Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dXuCjmtLlm0gDh8TnCwpTIiF8Ao.roa
File: dXuCjmtLlm0gDh8TnCwpTIiF8Ao.roa (raw, json)
Hash identifier: 8Wioo8UY9cmQ2jciETXHbsLOsGh3X1LLqKcr/Q0QQfs=
Subject key identifier: 75:7B:82:8E:6B:4B:96:6D:20:0E:1F:13:9C:2C:29:4C:88:85:F0:0A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A0D9A6120A8639F23A0F97D61C99DD4413
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dXuCjmtLlm0gDh8TnCwpTIiF8Ao.roa
Signing time: Fri 25 Sep 2026 17:38:54 +0000
ROA not before: Fri 25 Sep 2026 17:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:a6:12:0a:86:39:f2:3a:0f:97:d6:1c:99:dd:44:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 25 17:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=757b828e6b4b966d200e1f139c2c294c8885f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:3b:85:ff:d2:ed:74:7b:a7:a8:7b:a1:9f:
4e:6e:57:e2:b8:2f:57:d8:0d:79:1a:13:13:bf:63:
48:64:b6:8d:70:fc:39:c9:60:d1:8a:1e:24:ab:fa:
7c:b5:16:a1:0b:a7:2b:96:92:e0:64:50:90:c8:15:
99:69:59:9e:e0:56:16:93:76:0e:8b:7b:d3:35:f2:
9f:83:ae:1b:61:c3:0a:57:86:85:1e:86:2d:75:ca:
92:df:6e:d6:9a:75:d7:b7:43:81:81:c7:b8:da:d5:
de:c0:a0:2b:da:5b:4c:d3:99:12:c7:19:f9:cb:f6:
22:bb:cc:01:39:b3:21:92:81:0d:1f:aa:10:91:0b:
6c:0a:47:2f:00:f4:02:cf:50:36:c0:3e:79:d8:af:
14:d8:45:36:c8:7f:9e:ef:05:71:ef:da:a9:72:92:
33:e2:f4:e8:28:18:8a:63:b8:36:db:40:e7:0e:6d:
c7:1b:7c:21:9e:42:36:59:5a:0b:23:71:8c:6e:38:
53:40:4c:f0:1f:61:01:ba:e3:53:4b:9d:da:f0:08:
13:b1:5e:6f:09:cd:bc:b4:af:af:dd:90:be:4b:d0:
21:be:34:71:83:c7:f9:6f:50:d1:8c:d4:c1:7c:9d:
19:8d:82:bc:54:89:70:f5:da:a1:7f:b3:de:99:84:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:82:8E:6B:4B:96:6D:20:0E:1F:13:9C:2C:29:4C:88:85:F0:0A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dXuCjmtLlm0gDh8TnCwpTIiF8Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
41:96:5a:24:dd:f7:5d:03:85:e6:65:38:3a:ae:bc:f4:4d:1f:
8d:5d:30:a6:e0:72:fa:03:ce:1d:a3:08:99:9b:d8:e4:98:fa:
62:cf:54:7f:f0:75:46:0f:2a:5c:87:d7:6f:c9:65:0b:91:2a:
ab:d3:be:1f:77:c4:58:f6:61:e7:4b:ed:9d:68:d6:ec:58:03:
be:d6:ac:71:17:e5:98:da:7c:ec:ef:b1:4e:9c:37:b1:5a:3d:
65:8a:e2:d0:8f:29:e9:5c:22:6d:15:47:aa:37:3c:4b:7e:48:
02:de:57:ab:b4:5f:06:cd:a0:18:00:66:86:42:b6:40:e8:f5:
4e:92:40:db:7c:ce:01:bd:07:d9:05:39:75:2e:d1:e9:3a:6d:
71:07:b4:fa:86:81:08:21:3f:dd:4f:7c:ab:a6:4c:66:a1:c4:
c9:a9:de:22:e1:a7:55:93:1b:de:b7:21:f4:f6:ec:e5:b0:1a:
36:64:b0:77:ca:a4:88:37:90:11:3e:d1:06:65:7f:20:51:90:
00:c1:d9:cc:21:f2:ff:62:a0:28:c4:33:b6:aa:06:a8:d8:7c:
2e:aa:9b:eb:89:61:72:4a:bc:71:64:fc:6e:6d:6d:ac:a5:ac:
3a:d1:71:9d:f9:82:ec:6e:d4:c8:13:36:03:47:02:1f:12:9c:
84:cb:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:54 2026 by rpki-client