Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/vE1csrm_6c3aHypva1dNMXZ3cII.roa
File: vE1csrm_6c3aHypva1dNMXZ3cII.roa (raw, json)
Hash identifier: +4Y/13hizQrSI6qfWzhAEBHj6eFtduMTjq0NDEXp0Eo=
Subject key identifier: BC:4D:5C:B2:B9:BF:E9:CD:DA:1F:2A:6F:6B:57:4D:31:76:77:70:82
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A115BCF31FC0E46581630E063B702BC984
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/vE1csrm_6c3aHypva1dNMXZ3cII.roa
Signing time: Wed 07 Oct 2026 09:41:06 +0000
ROA not before: Wed 07 Oct 2026 09:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.222.88.0/24 maxlen: 24
89.222.89.0/24 maxlen: 24
89.222.90.0/24 maxlen: 24
89.222.91.0/24 maxlen: 24
89.222.92.0/24 maxlen: 24
89.222.93.0/24 maxlen: 24
89.222.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:bc:f3:1f:c0:e4:65:81:63:0e:06:3b:70:2b:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 7 09:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc4d5cb2b9bfe9cdda1f2a6f6b574d3176777082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:fe:2a:8a:a3:2a:2e:a1:bc:a5:d7:12:6b:
9b:8c:4a:6c:5e:57:79:fd:5a:a4:e6:63:ca:3b:18:
ae:a2:dd:5f:18:53:59:ae:0c:53:64:0f:96:a4:77:
a8:3f:3c:10:06:a5:eb:82:0f:e3:7d:0f:81:01:93:
cc:b9:3b:a2:69:f0:57:1d:ae:9f:07:ec:60:3a:42:
fd:a8:08:f7:69:4c:57:3b:01:c5:73:c3:98:0c:58:
3c:74:6f:5b:80:61:62:9a:07:3e:b0:85:79:5a:31:
26:f6:39:a7:44:ce:b8:db:19:35:41:3c:9d:a7:c2:
8e:18:24:6e:75:7b:ee:8d:86:36:0a:35:6a:01:79:
08:9d:0e:e2:2a:7d:92:d8:7a:65:7b:ae:45:72:cb:
dc:00:53:c0:18:ce:98:78:18:44:92:14:eb:21:98:
cf:35:4c:dc:a0:ef:07:2f:c8:02:f1:99:b7:36:6b:
e9:2f:54:e8:97:73:16:43:57:f8:1e:32:4e:45:e6:
29:f2:6b:72:ea:01:71:59:c2:db:c1:7b:97:c8:13:
23:0c:42:9d:fe:cc:52:b5:10:b2:af:15:4f:da:01:
7b:4d:75:ae:ad:df:19:4a:33:6e:dc:b4:57:d7:fe:
10:8d:9a:ef:d6:a6:5c:cb:b9:67:b0:9b:3f:05:67:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:5C:B2:B9:BF:E9:CD:DA:1F:2A:6F:6B:57:4D:31:76:77:70:82
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/vE1csrm_6c3aHypva1dNMXZ3cII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.88.0-89.222.94.255
Signature Algorithm: sha256WithRSAEncryption
a3:c6:d6:10:5e:f7:4b:91:51:b8:18:14:71:7a:f1:77:a6:63:
87:55:c5:0a:f7:fb:0d:6c:5b:98:c4:86:af:dc:e6:0b:0e:28:
2c:80:cd:e4:c5:39:4f:24:d4:c8:1b:bb:40:2d:fa:94:75:82:
c1:0e:26:d8:3e:cd:db:2d:09:c8:d7:47:08:3f:d2:d2:a7:b6:
8c:50:ae:4d:44:26:b7:c3:84:44:08:fd:a7:88:f8:87:f4:77:
a3:28:fc:3a:74:24:ff:70:28:e5:23:f6:23:28:d7:1c:f9:fb:
7c:8a:6d:87:46:7e:6c:67:22:ad:69:40:c5:d1:62:1b:64:e9:
c3:39:9d:38:93:b2:f1:12:2a:5c:1b:d9:f1:94:7b:20:9f:92:
1b:66:cf:69:37:c9:51:f6:25:38:1e:cb:7a:6e:d1:a9:16:fc:
3b:8b:31:9a:76:9f:20:00:6f:9b:df:49:63:b6:4c:f7:28:a5:
cd:5d:62:ee:07:c2:d7:01:c2:11:c2:fb:e8:5f:ac:ca:35:d9:
c4:02:8b:57:32:1d:a8:fc:64:19:e0:cd:ba:c4:52:b3:be:18:
9e:f0:a5:0e:02:59:8b:e7:22:53:6a:dc:14:2d:e6:0f:74:86:
00:1c:b7:f6:2a:6c:a2:5f:18:5c:39:14:f1:b3:ba:bc:e8:ac:
d9:65:af:e5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaEVvPMfwORlgWMOBjtwK8mEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjYxMDA3MDk0MTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzRkNWNiMmI5YmZlOWNkZGExZjJhNmY2YjU3NGQzMTc2Nzc3MDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHn+KoqjKi6hvKXXEmubjEpsXld5
/Vqk5mPKOxiuot1fGFNZrgxTZA+WpHeoPzwQBqXrgg/jfQ+BAZPMuTuiafBXHa6f
B+xgOkL9qAj3aUxXOwHFc8OYDFg8dG9bgGFimgc+sIV5WjEm9jmnRM642xk1QTyd
p8KOGCRudXvujYY2CjVqAXkInQ7iKn2S2Hple65FcsvcAFPAGM6YeBhEkhTrIZjP
NUzcoO8HL8gC8Zm3NmvpL1Tol3MWQ1f4HjJOReYp8mty6gFxWcLbwXuXyBMjDEKd
/sxStRCyrxVP2gF7TXWurd8ZSjNu3LRX1/4QjZrv1qZcy7lnsJs/BWflBQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLxNXLK5v+nN2h8qb2tXTTF2d3CCMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvdkUxY3NybV82YzNhSHlwdmExZE5NWFozY0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANZ3lgD
BABZ3l4wDQYJKoZIhvcNAQELBQADggEBAKPG1hBe90uRUbgYFHF68XemY4dVxQr3
+w1sW5jEhq/c5gsOKCyAzeTFOU8k1Mgbu0At+pR1gsEOJtg+zdstCcjXRwg/0tKn
toxQrk1EJrfDhEQI/aeI+If0d6Mo/Dp0JP9wKOUj9iMo1xz5+3yKbYdGfmxnIq1p
QMXRYhtk6cM5nTiTsvESKlwb2fGUeyCfkhtmz2k3yVH2JTgey3pu0akW/DuLMZp2
nyAAb5vfSWO2TPcopc1dYu4HwtcBwhHC++hfrMo12cQCi1cyHaj8ZBngzbrEUrO+
GJ7wpQ4CWYvnIlNq3BQt5g90hgAct/YqbKJfGFw5FPGzurzorNllr+U=
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:45 2026 by rpki-client