Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ufaw7w1j2AglzfBcEoO61khdQqQ.roa
File: Ufaw7w1j2AglzfBcEoO61khdQqQ.roa (raw, json)
Hash identifier: Q4f6TPgqX3Pa1ciWKM7TG5FfuTtClGxBEuhki8M93jE=
Subject key identifier: 51:F6:B0:EF:0D:63:D8:08:25:CD:F0:5C:12:83:BA:D6:48:5D:42:A4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A034F5A1E81D8BA6921651B78F85ECA045
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ufaw7w1j2AglzfBcEoO61khdQqQ.roa
Signing time: Mon 24 Aug 2026 18:08:27 +0000
ROA not before: Mon 24 Aug 2026 18:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:f5:a1:e8:1d:8b:a6:92:16:51:b7:8f:85:ec:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 24 18:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51f6b0ef0d63d80825cdf05c1283bad6485d42a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:fa:a1:e2:91:82:c6:7a:48:d8:62:60:e0:
cd:aa:d2:45:5a:52:20:27:46:2d:20:81:a8:57:17:
df:b4:cf:fb:22:ca:68:0c:08:66:f8:48:22:9e:2e:
5e:b2:4c:4c:75:73:02:92:9e:a5:07:6d:6e:c5:0a:
09:44:b9:e8:29:69:45:0c:17:1e:e4:39:63:7a:2f:
ad:04:69:71:d0:da:a2:8b:75:19:e9:e0:bd:e0:4d:
aa:ec:72:e4:7b:a4:75:1b:58:5f:1c:4a:8e:1d:52:
e3:bd:70:5d:30:e5:e4:69:6d:b5:05:e5:a2:6a:cf:
81:e1:10:d1:54:4b:9e:b4:af:3b:d0:5e:a9:49:16:
2b:57:b5:0d:1b:fe:77:db:4b:f6:85:1d:ae:88:0f:
5f:85:40:dd:8b:b2:23:62:d0:6a:3b:71:a1:ff:39:
43:15:9f:25:56:db:5d:72:3b:75:39:75:cd:1e:d0:
50:30:e8:79:50:5f:8d:94:54:78:f6:25:fa:d7:c6:
9e:7e:6b:6d:e4:5d:fd:bd:5b:e0:9b:51:e5:76:37:
5b:2a:49:56:c4:e8:2c:e7:70:3a:9b:fb:26:4d:e3:
f5:a0:8d:1b:8e:6c:10:89:9b:62:41:90:ab:4a:67:
a7:57:0d:75:a6:8b:93:25:02:bd:c5:23:5f:d8:89:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F6:B0:EF:0D:63:D8:08:25:CD:F0:5C:12:83:BA:D6:48:5D:42:A4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ufaw7w1j2AglzfBcEoO61khdQqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:72:b6:a6:e3:8a:3f:aa:40:0b:2b:01:c3:5c:5a:94:41:1d:
f3:6d:c0:79:c7:27:68:3e:8c:ac:70:2a:ca:8a:3d:a0:5f:da:
85:32:f7:a8:9a:e6:b3:c6:5e:e6:f7:66:8b:b4:b4:cd:06:56:
73:aa:08:48:28:d7:77:3a:e2:46:3f:d6:d1:c1:b8:15:14:c1:
21:3d:91:a8:3c:31:ff:40:e2:cf:02:5b:0a:b0:a4:99:e8:f0:
c2:32:7d:25:d1:af:d4:6e:92:f7:4f:8f:50:a9:b9:7c:99:7b:
a4:3e:e3:29:af:89:e0:4a:26:d8:39:c7:1b:a5:82:0a:62:d5:
62:1a:56:4c:0b:04:87:44:12:d5:cc:91:45:32:2e:44:26:f0:
4a:6d:3f:18:a3:4f:e4:6f:7a:8b:52:c1:89:48:30:39:38:04:
bb:10:7d:8b:11:67:3e:6e:56:0b:ed:21:48:05:b2:88:80:23:
32:55:6f:49:15:e8:ff:03:1f:ca:38:8e:1a:04:03:41:67:fe:
79:13:7c:00:13:a0:3f:d8:19:66:82:4c:7f:1b:09:26:c9:12:
74:eb:f0:a5:31:fb:9b:02:1e:63:50:68:99:38:46:19:e0:fa:
f9:38:55:00:9b:2c:e4:3d:90:47:9a:a1:8e:18:3d:23:92:ce:
cd:8b:ee:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA09aHoHYumkhZRt4+F7KBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwODI0MTgwODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWY2YjBlZjBkNjNkODA4MjVjZGYwNWMxMjgzYmFkNjQ4NWQ0MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoT6oeKRgsZ6SNhiYODNqtJFWlIg
J0YtIIGoVxfftM/7IspoDAhm+Egini5eskxMdXMCkp6lB21uxQoJRLnoKWlFDBce
5Dljei+tBGlx0Nqii3UZ6eC94E2q7HLke6R1G1hfHEqOHVLjvXBdMOXkaW21BeWi
as+B4RDRVEuetK870F6pSRYrV7UNG/5320v2hR2uiA9fhUDdi7IjYtBqO3Gh/zlD
FZ8lVttdcjt1OXXNHtBQMOh5UF+NlFR49iX618aefmtt5F39vVvgm1HldjdbKklW
xOgs53A6m/smTeP1oI0bjmwQiZtiQZCrSmenVw11pouTJQK9xSNf2IlPkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFH2sO8NY9gIJc3wXBKDutZIXUKkMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVWZhdzd3MWoyQWdsemZCY0VvTzYxa2hkUXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSpSMA0G
CSqGSIb3DQEBCwUAA4IBAQA9cram44o/qkALKwHDXFqUQR3zbcB5xydoPoyscCrK
ij2gX9qFMveomuazxl7m92aLtLTNBlZzqghIKNd3OuJGP9bRwbgVFMEhPZGoPDH/
QOLPAlsKsKSZ6PDCMn0l0a/UbpL3T49Qqbl8mXukPuMpr4ngSibYOccbpYIKYtVi
GlZMCwSHRBLVzJFFMi5EJvBKbT8Yo0/kb3qLUsGJSDA5OAS7EH2LEWc+blYL7SFI
BbKIgCMyVW9JFej/Ax/KOI4aBANBZ/55E3wAE6A/2Blmgkx/GwkmyRJ06/ClMfub
Ah5jUGiZOEYZ4Pr5OFUAmyzkPZBHmqGOGD0jks7Ni+6C
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:03:18 2026 by rpki-client