Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9oIj5NoeXY1_NS0Y7QMWITtd7M0.roa
File: 9oIj5NoeXY1_NS0Y7QMWITtd7M0.roa (raw, json)
Hash identifier: fK8OLS2KM4lE5LTn+QCyKLSvDAEUJwEauIMKZhugDWw=
Subject key identifier: F6:82:23:E4:DA:1E:5D:8D:7F:35:2D:18:ED:03:16:21:3B:5D:EC:CD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A11C8EDB08C57D8964CFEBCC496F6C2495
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9oIj5NoeXY1_NS0Y7QMWITtd7M0.roa
Signing time: Thu 08 Oct 2026 17:28:06 +0000
ROA not before: Thu 08 Oct 2026 17:28:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 89.47.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:8e:db:08:c5:7d:89:64:cf:eb:cc:49:6f:6c:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 8 17:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f68223e4da1e5d8d7f352d18ed0316213b5deccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:07:66:39:bc:7f:c3:80:cb:55:76:4e:a4:
da:e7:eb:fd:0a:4b:07:2d:e3:13:58:78:28:e5:93:
05:61:b2:d8:73:c6:13:08:78:ed:44:8b:df:fc:d2:
8d:3c:65:0f:2d:29:10:06:e8:1d:c3:90:0a:97:71:
34:14:ea:8a:75:98:19:ee:2b:93:0e:d6:f7:20:2d:
e5:76:52:b4:1d:d9:c3:0b:28:3d:be:39:ae:86:c8:
a9:86:39:0e:e5:a1:8b:2d:95:8a:23:a2:6b:0c:e6:
bb:2d:cf:9b:81:cc:86:be:45:c6:6c:df:e3:7a:1b:
b5:b9:d7:72:69:f4:ed:8b:a3:83:af:f5:74:e2:be:
ca:6e:4a:f2:4a:37:82:58:7e:56:f7:fc:da:dc:a9:
82:d3:7c:9b:59:1f:e3:ec:9b:92:19:a0:93:c7:9e:
d0:4a:ca:04:31:7e:6e:05:6e:2c:f8:b4:b6:15:4e:
70:57:db:6a:56:47:5b:62:c7:63:13:ac:c3:d7:7b:
9f:3b:43:2f:17:82:37:4a:a4:3d:a4:63:9a:48:10:
06:99:ee:18:1a:84:c3:93:24:2c:f8:9b:be:a5:ee:
bc:39:ae:55:bd:e7:77:2c:a2:37:7e:e8:1b:69:5a:
ce:9e:a8:0e:8c:ac:26:f4:2b:4d:69:48:ab:8f:9e:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:23:E4:DA:1E:5D:8D:7F:35:2D:18:ED:03:16:21:3B:5D:EC:CD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9oIj5NoeXY1_NS0Y7QMWITtd7M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.99.0/24
Signature Algorithm: sha256WithRSAEncryption
26:df:3f:7f:de:ce:1c:a9:0b:18:8d:c7:36:c0:77:3f:1b:7c:
64:89:e9:1c:74:9c:b0:52:d2:6d:2a:52:6f:63:ac:22:77:bc:
d2:ab:a9:b8:82:9f:5b:d3:7d:8c:69:b9:cb:d4:c8:29:87:77:
e7:39:b8:ed:82:9d:8d:fc:89:d3:bb:08:d3:e6:8d:48:13:5f:
0b:ef:71:da:10:a7:c4:53:58:74:4f:15:60:13:15:7b:23:9d:
aa:d8:fb:b8:90:c4:c7:0d:17:eb:ac:32:24:9e:a9:ba:22:fa:
5a:e8:76:5b:1c:e2:a7:a7:e2:af:55:2b:a2:26:9e:eb:91:22:
b2:33:cf:94:cf:2d:71:a9:83:f2:a3:50:c6:50:b5:15:df:ca:
59:90:53:a9:bb:80:5b:3f:d9:7f:6e:45:b5:ab:89:c4:5e:41:
d6:d9:25:45:60:89:be:7b:17:44:74:d8:32:29:b4:d7:b1:0a:
ab:2d:6b:91:63:7b:de:e0:27:3f:5a:4c:48:e6:3f:fe:f2:fd:
3c:75:84:7c:82:5f:db:12:a4:66:2d:36:fa:6a:18:5c:4a:9c:
1b:b6:85:41:8c:d6:39:4a:74:e1:70:33:77:73:86:0f:86:ad:
71:6d:24:f7:0f:29:76:f0:99:14:81:17:ca:fe:df:ec:65:d9:
bd:6b:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 06:02:18 2026 by rpki-client