Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8cgz109rmD3QES28FG1Xn30x4Vs.roa
File: 8cgz109rmD3QES28FG1Xn30x4Vs.roa (raw, json)
Hash identifier: BdYyYkgjSDDzEN2MIK5d9isrLFjV7663oY9dHBPlRJo=
Subject key identifier: F1:C8:33:D7:4F:6B:98:3D:D0:11:2D:BC:14:6D:57:9F:7D:31:E1:5B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A034F5A26771E01439E6A6513B39320AF9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8cgz109rmD3QES28FG1Xn30x4Vs.roa
Signing time: Mon 24 Aug 2026 18:08:28 +0000
ROA not before: Mon 24 Aug 2026 18:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:f5:a2:67:71:e0:14:39:e6:a6:51:3b:39:32:0a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 24 18:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1c833d74f6b983dd0112dbc146d579f7d31e15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f8:98:44:00:f8:f2:19:08:9a:1d:68:8b:db:
d8:e1:39:e7:d4:56:71:a0:69:56:09:75:0d:b1:55:
d7:87:f8:ac:f2:d1:1b:a2:e0:98:c9:b3:91:7d:91:
c0:11:6f:fe:12:f2:f9:c6:b9:b1:c3:50:3e:e1:8c:
76:f0:79:76:ef:1d:3c:72:e5:66:5d:8f:72:9f:6c:
8c:85:6c:4a:2f:43:09:87:d7:89:30:07:7d:57:48:
65:92:01:d2:fb:50:9e:84:5a:be:7b:d0:c6:eb:e3:
bd:ff:86:db:6b:ce:4f:ef:10:94:f1:a6:21:27:f4:
a2:bd:5a:66:33:1a:1a:4e:95:f8:4d:bc:f3:eb:b8:
31:b1:87:0e:41:db:a8:0a:bd:bb:d6:87:ab:f6:96:
40:91:03:8d:82:c3:68:78:cc:30:d9:ba:4e:36:cb:
e0:a7:5e:a6:e2:b5:4c:34:f1:df:59:be:6f:13:ac:
83:93:6f:b2:f5:c0:7f:8d:d9:9f:e5:c0:fb:fe:13:
7b:1d:d1:5c:32:e7:1d:3b:8f:85:1e:53:15:0d:42:
ee:47:79:d3:6d:38:66:63:1b:0b:e7:f8:b2:dd:0b:
d4:70:4d:9e:6f:61:f3:2c:06:4b:5e:8e:f4:82:54:
64:b8:31:dd:bd:8d:77:4e:3a:e8:5b:db:2d:95:2a:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:33:D7:4F:6B:98:3D:D0:11:2D:BC:14:6D:57:9F:7D:31:E1:5B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8cgz109rmD3QES28FG1Xn30x4Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:af:45:45:ff:b1:f1:89:82:1b:1e:ed:59:b6:87:a4:36:
97:66:2a:71:0d:8c:d3:b0:27:23:22:cf:dd:c2:d4:89:0e:22:
71:45:37:38:b9:1a:b3:d8:1a:e8:7c:28:fc:3a:ea:48:0c:8b:
ef:28:73:f7:d4:b3:1f:0a:a0:f5:8b:36:0f:95:e2:32:bc:0c:
72:21:e1:45:48:8e:e2:cc:51:a9:f5:ee:00:18:65:48:91:3b:
72:06:6d:b0:3a:bf:38:9a:fb:a2:69:c1:84:4c:e5:1d:d4:4d:
43:b0:87:5b:18:b4:56:c7:b0:39:82:a0:14:fd:32:0e:8e:f9:
cc:c0:73:04:97:e8:71:4b:06:7c:f3:57:73:ab:a5:9f:3a:ba:
6e:f3:e1:09:4f:b0:ba:ad:0b:dd:27:b0:dd:cc:ef:e7:1a:8f:
ec:ff:5b:d6:79:91:a7:59:eb:b5:04:a8:dd:aa:cc:80:c4:ef:
bd:bc:43:4f:0b:9d:c3:59:c1:8d:92:81:e9:46:81:b4:7e:1c:
84:1d:dc:95:28:b2:0c:98:fc:a1:2a:8a:09:39:e1:26:ef:c1:
c0:08:3b:18:d1:fe:c7:c5:3b:6c:69:ae:fc:00:69:a9:56:79:
fb:37:86:7e:9f:0b:85:f2:4d:fc:79:e3:3a:c3:00:07:9b:e3:
19:11:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:03 2026 by rpki-client