
213.210.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e6:f7:15:e2:8f:b4:a0:6f:e3:d4:70:54:98:9b:20:81:c0:
16:6d:1e:e3:a8:6b:7f:53:05:5c:f6:86:aa:a0:85:6e:b8:8a:
4a:ff:e6:27:0e:39:0d:52:5a:55:70:cd:c2:f1:d6:18:a2:17:
da:d7:35:f0:e1:de:85:2f:de:d6:02:2a:e2:f5:28:82:ad:1a:
6d:70:48:5f:c8:50:0c:bc:e3:73:9b:a7:54:e0:e1:aa:45:b2:
64:d7:3a:ae:86:66:bb:bd:e8:cc:3c:26:49:4b:eb:8a:0d:b0:
f2:1f:3e:ff:6c:6e:fd:c0:f1:6b:76:0b:ef:dc:d1:fb:9d:58:
73:98:69:05:70:cb:af:39:7c:5b:4c:23:d3:77:51:c5:e5:f7:
24:4a:77:1d:61:d7:f4:a6:a8:a5:b1:c5:56:98:02:ac:3e:35:
0b:aa:7f:11:19:89:43:43:a9:23:02:48:22:44:82:36:c8:0c:
88:ce:fb:4a:af:08:22:8c:1e:8e:a2:fc:b9:3d:df:61:7e:7c:
9a:64:e2:9c:c9:7f:28:16:09:17:69:2b:66:78:02:0c:40:e8:
87:c8:f4:fa:3f:82:51:3f:ff:4f:cb:cb:65:39:c9:dd:57:f9:
e4:5b:78:85:9f:7e:4a:a5:e0:8d:f3:5e:7c:37:f2:5f:2b:15:
a7:7b:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:42 2026 by rpki-client