Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ccbIVt2O2IPn_QieT6QMaW9fqVQ.roa
File: ccbIVt2O2IPn_QieT6QMaW9fqVQ.roa (raw, json)
Hash identifier: /I86/Fa1wb+CBndYoxdsjkMsHB5fbaemHqr2JTfJX+A=
Subject key identifier: 71:C6:C8:56:DD:8E:D8:83:E7:FD:08:9E:4F:A4:0C:69:6F:5F:A9:54
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A013481D2221B921B970672CE023FCDB04
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ccbIVt2O2IPn_QieT6QMaW9fqVQ.roa
Signing time: Tue 18 Aug 2026 05:11:28 +0000
ROA not before: Tue 18 Aug 2026 05:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 89.34.224.0/23 maxlen: 24
89.42.85.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
93.114.90.0/24 maxlen: 24
93.114.91.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:48:1d:22:21:b9:21:b9:70:67:2c:e0:23:fc:db:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 18 05:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c6c856dd8ed883e7fd089e4fa40c696f5fa954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:f8:3f:d3:f6:67:76:a2:87:7f:cf:49:fb:
6f:16:b0:bc:ea:8d:48:cc:e1:43:3e:50:67:99:d6:
07:77:73:f6:90:8d:0b:f3:88:90:4a:cf:5b:e7:c3:
17:26:51:a1:9f:47:51:96:a1:88:5f:be:3b:74:ea:
03:e2:91:cd:c0:89:d8:7f:db:6e:da:6e:4b:58:83:
38:af:2d:0e:1e:37:0a:fb:b8:3e:ef:c0:6e:15:ac:
47:61:e5:9b:03:15:31:17:ce:2b:d8:74:bf:ed:16:
bd:71:53:af:da:73:31:ff:43:b4:10:9d:1f:47:a8:
8e:3e:d7:05:1d:e9:96:92:cf:ca:33:94:d9:66:69:
2c:14:82:4c:be:c5:e1:0f:9a:83:36:5f:22:88:23:
80:b9:63:21:39:b9:47:1b:6f:52:9c:8a:51:34:fd:
ec:97:ff:fa:b8:36:33:38:cd:b0:7f:0c:c9:eb:0b:
a7:41:33:0e:2b:1b:3f:d4:9b:53:40:ae:d4:f8:1a:
f1:be:09:d2:2f:b1:03:62:50:e9:6e:50:1c:fa:3b:
4a:80:78:e3:36:1c:41:fa:28:e8:58:4a:25:79:0a:
da:24:1b:ca:25:99:aa:2d:cc:3e:44:d2:d9:20:05:
c2:2f:eb:90:cb:f3:f7:53:cf:1e:7d:fd:fb:20:3a:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:C8:56:DD:8E:D8:83:E7:FD:08:9E:4F:A4:0C:69:6F:5F:A9:54
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ccbIVt2O2IPn_QieT6QMaW9fqVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.42.85.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
93.113.183.0/24
93.114.90.0/23
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f4:88:96:b0:01:ca:0d:a1:93:7a:0f:3b:8d:9c:a4:5b:cb:
c7:23:15:8a:7c:2f:7e:14:5b:74:79:80:67:86:18:be:9d:8b:
dc:dc:c3:8e:59:12:1a:7a:9a:3b:1a:51:36:88:6a:3d:f5:cc:
ed:ac:3d:6a:b7:ef:3f:2d:b4:8a:66:1e:ed:74:5d:c8:49:88:
be:7c:5a:44:5e:12:97:f1:2f:c7:51:a5:59:48:54:cb:e9:1b:
99:ab:ae:b1:03:e3:40:fa:ac:45:b2:52:d6:ae:73:02:e6:0c:
02:6c:d5:9e:bd:5d:4a:3c:46:00:32:69:86:be:f3:a0:f3:90:
2a:22:f0:36:cb:d5:87:6f:c0:7d:99:08:c8:05:8c:03:cf:da:
3f:88:73:f6:68:70:41:27:46:8b:6c:20:cb:be:7d:cc:7d:ee:
8b:dd:e0:13:8f:70:11:85:53:7d:a4:05:1e:7e:16:59:57:a7:
2b:9c:4a:1b:d7:5c:b8:53:7c:51:00:75:c6:3c:ba:c0:a5:07:
51:08:b1:d7:f2:57:c8:67:e5:64:c0:cd:ee:b5:43:f6:95:21:
b5:8d:e4:2f:69:7a:49:f0:30:bd:0f:95:12:c2:16:fa:54:29:
4a:94:6d:ba:62:8c:62:e5:db:38:cb:08:62:fd:03:d7:72:f8:
c2:26:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:26 2026 by rpki-client