Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RYl5DQSicGbx4WiKzwiLDtJ6kAY.roa
File: RYl5DQSicGbx4WiKzwiLDtJ6kAY.roa (raw, json)
Hash identifier: PC1JsaBII6GxVhjPt5Sgn29gpUh7AOGEbhC7SW+ErKw=
Subject key identifier: 45:89:79:0D:04:A2:70:66:F1:E1:68:8A:CF:08:8B:0E:D2:7A:90:06
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A061F4FEE2E133ADD3D4BE9123A6ACEB24
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RYl5DQSicGbx4WiKzwiLDtJ6kAY.roa
Signing time: Wed 02 Sep 2026 11:50:41 +0000
ROA not before: Wed 02 Sep 2026 11:50:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213250
IP address blocks: 89.42.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:f4:fe:e2:e1:33:ad:d3:d4:be:91:23:a6:ac:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 2 11:50:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4589790d04a27066f1e1688acf088b0ed27a9006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:a4:1e:ba:b6:b4:6a:e9:fd:27:e4:fd:1b:
2a:c6:8d:6a:f9:fa:4d:e4:69:d1:e0:df:18:95:1a:
58:2e:69:88:a9:7b:20:5b:11:bd:31:37:4d:85:48:
e9:e7:11:07:7d:2e:d1:20:67:7c:a5:bf:01:4d:34:
3c:58:fd:81:42:3b:d4:a3:f5:ea:0c:1c:4f:6f:ec:
d2:cd:6c:ec:8a:9b:5c:d4:21:11:ac:14:2a:44:43:
c3:c6:75:b4:93:af:03:72:a2:f9:59:78:df:85:2a:
ba:d5:da:c9:e9:a1:5e:51:2e:b5:9e:d2:8c:7a:58:
3b:b5:6e:b4:72:7d:c5:73:3b:c7:b3:dd:11:b2:fb:
9e:74:ac:d0:0e:ec:7b:fb:ad:9a:3f:73:2c:a8:08:
9c:10:c2:33:c5:1b:d1:16:6b:6e:9a:52:63:4e:4a:
27:39:b4:53:78:2f:43:3f:4c:03:bc:55:1c:a7:1f:
e4:f2:a3:c1:aa:7d:ad:80:c2:c4:5e:a5:97:3a:76:
05:df:86:63:3e:42:d7:a7:91:03:a6:bc:b0:6c:83:
9c:bb:bd:58:72:9d:aa:b0:11:ff:c9:48:52:f5:11:
98:80:a8:24:73:25:df:5a:21:f3:7e:80:ad:6b:3a:
00:f2:00:3b:c1:cc:6c:53:dd:b5:44:be:86:c7:28:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:89:79:0D:04:A2:70:66:F1:E1:68:8A:CF:08:8B:0E:D2:7A:90:06
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RYl5DQSicGbx4WiKzwiLDtJ6kAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ec:5c:7f:cf:ac:29:df:60:6e:ba:e8:cb:9d:4d:6d:7e:c9:
04:b5:db:0a:e7:ec:bb:1a:be:b0:39:97:59:7f:87:0a:dc:16:
7e:4f:cb:58:30:d1:db:32:e0:f0:7e:51:d5:fd:ef:4d:e5:6f:
90:fb:b6:0e:54:62:35:70:2b:3c:38:14:10:80:00:cc:b5:4e:
e9:74:41:b4:eb:ad:96:0d:d3:9d:17:d3:d8:65:81:4f:37:50:
bb:d6:e9:63:c5:6e:ae:e3:9d:83:ce:a8:b4:db:80:45:07:d4:
86:b2:a6:4a:cf:b5:03:fa:a9:0a:69:22:7c:63:e1:84:52:4d:
7a:0b:e5:5a:56:01:0a:9c:07:f1:e8:29:0c:d4:5c:6f:93:ae:
5c:38:3a:64:c4:d9:38:7e:1a:64:cc:41:c9:ab:f2:63:3f:54:
04:9d:7f:7e:76:81:fe:e9:a6:10:aa:64:99:bc:a5:24:3e:16:
88:00:33:46:3f:28:39:49:50:05:54:50:1d:4b:ea:d4:70:ec:
54:76:98:42:91:46:9e:0e:27:40:44:93:50:57:ad:4d:ed:c2:
40:2c:9a:9f:7f:a9:67:a8:a0:4a:32:74:0c:e3:d1:07:cc:ac:
9e:e8:c0:f3:63:44:bd:11:a5:48:37:5e:98:f8:1a:38:38:45:
20:69:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:37 2026 by rpki-client