Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/kCugVQ2OpPDxrwHieSReoy6tj7I.roa
File: kCugVQ2OpPDxrwHieSReoy6tj7I.roa (raw, json)
Hash identifier: RvuJBQ9hBz35KQA+CQo7900Z89xjMtWfxeKo70kHU9Q=
Subject key identifier: 90:2B:A0:55:0D:8E:A4:F0:F1:AF:01:E2:79:24:5E:A3:2E:AD:8F:B2
Certificate issuer: /CN=4825f2aafb591b6f412f95c89f0143d4632d4d9d
Certificate serial: 01A18C6A3CF80D18000A5A1C44D8E5F529C2
Authority key identifier: 48:25:F2:AA:FB:59:1B:6F:41:2F:95:C8:9F:01:43:D4:63:2D:4D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCXyqvtZG29BL5XInwFD1GMtTZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/kCugVQ2OpPDxrwHieSReoy6tj7I.roa
Signing time: Fri 30 Oct 2026 10:45:35 +0000
ROA not before: Fri 30 Oct 2026 10:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35614
IP address blocks: 89.19.97.0/24 maxlen: 24
89.19.98.0/24 maxlen: 24
89.19.99.0/24 maxlen: 24
89.19.112.0/24 maxlen: 24
89.19.113.0/24 maxlen: 24
89.19.115.0/24 maxlen: 24
89.19.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/SCXyqvtZG29BL5XInwFD1GMtTZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/SCXyqvtZG29BL5XInwFD1GMtTZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SCXyqvtZG29BL5XInwFD1GMtTZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:6a:3c:f8:0d:18:00:0a:5a:1c:44:d8:e5:f5:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4825f2aafb591b6f412f95c89f0143d4632d4d9d
Validity
Not Before: Oct 30 10:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=902ba0550d8ea4f0f1af01e279245ea32ead8fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:b5:57:84:49:70:b7:ec:10:a0:de:b5:2e:
42:09:d2:9d:c3:58:99:ff:46:7b:4e:c4:16:21:33:
c0:de:c1:61:43:fd:06:29:31:7c:89:92:23:81:e6:
ba:18:ed:b9:ac:27:51:a1:2a:42:fc:c0:a1:92:bf:
49:5f:1c:3f:ec:1d:e8:16:eb:51:79:f0:8f:8b:74:
0b:a2:bc:89:f5:b0:09:28:83:bf:6d:b7:52:8c:8f:
01:95:3c:65:99:cd:4d:d5:2b:ff:42:3c:b2:41:93:
f0:c0:35:a1:93:e2:53:4b:2a:42:36:2d:9c:89:d7:
a7:33:94:36:1b:3f:47:8b:5b:83:14:64:27:2c:bd:
fa:f2:64:4c:61:5d:60:10:d9:d7:52:c5:1e:59:0c:
0a:d9:62:d8:a8:ea:8e:bc:cf:09:f0:2b:ec:7a:c3:
36:a9:c6:81:8f:b1:3d:2f:ad:10:d0:40:de:c1:c2:
4f:fa:01:5a:a4:01:d6:6c:e2:0b:42:e8:aa:50:b4:
6c:82:f2:cf:6b:4b:f8:68:f8:84:04:77:c1:69:90:
37:7c:15:e6:8d:40:aa:28:9a:99:36:19:2c:2c:11:
df:6d:ce:d8:ff:25:04:e7:89:d1:b2:e6:54:10:37:
06:27:81:26:75:fc:2a:95:23:1b:2c:83:5c:4f:b7:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:A0:55:0D:8E:A4:F0:F1:AF:01:E2:79:24:5E:A3:2E:AD:8F:B2
X509v3 Authority Key Identifier:
keyid:48:25:F2:AA:FB:59:1B:6F:41:2F:95:C8:9F:01:43:D4:63:2D:4D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCXyqvtZG29BL5XInwFD1GMtTZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/kCugVQ2OpPDxrwHieSReoy6tj7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/SCXyqvtZG29BL5XInwFD1GMtTZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.97.0-89.19.99.255
