Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/8uJCBle1RKglYo7Vf5SU8h3gjCQ.roa
File: 8uJCBle1RKglYo7Vf5SU8h3gjCQ.roa (raw, json)
Hash identifier: CF7kzsiD0kB3UltpYKPxVQqRtJ8dCPMNmAuDmAiZHv4=
Subject key identifier: F2:E2:42:06:57:B5:44:A8:25:62:8E:D5:7F:94:94:F2:1D:E0:8C:24
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 01A013AE24B066E590A54CDCF641772B373D
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/8uJCBle1RKglYo7Vf5SU8h3gjCQ.roa
Signing time: Tue 18 Aug 2026 07:02:54 +0000
ROA not before: Tue 18 Aug 2026 07:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59692
IP address blocks: 89.219.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:ae:24:b0:66:e5:90:a5:4c:dc:f6:41:77:2b:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Aug 18 07:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2e2420657b544a825628ed57f9494f21de08c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:5e:22:cc:18:a9:27:ed:80:cd:e3:69:51:
05:28:e0:27:cf:c1:a8:c8:b8:74:d4:27:11:29:46:
ab:84:04:6a:b7:00:5d:4f:ca:dc:c7:b5:26:91:bf:
c2:3b:10:60:e0:1c:a2:f6:b3:03:ee:d1:32:d5:fc:
62:eb:f2:dc:5c:db:51:40:ac:87:b5:55:dd:61:0a:
ce:14:3b:b5:c7:93:0e:bf:58:78:f5:31:a1:ed:6b:
9e:a2:02:72:a7:b6:9c:da:48:bc:d3:de:8d:0f:e2:
c6:0f:86:fb:9b:fc:ce:26:56:aa:6b:ed:0e:f1:49:
e7:6e:0a:9e:57:fb:4a:2b:c4:a8:5e:f0:fb:39:9c:
7d:e8:6a:ac:b2:8d:bf:14:34:c9:80:b5:d2:87:35:
36:57:c1:85:50:f5:f1:02:a1:0f:47:83:86:0f:68:
bb:cf:4d:db:9a:df:c2:fe:5b:aa:a3:08:0c:76:2b:
1c:98:ff:03:57:6c:69:40:8a:df:9a:f1:22:5c:bc:
ef:b4:bb:d0:7b:91:a6:4e:39:94:3f:c0:74:2b:0c:
5a:d4:ca:b1:63:36:a4:36:9e:95:e1:be:f9:1d:b9:
ad:13:7b:00:a5:c1:f5:29:a0:93:d6:8d:88:51:a9:
9b:d9:79:9d:dc:32:6b:b7:30:f5:78:87:17:90:0b:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:42:06:57:B5:44:A8:25:62:8E:D5:7F:94:94:F2:1D:E0:8C:24
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/8uJCBle1RKglYo7Vf5SU8h3gjCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.219.1.0/24
Signature Algorithm: sha256WithRSAEncryption
06:be:26:8c:9b:a4:dc:a6:82:97:30:3a:3d:37:3a:70:09:13:
da:d1:cf:ca:52:9d:b1:cd:17:91:39:44:d8:9a:bb:b0:15:03:
4f:c5:f0:86:ee:c7:b9:30:4b:46:e9:d4:37:7f:c2:19:0a:fc:
aa:b1:fd:e8:60:10:36:d6:87:f4:f3:49:6f:99:9c:e6:46:0e:
46:c9:82:74:93:cc:06:29:e8:14:a0:7c:5b:c6:ec:10:aa:0e:
9f:ff:ff:26:4f:bb:f6:37:b9:7f:ac:b8:e8:3f:c1:17:aa:a1:
8c:39:3b:d7:28:5c:a6:47:29:38:16:20:31:fa:6e:a1:b3:53:
a9:53:0b:47:27:dc:39:33:01:6f:7c:7b:bb:90:13:89:ee:c9:
fe:b0:ab:97:60:4f:8f:ac:95:19:08:1e:96:f6:f1:9d:b5:87:
5d:28:95:08:7c:95:73:67:ff:19:cf:43:4d:ec:41:be:e1:72:
19:8a:d3:8c:7d:aa:49:a6:cc:d9:af:9f:df:5f:6e:b2:7f:68:
ed:96:7a:cc:92:44:c9:e9:c0:9d:9e:64:25:03:4b:dc:51:67:
9f:d0:99:ff:d5:10:a8:2d:80:62:96:b7:2c:b1:2c:ff:26:98:
f1:7e:d4:5e:f3:45:05:f2:4c:dd:f4:42:9e:f7:5a:e0:a8:2b:
00:1b:11:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaATriSwZuWQpUzc9kF3Kzc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2ExZDViZGQ1MDM0NGZmNWVmODg0YTY2MGU4MmViYTgz
YmMwZGIwHhcNMjYwODE4MDcwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmUyNDIwNjU3YjU0NGE4MjU2MjhlZDU3Zjk0OTRmMjFkZTA4YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7xeIswYqSftgM3jaVEFKOAnz8Go
yLh01CcRKUarhARqtwBdT8rcx7Umkb/COxBg4Byi9rMD7tEy1fxi6/LcXNtRQKyH
tVXdYQrOFDu1x5MOv1h49TGh7WueogJyp7ac2ki8096ND+LGD4b7m/zOJlaqa+0O
8UnnbgqeV/tKK8SoXvD7OZx96Gqsso2/FDTJgLXShzU2V8GFUPXxAqEPR4OGD2i7
z03bmt/C/luqowgMdiscmP8DV2xpQIrfmvEiXLzvtLvQe5GmTjmUP8B0Kwxa1Mqx
YzakNp6V4b75HbmtE3sApcH1KaCT1o2IUamb2Xmd3DJrtzD1eIcXkAtTnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLiQgZXtUSoJWKO1X+UlPId4IwkMB8GA1UdIwQY
MBaAFA7KHVvdUDRP9e+ISmYOguuoO8DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzct
N2M3ZjAwYTk1M2UxLzEvOHVKQ0JsZTFSS2dsWW83VmY1U1U4aDNnakNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzctN2M3ZjAwYTk1M2Ux
LzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdsBMA0G
CSqGSIb3DQEBCwUAA4IBAQAGviaMm6TcpoKXMDo9NzpwCRPa0c/KUp2xzReROUTY
mruwFQNPxfCG7se5MEtG6dQ3f8IZCvyqsf3oYBA21of080lvmZzmRg5GyYJ0k8wG
KegUoHxbxuwQqg6f//8mT7v2N7l/rLjoP8EXqqGMOTvXKFymRyk4FiAx+m6hs1Op
UwtHJ9w5MwFvfHu7kBOJ7sn+sKuXYE+PrJUZCB6W9vGdtYddKJUIfJVzZ/8Zz0NN
7EG+4XIZitOMfapJpszZr5/fX26yf2jtlnrMkkTJ6cCdnmQlA0vcUWef0Jn/1RCo
LYBilrcssSz/JpjxftRe80UF8kzd9EKe91rgqCsAGxF1
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:24 2026 by rpki-client