Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1t8RKgvoaoRRCcaku8Yn7QllOqc.roa
File: 1t8RKgvoaoRRCcaku8Yn7QllOqc.roa (raw, json)
Hash identifier: yqbaZBjRJ+fZYeVaz3mxLPYiZqIDHKFtAoeq2+gLZMw=
Subject key identifier: D6:DF:11:2A:0B:E8:6A:84:51:09:C6:A4:BB:C6:27:ED:09:65:3A:A7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A159CA0594225CE8CC698C9FD16E095D35
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1t8RKgvoaoRRCcaku8Yn7QllOqc.roa
Signing time: Tue 20 Oct 2026 14:49:34 +0000
ROA not before: Tue 20 Oct 2026 14:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402310
IP address blocks: 89.42.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:ca:05:94:22:5c:e8:cc:69:8c:9f:d1:6e:09:5d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 20 14:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6df112a0be86a845109c6a4bbc627ed09653aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:64:0f:72:14:00:64:bb:f2:b5:a2:a8:76:
70:ab:94:ff:52:f6:25:75:50:3d:de:94:c7:af:07:
05:10:c9:14:51:48:04:a7:56:dd:45:b2:5c:10:6a:
49:4a:01:f9:ca:c6:b1:3e:77:0b:2c:1b:96:f5:a3:
39:fd:f0:d6:72:1a:f0:87:40:ac:c6:cb:20:21:30:
2d:c0:0d:0b:1e:ae:d5:2b:57:eb:5b:fa:99:19:51:
2d:27:82:7e:f8:a0:07:82:31:46:5a:77:7a:1d:24:
9b:05:7c:3c:39:b0:2f:a5:e6:76:99:4b:b2:0b:1a:
85:e0:3f:3e:47:01:75:72:8b:a9:96:b6:d8:ce:c5:
ad:f6:ca:e6:83:c0:90:5f:b4:14:a5:b9:ff:c0:8b:
b7:16:b6:40:71:c3:f6:5b:bc:38:a3:8c:21:a4:23:
9f:60:e0:32:6e:73:16:06:0a:db:6a:89:cb:f9:06:
5b:c5:40:a6:f2:5c:9d:42:c8:f7:57:50:59:a5:e7:
c7:79:7c:d6:b4:fc:b5:9e:a8:31:4d:4e:97:18:3a:
f1:91:b8:39:a7:eb:07:52:3c:72:c1:53:fc:d9:0f:
29:96:28:1f:1a:b2:95:2d:ad:bb:a8:39:4c:df:41:
42:13:9d:9e:4b:4e:50:b7:0f:31:b1:9d:c7:4b:1c:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:11:2A:0B:E8:6A:84:51:09:C6:A4:BB:C6:27:ED:09:65:3A:A7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1t8RKgvoaoRRCcaku8Yn7QllOqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.87.0/24
Signature Algorithm: sha256WithRSAEncryption
12:29:1d:54:b0:27:c7:d8:b3:57:02:f3:ef:be:36:38:c4:c1:
e5:f4:4c:88:e9:9f:b6:3d:28:0c:bb:8d:75:63:54:29:2d:f3:
4d:bd:99:a3:d9:52:17:d4:47:4d:55:9f:39:fb:52:2c:fb:1a:
06:02:b5:ee:f4:57:b2:a3:8a:9f:bc:36:11:a2:9c:3a:f1:55:
20:ad:44:5d:27:07:b2:24:94:3a:7a:61:2a:18:4c:16:4c:40:
c8:20:6d:84:79:af:d8:f5:2b:77:33:27:c4:c0:69:e9:9b:b2:
87:d0:0c:7b:8d:28:98:d3:ce:8c:21:47:bd:8d:c8:32:6f:bc:
d5:f9:cf:f9:2e:ed:16:27:00:ea:ae:19:27:be:90:ba:b5:46:
b3:91:ef:1b:07:6d:60:e3:d6:e2:15:71:71:89:fd:4f:a6:a0:
0b:17:26:f6:1d:95:91:38:04:ed:64:41:6e:18:5c:6c:7b:d8:
ae:86:d7:d2:76:6e:53:2c:0d:9c:0d:54:c5:e0:74:9f:96:12:
0f:b2:8e:e9:e3:30:5d:40:d5:48:4b:83:8b:87:59:3d:d0:d0:
13:82:6b:0f:27:c5:b4:5a:bc:9b:81:54:8a:78:5a:67:9d:94:
0e:5d:4b:ee:7e:79:46:fa:cb:04:0d:f6:7c:a8:97:fc:22:d5:
5c:fa:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:19 2026 by rpki-client