Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/fKkR4_Q9I4VxeYB__Of5FdcMlUw.roa
File: fKkR4_Q9I4VxeYB__Of5FdcMlUw.roa (raw, json)
Hash identifier: Dft3pHs58N8yKxdBWbuzrgVcro9EUrGO/UMruFX0RGQ=
Subject key identifier: 7C:A9:11:E3:F4:3D:23:85:71:79:80:7F:FC:E7:F9:15:D7:0C:95:4C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019ECB338F650E7D7DA6ACF16FCFAE2A8D25
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/fKkR4_Q9I4VxeYB__Of5FdcMlUw.roa
Signing time: Mon 15 Jun 2026 12:13:34 +0000
ROA not before: Mon 15 Jun 2026 12:13:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213840
IP address blocks: 89.42.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:33:8f:65:0e:7d:7d:a6:ac:f1:6f:cf:ae:2a:8d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 15 12:13:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ca911e3f43d23857179807ffce7f915d70c954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:e4:76:48:19:62:93:6f:5c:9d:09:30:15:
82:0c:c6:37:9f:3f:c6:ca:d8:b4:70:e4:ca:f0:ba:
09:18:a1:1d:27:86:ff:cf:46:42:d9:d0:3a:3c:65:
e0:2f:5e:33:e0:84:ce:e7:e4:48:a1:ee:b2:f8:1e:
a9:2f:b0:42:75:85:72:c8:ca:8f:0f:fb:f6:17:4a:
62:9c:6d:e1:a2:6b:75:ff:e1:ea:44:f2:8e:93:95:
3b:41:e8:53:64:a2:4a:07:b7:17:7f:d6:d0:17:17:
55:04:3c:dc:f6:8a:4d:55:56:f2:8f:ae:40:68:e9:
30:95:06:c8:d5:eb:60:1e:ff:7b:11:13:f9:c1:71:
ac:f0:9e:6d:29:ce:d6:ff:4d:ab:da:12:be:1b:3f:
54:58:d2:3e:b6:1c:20:5d:0b:a0:4d:57:50:35:0d:
7a:cf:5a:1f:f6:20:3e:17:8a:df:79:ca:d9:ab:c5:
15:3a:d8:d2:34:4c:3a:2b:17:1c:d8:ef:f9:44:79:
76:cf:a0:65:20:d1:61:14:98:c9:3d:c9:b0:3b:3e:
e6:21:34:44:7f:dd:a1:9e:fa:a6:75:d5:74:26:01:
2c:e1:92:db:11:45:6c:05:1d:8a:ee:60:2e:19:f1:
07:ab:35:86:1e:28:d1:66:4f:92:c1:fc:9f:75:2a:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:11:E3:F4:3D:23:85:71:79:80:7F:FC:E7:F9:15:D7:0C:95:4C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/fKkR4_Q9I4VxeYB__Of5FdcMlUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a8:88:61:8d:05:44:6c:e1:89:4e:7a:84:fd:c7:43:40:bc:
6d:33:3b:14:87:af:73:9f:97:f4:71:9f:4f:aa:62:de:cf:43:
02:66:c2:46:dd:5e:79:e7:7e:80:3e:26:d6:7a:4e:45:aa:ed:
0f:17:91:e5:0f:e1:9d:9e:a8:45:51:47:07:67:ef:f7:3a:c5:
b9:7c:5a:c4:7f:fd:2a:6a:f9:68:03:db:95:79:10:ba:8d:6e:
6f:25:0d:6e:29:58:2b:03:a6:f7:da:bb:74:66:27:4e:31:0e:
94:82:3a:19:55:d2:64:c4:c5:dd:1d:1e:14:ab:2c:5c:b6:5d:
ae:53:f4:40:01:10:fb:bd:bc:da:bf:2b:2e:e5:13:ff:f3:f8:
7f:cf:a9:08:a6:cf:01:12:07:71:5b:25:4a:9d:55:8c:ba:3f:
ac:9d:48:af:28:46:b6:ca:d2:fb:c3:09:07:41:b5:bd:a1:b4:
7a:9c:9c:01:53:f1:06:bc:16:5d:49:a0:cc:f2:88:28:0e:4f:
27:7f:ae:2b:2d:47:7c:01:a0:43:2a:bd:9a:f5:81:55:b8:c9:
17:2a:61:a0:95:f4:c1:f1:6a:14:bf:dd:40:80:76:ab:50:d3:
c6:90:32:7f:ae:b3:c3:ed:e2:7d:f0:e8:12:69:b7:4c:f9:5e:
d9:a2:ae:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7LM49lDn19pqzxb8+uKo0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNjE1MTIxMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2E5MTFlM2Y0M2QyMzg1NzE3OTgwN2ZmY2U3ZjkxNWQ3MGM5NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS3kdkgZYpNvXJ0JMBWCDMY3nz/G
yti0cOTK8LoJGKEdJ4b/z0ZC2dA6PGXgL14z4ITO5+RIoe6y+B6pL7BCdYVyyMqP
D/v2F0pinG3homt1/+HqRPKOk5U7QehTZKJKB7cXf9bQFxdVBDzc9opNVVbyj65A
aOkwlQbI1etgHv97ERP5wXGs8J5tKc7W/02r2hK+Gz9UWNI+thwgXQugTVdQNQ16
z1of9iA+F4rfecrZq8UVOtjSNEw6Kxcc2O/5RHl2z6BlINFhFJjJPcmwOz7mITRE
f92hnvqmddV0JgEs4ZLbEUVsBR2K7mAuGfEHqzWGHijRZk+SwfyfdSq16QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHypEeP0PSOFcXmAf/zn+RXXDJVMMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvZktrUjRfUTlJNFZ4ZVlCX19PZjVGZGNNbFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpfMA0G
CSqGSIb3DQEBCwUAA4IBAQAOqIhhjQVEbOGJTnqE/cdDQLxtMzsUh69zn5f0cZ9P
qmLez0MCZsJG3V55536APibWek5Fqu0PF5HlD+GdnqhFUUcHZ+/3OsW5fFrEf/0q
avloA9uVeRC6jW5vJQ1uKVgrA6b32rt0ZidOMQ6UgjoZVdJkxMXdHR4Uqyxctl2u
U/RAARD7vbzavysu5RP/8/h/z6kIps8BEgdxWyVKnVWMuj+snUivKEa2ytL7wwkH
QbW9obR6nJwBU/EGvBZdSaDM8ogoDk8nf64rLUd8AaBDKr2a9YFVuMkXKmGglfTB
8WoUv91AgHarUNPGkDJ/rrPD7eJ98OgSabdM+V7Zoq4X
-----END CERTIFICATE-----
Generated at Mon Jul 13 09:32:52 2026 by rpki-client