89.19.112.0/23
89.19.115.0-89.19.116.255
Signature Algorithm: sha256WithRSAEncryption
98:f7:b7:11:40:3e:16:bd:0b:09:0c:c5:64:96:a1:5b:bf:64:
d0:5e:86:bd:32:85:86:e6:2d:12:53:92:ea:f5:20:ce:ae:29:
da:de:23:24:63:60:d3:d8:d9:67:b5:3d:6e:9b:35:4f:f4:b2:
01:d5:42:d8:d1:69:84:9a:e7:eb:1c:4b:48:6a:d5:6f:c1:1f:
cb:6d:4b:70:3a:8c:2b:8b:2c:1f:bf:cb:cb:c0:11:eb:21:ca:
e6:90:d2:3d:fd:68:08:e3:b1:e0:7f:b9:c5:c9:19:1b:01:59:
39:3c:a5:60:2d:4c:35:f9:41:83:a9:df:66:8c:e4:e2:ba:6d:
bb:02:82:33:fa:f0:9f:9b:ea:05:04:87:5a:d6:fe:53:ad:9a:
d5:16:ec:c0:de:5c:3b:32:13:ca:37:b3:55:62:60:a3:14:da:
7a:64:70:2b:f8:52:c7:97:f7:62:d5:d7:16:2f:a7:52:d8:58:
6c:8d:96:b8:ab:90:c4:22:aa:68:8d:2c:f1:67:f2:75:b5:c1:
62:b5:75:a0:e6:42:d6:ab:36:c3:f7:b7:51:ea:b6:0a:ae:54:
37:96:1a:12:8d:12:04:be:64:52:69:cc:a4:24:9c:43:ac:45:
24:b5:5f:3a:ee:12:b5:62:12:3e:48:c9:29:49:59:50:ca:e4:
0c:8a:e9:07
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaGMajz4DRgAClocRNjl9SnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MjVmMmFhZmI1OTFiNmY0MTJmOTVjODlmMDE0M2Q0NjMy
ZDRkOWQwHhcNMjYxMDMwMTA0NTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDJiYTA1NTBkOGVhNGYwZjFhZjAxZTI3OTI0NWVhMzJlYWQ4ZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dy1V4RJcLfsEKDetS5CCdKdw1iZ
/0Z7TsQWITPA3sFhQ/0GKTF8iZIjgea6GO25rCdRoSpC/MChkr9JXxw/7B3oFutR
efCPi3QLoryJ9bAJKIO/bbdSjI8BlTxlmc1N1Sv/QjyyQZPwwDWhk+JTSypCNi2c
idenM5Q2Gz9Hi1uDFGQnLL368mRMYV1gENnXUsUeWQwK2WLYqOqOvM8J8CvsesM2
qcaBj7E9L60Q0EDewcJP+gFapAHWbOILQuiqULRsgvLPa0v4aPiEBHfBaZA3fBXm
jUCqKJqZNhksLBHfbc7Y/yUE54nRsuZUEDcGJ4EmdfwqlSMbLINcT7co8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJAroFUNjqTw8a8B4nkkXqMurY+yMB8GA1UdIwQY
MBaAFEgl8qr7WRtvQS+VyJ8BQ9RjLU2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0NYeXF2dFpHMjlCTDVYSW53RkQxR010VFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NGQ1NzUtMTAyYi00NTgyLThiNzMt
YjdhMjYzZDY4MWRlLzEva0N1Z1ZRMk9wUER4cndIaWVTUmVveTZ0ajdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NGQ1NzUtMTAyYi00NTgyLThiNzMtYjdhMjYzZDY4MWRl
LzEvU0NYeXF2dFpHMjlCTDVYSW53RkQxR010VFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBABZE2ED
BAJZE2ADBAFZE3AwDAMEAFkTcwMEAFkTdDANBgkqhkiG9w0BAQsFAAOCAQEAmPe3
EUA+Fr0LCQzFZJahW79k0F6GvTKFhuYtElOS6vUgzq4p2t4jJGNg09jZZ7U9bps1
T/SyAdVC2NFphJrn6xxLSGrVb8Efy21LcDqMK4ssH7/Ly8AR6yHK5pDSPf1oCOOx
4H+5xckZGwFZOTylYC1MNflBg6nfZozk4rptuwKCM/rwn5vqBQSHWtb+U62a1Rbs
wN5cOzITyjezVWJgoxTaemRwK/hSx5f3YtXXFi+nUthYbI2WuKuQxCKqaI0s8Wfy
dbXBYrV1oOZC1qs2w/e3Ueq2Cq5UN5YaEo0SBL5kUmnMpCScQ6xFJLVfOu4StWIS
PkjJKUlZUMrkDIrpBw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:29:56 2026 by rpki-client