Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/D-K0vbFxUe2hT-_QxgPDdhdJMI4.roa
File: D-K0vbFxUe2hT-_QxgPDdhdJMI4.roa (raw, json)
Hash identifier: dsBbMSJjdUA/MLGSzY76XqZnlaKz4GHII/GEo1ku22A=
Subject key identifier: 0F:E2:B4:BD:B1:71:51:ED:A1:4F:EF:D0:C6:03:C3:76:17:49:30:8E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3AF505EF327C35B0DD4509DE7040B25E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/D-K0vbFxUe2hT-_QxgPDdhdJMI4.roa
Signing time: Tue 07 Jul 2026 05:02:44 +0000
ROA not before: Tue 07 Jul 2026 05:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 89.34.224.0/23 maxlen: 24
89.42.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f5:05:ef:32:7c:35:b0:dd:45:09:de:70:40:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 05:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fe2b4bdb17151eda14fefd0c603c3761749308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:31:90:05:8f:6f:e0:2a:5e:b7:8e:38:58:
8d:20:69:87:ea:95:42:fe:27:6d:24:ec:59:54:31:
53:7f:bb:f5:1a:63:e4:14:3f:61:39:13:92:8c:0a:
e6:7c:44:bd:3d:b0:db:28:53:7c:78:4d:24:0a:48:
4f:01:bf:98:32:89:e4:96:3b:c0:4b:f3:08:47:4c:
fa:e5:ba:ae:8a:73:52:6c:95:78:9e:72:ee:55:8e:
07:da:99:99:b7:a5:38:0b:ef:c2:69:62:d6:67:cb:
b7:08:ad:79:fb:83:93:7f:10:86:73:30:20:ab:19:
72:34:81:63:e2:7f:21:3b:50:c1:e8:e5:aa:51:6c:
a8:b5:98:ee:f6:72:46:8f:06:4b:fa:fc:a9:b6:1c:
d5:b0:4d:c3:0c:66:12:4d:2e:d8:e7:9c:49:6b:9a:
ab:cc:d0:47:f5:90:e8:8e:5d:10:86:c9:f2:50:b7:
e4:76:30:38:d4:75:9c:b5:b6:69:8b:97:8f:ce:0e:
c8:76:a5:32:d2:0d:0d:00:e3:e4:a7:2d:19:81:62:
f0:27:92:8a:41:4d:84:cd:d5:da:6f:42:90:6e:4a:
83:3b:a1:d9:82:cc:29:71:12:fb:a7:8d:e9:74:42:
1d:3b:21:58:1c:f9:e0:c1:47:ab:ce:ef:fb:b3:48:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:B4:BD:B1:71:51:ED:A1:4F:EF:D0:C6:03:C3:76:17:49:30:8E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/D-K0vbFxUe2hT-_QxgPDdhdJMI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.42.143.0/24
89.46.0.0/24
89.47.127.0/24
93.114.74.0-93.114.79.255
Signature Algorithm: sha256WithRSAEncryption
53:8a:5c:d2:e2:a7:71:f7:ae:65:e1:26:d9:af:9c:2f:08:7d:
86:06:94:4a:0a:25:6e:68:ac:e5:0f:6f:5c:fc:9f:ec:ea:05:
bc:0f:44:82:16:7f:11:8b:01:a7:7a:99:7f:3e:cf:46:e2:1c:
21:90:38:e3:38:18:47:bd:3b:bf:e9:23:f2:6b:da:93:74:44:
fb:01:98:32:c4:c1:bc:06:e5:a5:1c:eb:47:f4:be:08:8a:3c:
74:be:99:dd:e4:80:b0:58:5c:a6:b9:14:c1:89:05:7c:01:35:
b8:7c:33:f8:9a:e3:8d:3c:6c:59:61:64:28:54:5b:82:9e:1d:
a4:db:d2:8e:0f:d1:0c:c8:dc:d0:31:e9:63:66:80:d8:fd:60:
86:55:b8:1f:01:e6:b7:d0:c8:0a:bc:75:27:d0:05:54:88:0b:
49:b1:02:99:5d:01:a2:4b:bc:b1:5d:1c:3a:f8:0d:bc:34:76:
27:8f:67:fc:0e:2d:83:eb:bd:a6:e8:3a:61:be:82:0b:70:c8:
f5:6c:41:c9:0c:74:1f:1c:49:3e:e1:a5:5d:4a:9a:b8:e9:67:
d7:cd:f8:a8:fd:c4:39:f5:0d:8c:91:91:5f:52:b4:3f:62:35:
ad:7c:2c:23:f1:8d:e0:84:4f:47:09:fc:ad:da:5f:6b:10:c8:
ed:58:70:ad
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ869QXvMnw1sN1FCd5wQLJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNzA3MDUwMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmUyYjRiZGIxNzE1MWVkYTE0ZmVmZDBjNjAzYzM3NjE3NDkzMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bAxkAWPb+AqXreOOFiNIGmH6pVC
/idtJOxZVDFTf7v1GmPkFD9hOROSjArmfES9PbDbKFN8eE0kCkhPAb+YMonkljvA
S/MIR0z65bquinNSbJV4nnLuVY4H2pmZt6U4C+/CaWLWZ8u3CK15+4OTfxCGczAg
qxlyNIFj4n8hO1DB6OWqUWyotZju9nJGjwZL+vypthzVsE3DDGYSTS7Y55xJa5qr
zNBH9ZDojl0QhsnyULfkdjA41HWctbZpi5ePzg7IdqUy0g0NAOPkpy0ZgWLwJ5KK
QU2EzdXab0KQbkqDO6HZgswpcRL7p43pdEIdOyFYHPngwUerzu/7s0iM7QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFA/itL2xcVHtoU/v0MYDw3YXSTCOMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvRC1LMHZiRnhVZTJoVC1fUXhnUERkaGRKTUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBWSLgAwQA
WSqPAwQAWS4AAwQAWS9/MAwDBAFdckoDBARdckAwDQYJKoZIhvcNAQELBQADggEB
AFOKXNLip3H3rmXhJtmvnC8IfYYGlEoKJW5orOUPb1z8n+zqBbwPRIIWfxGLAad6
mX8+z0biHCGQOOM4GEe9O7/pI/Jr2pN0RPsBmDLEwbwG5aUc60f0vgiKPHS+md3k
gLBYXKa5FMGJBXwBNbh8M/ia4408bFlhZChUW4KeHaTb0o4P0QzI3NAx6WNmgNj9
YIZVuB8B5rfQyAq8dSfQBVSIC0mxApldAaJLvLFdHDr4Dbw0diePZ/wOLYPrvabo
OmG+ggtwyPVsQckMdB8cST7hpV1KmrjpZ9fN+Kj9xDn1DYyRkV9StD9iNa18LCPx
jeCET0cJ/K3aX2sQyO1YcK0=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client