Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9Sn-HYosWpoVrBFTP7X1Vr1KnAY.roa
File: 9Sn-HYosWpoVrBFTP7X1Vr1KnAY.roa (raw, json)
Hash identifier: lcGxr0BGLbH24GHlg23inAnR5aZFJyWLay8kJOFX9e0=
Subject key identifier: F5:29:FE:1D:8A:2C:5A:9A:15:AC:11:53:3F:B5:F5:56:BD:4A:9C:06
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A013481C8646D9EE2B921BADEDFDCBC924
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9Sn-HYosWpoVrBFTP7X1Vr1KnAY.roa
Signing time: Tue 18 Aug 2026 05:11:28 +0000
ROA not before: Tue 18 Aug 2026 05:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:48:1c:86:46:d9:ee:2b:92:1b:ad:ed:fd:cb:c9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 18 05:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f529fe1d8a2c5a9a15ac11533fb5f556bd4a9c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:49:ac:9a:ff:8e:dd:1b:88:d3:91:d0:c1:
e1:93:fa:bf:35:93:31:96:a9:52:68:d7:cb:fd:dd:
ff:47:55:c2:5a:0c:7a:dd:ba:47:fb:6c:98:cf:8c:
39:24:e8:62:e8:17:9b:e8:e3:26:13:23:d1:38:20:
f6:01:ef:ce:65:cc:bb:84:26:29:2e:10:b9:3a:87:
07:4f:71:65:30:3d:7e:dd:36:f7:fc:94:c9:0d:e4:
a4:63:b8:68:67:cc:1a:63:a2:6a:e2:cd:6c:3c:f8:
59:38:ac:2f:9c:8e:b1:ed:47:46:52:38:b2:61:b9:
bc:10:ce:15:bf:3e:f3:0f:e1:08:10:5d:cd:d0:12:
28:18:0e:07:0a:a5:43:f5:3c:97:43:9b:da:a7:2f:
a8:cc:b2:ed:91:0c:16:44:90:6c:d3:ec:48:94:95:
53:8b:d1:e2:a5:88:24:22:d3:fe:0e:cc:55:88:b0:
c4:de:55:7f:dc:ce:5d:ca:fe:e4:aa:b6:52:e0:60:
41:34:b0:23:c8:92:48:2b:a0:83:2f:49:5f:3d:31:
ed:7f:b8:1d:35:1d:4a:61:37:14:e4:69:b4:64:dd:
d1:2a:db:3c:e1:cf:ab:7f:fe:ab:8b:c7:da:47:7d:
5b:5f:80:b9:8d:5f:fe:e3:87:82:23:79:a7:d2:26:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:FE:1D:8A:2C:5A:9A:15:AC:11:53:3F:B5:F5:56:BD:4A:9C:06
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9Sn-HYosWpoVrBFTP7X1Vr1KnAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
Signature Algorithm: sha256WithRSAEncryption
34:64:18:db:7c:8c:fe:12:67:69:56:b9:be:89:d7:3c:7c:37:
a4:2a:3b:83:16:89:af:37:7b:d9:a0:da:6d:f6:81:56:1a:65:
37:63:4e:96:83:0e:42:77:74:ce:37:85:f7:52:ba:fc:bb:99:
76:54:83:d7:f6:6d:cb:35:50:94:0c:58:72:7b:a0:39:ca:0f:
e6:df:29:b1:c7:69:b0:a9:2f:63:25:d8:81:93:e4:1d:5b:33:
fd:78:83:1b:72:e2:27:3d:66:95:0c:d6:23:d2:0a:9a:fe:20:
96:d1:24:7e:c2:04:4d:a8:65:3f:92:37:95:4f:bb:fa:3e:77:
29:92:6e:8c:90:b1:b3:e0:78:98:ef:0f:64:bb:08:09:9a:98:
a8:28:de:87:d6:5d:0b:81:32:fe:07:07:bc:0c:f2:e8:31:93:
cc:7d:37:ec:20:60:72:8e:a0:53:91:88:75:70:fc:b5:75:69:
a7:23:92:79:32:b7:c3:92:a6:6b:b4:b0:50:af:81:ea:d5:ff:
2d:37:90:02:48:72:99:56:63:4f:37:eb:d3:60:1a:4e:41:64:
5e:ae:b6:59:fa:f3:5f:48:ad:d2:dd:76:ea:37:4b:07:8a:58:
3e:91:08:e4:e3:eb:d8:cc:37:ca:65:cd:c3:15:91:b3:d7:eb:
ee:66:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:38 2026 by rpki-client