Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YDaR1d2xaxb1d80nSgU7WMR_HBw.roa
File: YDaR1d2xaxb1d80nSgU7WMR_HBw.roa (raw, json)
Hash identifier: Lu8+QngiFDgen9wnNm1qXNU/TukgGDUO6wgyvH2MhiM=
Subject key identifier: 60:36:91:D5:DD:B1:6B:16:F5:77:CD:27:4A:05:3B:58:C4:7F:1C:1C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1222AD74F8B385D820933FCD6F0730075
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YDaR1d2xaxb1d80nSgU7WMR_HBw.roa
Signing time: Fri 09 Oct 2026 19:36:35 +0000
ROA not before: Fri 09 Oct 2026 19:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.42.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:2a:d7:4f:8b:38:5d:82:09:33:fc:d6:f0:73:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 9 19:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=603691d5ddb16b16f577cd274a053b58c47f1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:25:8d:54:16:a2:b2:77:a6:46:6a:2f:e3:
b9:2a:ae:98:17:8e:b6:c7:a9:90:ea:87:97:47:6d:
d8:75:fe:d5:7b:52:ff:eb:8a:7f:77:fd:43:95:4e:
8a:b2:06:6f:4b:ac:b2:36:09:2e:55:46:12:5d:31:
b8:fa:ff:0a:86:2b:ed:bb:0b:cd:4d:5f:60:c1:6f:
e6:a3:fd:7b:a8:c8:f1:a2:02:3e:6f:0e:25:a9:66:
01:dd:9a:49:ae:f9:ad:d4:96:4a:88:ac:c4:23:a4:
47:dc:b2:cc:bf:87:26:2c:6e:14:91:50:de:16:f9:
9a:5b:d6:0a:b9:27:48:11:88:26:25:8d:3f:96:02:
06:93:3d:b6:ad:9a:87:0e:24:03:5c:7c:a7:58:a1:
aa:b3:7a:fc:61:4d:2e:85:19:96:8d:d4:d7:f9:fc:
3b:74:51:62:b5:1b:d8:d2:c0:30:81:be:fa:bf:d8:
bf:1b:0d:53:eb:20:96:9f:5d:13:6c:54:98:23:f1:
1b:50:02:32:4e:90:03:57:c2:64:cf:df:57:98:87:
0c:e4:da:2a:3b:06:3f:19:49:20:94:09:4d:a1:58:
c2:c1:f2:3e:5a:7e:7f:5e:2c:db:42:50:4c:ac:61:
a0:04:cc:c0:e0:6d:06:ea:33:4e:27:8c:dc:10:f6:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:36:91:D5:DD:B1:6B:16:F5:77:CD:27:4A:05:3B:58:C4:7F:1C:1C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YDaR1d2xaxb1d80nSgU7WMR_HBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:df:56:a1:e6:62:ae:fd:ed:3c:eb:73:9d:5b:99:09:35:f4:
a0:0e:5f:3c:d5:2a:94:33:13:58:44:b4:78:af:61:db:bc:2f:
3f:37:c3:7c:c4:62:16:01:f7:8d:e2:77:7f:83:c2:e5:1e:08:
6f:d8:21:17:d5:d4:6f:c6:20:00:42:f4:4c:03:05:b0:3e:4d:
cc:14:60:a1:34:f0:8a:8f:df:be:d1:c6:5e:ca:58:ef:8a:32:
b2:f0:f3:e1:b7:83:0a:da:5f:15:26:68:53:4d:a0:b3:fa:a5:
ad:cd:47:a9:6f:a1:95:fe:ef:af:98:3e:70:6a:ce:10:c9:80:
f9:c5:6b:d7:6a:97:b0:6a:8f:f5:fe:bc:d5:fd:84:2f:6f:89:
d1:83:ff:be:0d:4b:53:9a:75:c1:f3:e3:06:73:60:b5:11:a8:
f6:8f:82:98:e5:01:2c:b9:bc:2b:e8:6d:38:70:35:d1:23:7c:
50:fb:01:08:bc:8f:e7:5e:3e:cc:2d:1f:58:4a:ae:3f:89:5a:
f7:7d:81:9b:86:22:6f:e5:c2:2e:71:aa:04:89:fc:b8:de:4c:
72:63:87:c5:ee:63:cd:68:6d:7e:a1:e8:bd:57:b3:ff:11:13:
60:9d:39:db:87:bc:d3:c7:98:d4:01:6d:5e:b7:d2:a7:35:25:
40:73:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:11 2026 by rpki-client