Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Yw5dD_SSUT1tx_hsOQ7I9c8G8ZE.roa
File: Yw5dD_SSUT1tx_hsOQ7I9c8G8ZE.roa (raw, json)
Hash identifier: PtonxtebuJsD6TaQkc6ZoihEeoPvY33XPx5kJL55mJg=
Subject key identifier: 63:0E:5D:0F:F4:92:51:3D:6D:C7:F8:6C:39:0E:C8:F5:CF:06:F1:91
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A007496DC29B8F2111DFE38C0D8668FB2F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Yw5dD_SSUT1tx_hsOQ7I9c8G8ZE.roa
Signing time: Sat 15 Aug 2026 21:17:27 +0000
ROA not before: Sat 15 Aug 2026 21:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 89.47.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:07:49:6d:c2:9b:8f:21:11:df:e3:8c:0d:86:68:fb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 15 21:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=630e5d0ff492513d6dc7f86c390ec8f5cf06f191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:c2:49:fc:c7:2e:e0:0e:e8:f4:c9:52:fe:
04:40:98:d5:ff:4e:e4:e6:38:39:ed:cf:db:44:83:
3e:c8:ba:28:5e:02:bb:07:2a:7c:70:32:0c:1d:b9:
f2:0a:6b:e9:dd:aa:c2:36:61:ea:30:9e:e5:ce:5c:
28:e0:6d:7c:f2:a1:7c:af:1c:46:74:0c:bc:38:f9:
80:9e:dc:40:5c:8a:5b:c3:84:bc:f9:dc:c2:b2:40:
56:51:91:0e:ee:14:43:db:1c:ac:43:ec:43:76:d9:
f6:2e:e5:3a:c5:dd:0f:9a:4e:85:f1:25:fe:4d:f2:
52:f6:20:cd:47:46:ff:3e:ac:93:ef:30:06:85:d1:
05:43:02:62:4b:00:a1:6d:f0:58:52:c1:65:fc:c9:
f1:fe:61:c4:54:8b:30:41:a4:e4:25:13:29:41:ff:
08:f7:4e:f3:da:3c:8f:b1:d8:90:99:16:5e:9a:c8:
94:77:4f:3f:e7:f7:fb:36:4f:27:b8:02:f1:12:7a:
55:1f:e7:c0:33:e4:32:c6:e8:01:2a:49:96:6c:14:
80:49:7c:03:0e:c3:8a:55:e3:e7:1d:bf:f7:6a:4a:
00:f3:7e:19:74:a8:dd:b8:fa:a6:ce:a4:43:19:ff:
12:8f:6e:a9:81:34:6d:0d:da:e2:2c:46:e9:c4:90:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:5D:0F:F4:92:51:3D:6D:C7:F8:6C:39:0E:C8:F5:CF:06:F1:91
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Yw5dD_SSUT1tx_hsOQ7I9c8G8ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
55:15:c9:d3:ce:fd:e1:6a:46:d9:39:dc:67:a6:ea:fe:ed:c0:
e5:37:90:ef:70:36:c4:03:cb:3c:46:b7:d1:d7:6f:0d:78:19:
aa:35:e5:91:d2:d8:cb:71:84:c4:bc:16:55:d4:5e:51:87:7a:
af:11:a5:02:53:ee:25:d4:96:42:1f:e3:7b:23:07:b2:a9:14:
61:8f:72:35:8d:3e:36:ef:81:2a:cb:5f:92:62:71:6d:ea:b9:
88:22:67:13:e2:0c:c6:ad:f8:33:97:1b:de:9b:48:61:67:59:
85:13:4b:30:0d:33:4b:40:7b:54:9d:2b:f8:ef:4b:d8:9c:39:
51:96:bb:c2:48:e2:77:91:9b:9a:8f:6e:9e:0d:ab:10:7d:79:
22:4b:e4:dc:de:aa:d7:c0:1e:76:99:ce:f8:a1:10:76:f4:b1:
17:c3:50:b5:f7:b9:f1:3b:ed:64:53:6a:bc:3f:e3:40:0c:38:
bf:44:b3:07:cd:7d:39:ad:fe:ba:c8:07:c8:9a:58:43:a5:b6:
28:f0:0e:1d:08:b5:43:2e:f3:0e:01:34:62:ff:33:97:35:55:
d5:e7:d0:7e:4a:3c:0c:bd:1f:1e:8a:15:7e:9f:90:eb:98:5b:
58:5b:af:72:e5:56:34:f7:74:32:5e:e0:d9:02:8f:11:a5:26:
57:51:ee:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAHSW3Cm48hEd/jjA2GaPsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwODE1MjExNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzBlNWQwZmY0OTI1MTNkNmRjN2Y4NmMzOTBlYzhmNWNmMDZmMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCXCSfzHLuAO6PTJUv4EQJjV/07k
5jg57c/bRIM+yLooXgK7Byp8cDIMHbnyCmvp3arCNmHqMJ7lzlwo4G188qF8rxxG
dAy8OPmAntxAXIpbw4S8+dzCskBWUZEO7hRD2xysQ+xDdtn2LuU6xd0Pmk6F8SX+
TfJS9iDNR0b/PqyT7zAGhdEFQwJiSwChbfBYUsFl/Mnx/mHEVIswQaTkJRMpQf8I
907z2jyPsdiQmRZemsiUd08/5/f7Nk8nuALxEnpVH+fAM+QyxugBKkmWbBSASXwD
DsOKVePnHb/3akoA834ZdKjduPqmzqRDGf8Sj26pgTRtDdriLEbpxJB51QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGMOXQ/0klE9bcf4bDkOyPXPBvGRMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvWXc1ZERfU1NVVDF0eF9oc09RN0k5YzhHOFpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS92MA0G
CSqGSIb3DQEBCwUAA4IBAQBVFcnTzv3hakbZOdxnpur+7cDlN5DvcDbEA8s8RrfR
128NeBmqNeWR0tjLcYTEvBZV1F5Rh3qvEaUCU+4l1JZCH+N7IweyqRRhj3I1jT42
74Eqy1+SYnFt6rmIImcT4gzGrfgzlxvem0hhZ1mFE0swDTNLQHtUnSv470vYnDlR
lrvCSOJ3kZuaj26eDasQfXkiS+Tc3qrXwB52mc74oRB29LEXw1C197nxO+1kU2q8
P+NADDi/RLMHzX05rf66yAfImlhDpbYo8A4dCLVDLvMOATRi/zOXNVXV59B+SjwM
vR8eihV+n5DrmFtYW69y5VY093QyXuDZAo8RpSZXUe4s
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:29 2026 by rpki-client