Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/47WTm6oC6AZ5AEdOqe2XBvp0O7Y.roa
File: 47WTm6oC6AZ5AEdOqe2XBvp0O7Y.roa (raw, json)
Hash identifier: W6TKKPrS+2CyQzryq8zTaMceV1CzehLgt4GWS+YQLhQ=
Subject key identifier: E3:B5:93:9B:AA:02:E8:06:79:00:47:4E:A9:ED:97:06:FA:74:3B:B6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019E3F51315B6F0793841DC3FB9C2874CBD4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/47WTm6oC6AZ5AEdOqe2XBvp0O7Y.roa
Signing time: Tue 19 May 2026 08:19:06 +0000
ROA not before: Tue 19 May 2026 08:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 89.47.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:51:31:5b:6f:07:93:84:1d:c3:fb:9c:28:74:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 19 08:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3b5939baa02e8067900474ea9ed9706fa743bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:dc:7d:e1:b7:5e:a7:20:33:dc:a0:dd:74:
ae:36:99:c5:fc:ad:04:50:68:aa:5c:da:37:36:e6:
4e:65:29:68:a9:3b:b2:9e:16:df:b6:07:01:e5:dd:
ef:32:c5:49:27:f6:8e:7c:6d:5f:19:3d:d0:c7:6a:
e7:05:d3:6f:af:5b:af:98:02:39:cb:0d:f4:e0:3b:
96:b2:e0:c9:e0:b1:45:fb:9b:21:33:ad:ca:09:d6:
00:80:ab:f3:a8:44:52:16:db:ae:49:84:61:02:85:
ef:8e:d6:6b:ed:1e:51:18:4e:bb:69:56:0b:52:21:
4b:79:5e:00:bc:fe:02:ad:de:04:7c:d1:ce:49:5b:
fc:58:94:cf:9e:b1:22:71:95:32:2f:c3:9e:c5:aa:
26:69:58:e7:d7:ab:43:86:94:3a:2c:ef:d4:94:be:
04:24:ed:df:ba:2e:9d:a7:3d:5a:a4:45:67:29:2f:
67:ae:aa:eb:4f:80:e2:f1:9d:ef:9e:f4:af:ee:6d:
40:b6:c1:d8:37:be:2f:56:4e:ff:86:25:1a:b1:21:
39:11:c0:6c:b5:66:b3:63:ae:55:f7:83:75:8f:67:
cd:d4:80:99:42:23:2d:2a:eb:b6:86:e3:fd:d2:1f:
c8:4a:55:b4:6e:b8:18:ef:80:83:e6:8a:61:43:4e:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:93:9B:AA:02:E8:06:79:00:47:4E:A9:ED:97:06:FA:74:3B:B6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/47WTm6oC6AZ5AEdOqe2XBvp0O7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.100.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f0:70:ed:fd:1a:75:04:96:f2:3c:45:bc:53:7f:bd:82:5c:
36:7e:99:ec:df:f5:e3:fd:3f:49:f7:5f:7e:07:e8:b8:11:b8:
00:e1:01:86:ff:b1:01:46:4c:33:34:9c:f0:1d:f6:88:c1:a6:
a1:f9:04:48:eb:55:2b:38:8a:50:5d:b1:3d:e9:25:8b:16:86:
2c:65:5c:9c:16:5d:e7:1d:af:52:a6:c2:bf:80:a4:3a:ec:37:
8e:f8:2d:aa:ad:9c:24:7b:e8:b0:5a:5f:dd:fd:a0:58:68:11:
d2:88:af:86:70:34:65:da:f2:7b:19:7b:b6:07:9b:a2:cd:b6:
1c:92:4d:5d:12:57:58:72:de:2e:04:f5:a8:c9:bd:6e:46:2b:
98:c0:40:f0:2a:98:85:a0:89:81:5c:ce:40:91:45:0e:72:6e:
15:3f:55:49:e9:d0:de:f6:06:07:a4:86:78:8c:3e:47:56:1d:
85:f8:57:fd:aa:c8:2f:c6:76:bb:56:2e:8f:94:00:54:58:a0:
61:1e:2e:12:60:98:9c:10:90:3a:c6:31:3b:6f:64:a5:ed:db:
67:5a:53:ed:b7:01:80:fb:f6:22:99:7f:a2:32:b1:f0:12:17:
93:66:e7:af:8b:09:80:74:ec:72:4e:d3:4f:e4:7d:84:9c:ec:
59:a7:d4:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4/UTFbbweThB3D+5wodMvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNTE5MDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2I1OTM5YmFhMDJlODA2NzkwMDQ3NGVhOWVkOTcwNmZhNzQzYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOncfeG3XqcgM9yg3XSuNpnF/K0E
UGiqXNo3NuZOZSloqTuynhbftgcB5d3vMsVJJ/aOfG1fGT3Qx2rnBdNvr1uvmAI5
yw304DuWsuDJ4LFF+5shM63KCdYAgKvzqERSFtuuSYRhAoXvjtZr7R5RGE67aVYL
UiFLeV4AvP4Crd4EfNHOSVv8WJTPnrEicZUyL8OexaomaVjn16tDhpQ6LO/UlL4E
JO3fui6dpz1apEVnKS9nrqrrT4Di8Z3vnvSv7m1AtsHYN74vVk7/hiUasSE5EcBs
tWazY65V94N1j2fN1ICZQiMtKuu2huP90h/ISlW0brgY74CD5ophQ0437QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOO1k5uqAugGeQBHTqntlwb6dDu2MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvNDdXVG02b0M2QVo1QUVkT3FlMlhCdnAwTzdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS9kMA0G
CSqGSIb3DQEBCwUAA4IBAQAn8HDt/Rp1BJbyPEW8U3+9glw2fpns3/Xj/T9J919+
B+i4EbgA4QGG/7EBRkwzNJzwHfaIwaah+QRI61UrOIpQXbE96SWLFoYsZVycFl3n
Ha9SpsK/gKQ67DeO+C2qrZwke+iwWl/d/aBYaBHSiK+GcDRl2vJ7GXu2B5uizbYc
kk1dEldYct4uBPWoyb1uRiuYwEDwKpiFoImBXM5AkUUOcm4VP1VJ6dDe9gYHpIZ4
jD5HVh2F+Ff9qsgvxna7Vi6PlABUWKBhHi4SYJicEJA6xjE7b2Sl7dtnWlPttwGA
+/YimX+iMrHwEheTZueviwmAdOxyTtNP5H2EnOxZp9RY
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:32 2026 by rpki-client