Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9tBIOIIDRClS5Ih0VaCKwaoYZsQ.roa
File: 9tBIOIIDRClS5Ih0VaCKwaoYZsQ.roa (raw, json)
Hash identifier: oCDM383i1K/xAv6VJci7Gatw+DXzgTqCEEnVdPWg7nY=
Subject key identifier: F6:D0:48:38:82:03:44:29:52:E4:88:74:55:A0:8A:C1:AA:18:66:C4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D3354552DB1B71ADD8900B2A93C2EDE10
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9tBIOIIDRClS5Ih0VaCKwaoYZsQ.roa
Signing time: Sat 28 Mar 2026 07:24:17 +0000
ROA not before: Sat 28 Mar 2026 07:24:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.33.12.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.114.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:54:55:2d:b1:b7:1a:dd:89:00:b2:a9:3c:2e:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 28 07:24:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6d048388203442952e4887455a08ac1aa1866c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:0f:11:b2:fd:dd:55:c4:00:4f:c6:d0:26:
f0:4c:53:36:6a:82:68:b4:3d:d7:39:0e:75:8f:db:
aa:a7:c5:e6:bd:ff:13:6b:09:7a:2a:56:5e:4d:18:
43:9d:3e:cd:13:85:57:c7:c9:6f:5c:cf:21:69:cf:
a6:ff:f2:38:a9:59:ce:1a:9e:ba:58:15:db:5a:52:
c0:e1:3f:8b:e5:ce:89:e6:54:0a:5f:c1:2f:db:a6:
8a:ea:af:40:62:f7:25:ae:9e:c4:8b:da:04:b2:63:
b8:30:9c:07:c4:a6:0d:7c:f0:13:bc:a1:b4:87:2a:
b1:33:bf:0c:85:b6:7f:fb:f3:60:76:33:8e:0c:17:
74:c0:16:c5:b9:77:2a:e7:18:7d:3d:b7:e4:7b:f1:
80:0c:9d:b1:13:0c:17:2b:78:ab:64:07:91:a4:48:
e3:6b:09:05:3e:8b:91:e2:96:ed:cc:ae:ae:9c:93:
11:6d:40:01:8a:fa:73:3f:6e:84:25:49:b0:44:15:
74:e5:f5:6b:b7:0e:02:ec:bb:68:25:00:b8:a9:3b:
95:76:b9:bd:ed:6d:fe:55:56:0f:c6:19:d7:69:e4:
ff:45:6d:58:2b:af:5e:ff:f8:4c:fc:62:fd:75:0a:
25:64:e2:ad:5c:94:a9:4f:53:32:22:c4:c5:82:18:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:48:38:82:03:44:29:52:E4:88:74:55:A0:8A:C1:AA:18:66:C4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9tBIOIIDRClS5Ih0VaCKwaoYZsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/24
89.42.82.0/23
93.114.72.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1c:15:29:90:39:7d:4c:34:a5:13:9e:33:1d:1c:9f:47:7e:
4f:bf:de:c9:6f:cf:16:8e:fe:cb:28:98:9c:c0:61:be:46:95:
4f:3b:14:ff:84:b0:13:30:b1:63:eb:fe:36:01:51:ee:4f:6b:
fa:42:df:a7:72:8d:65:84:a6:21:8f:f8:e8:59:17:7d:6a:67:
42:04:23:71:d5:14:be:3f:2f:f9:f0:17:84:9f:c9:46:d5:fc:
9f:04:34:bb:c3:c3:ab:35:51:59:58:3e:20:c8:55:fc:b8:76:
76:cb:85:f0:c3:58:14:49:42:dc:f0:23:c4:5e:8b:68:26:2c:
ff:10:bb:cd:6f:d4:49:33:b0:5e:4f:97:b0:f0:bd:2c:e9:d4:
5b:4e:03:6f:f9:94:ac:d9:2b:c0:ea:46:c4:c3:48:78:ad:30:
72:de:36:bb:b0:c1:4c:ac:41:6f:62:d6:88:97:59:1e:3a:0a:
50:74:6f:72:f6:a2:b1:e8:68:71:af:0c:f2:c9:79:21:f9:e2:
46:61:86:37:b5:32:69:ef:55:db:6e:54:58:c3:e7:dc:9a:91:
9f:a6:f8:cc:e1:69:3d:ae:6c:7d:05:93:0b:42:d8:9b:95:33:
c3:6d:fb:04:84:f7:44:b7:2c:57:b9:7e:34:8a:a6:51:a5:b4:
a5:05:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:17:55 2026 by rpki-client