Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kFzZKl5OZ8IkWzPfZHoapAreatw.roa
File: kFzZKl5OZ8IkWzPfZHoapAreatw.roa (raw, json)
Hash identifier: PhB6wcAjqcGtPEyTwLi1RaQDLqnLVzLb3JV3p51Xeqs=
Subject key identifier: 90:5C:D9:2A:5E:4E:67:C2:24:5B:33:DF:64:7A:1A:A4:0A:DE:6A:DC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A159CAEF81A5277DA0BD7FA58DC2798145
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kFzZKl5OZ8IkWzPfZHoapAreatw.roa
Signing time: Tue 20 Oct 2026 14:50:34 +0000
ROA not before: Tue 20 Oct 2026 14:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 89.42.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:ca:ef:81:a5:27:7d:a0:bd:7f:a5:8d:c2:79:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 20 14:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=905cd92a5e4e67c2245b33df647a1aa40ade6adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:b5:e4:e0:ea:24:28:63:18:d5:40:33:e6:
0f:d5:c1:d8:ec:c3:d4:ab:1a:75:e0:98:9d:75:e5:
c1:33:e2:c6:ef:2a:f6:ef:f3:f9:7d:50:c7:87:0e:
5d:fc:55:ff:d0:3d:2e:98:86:f8:a0:4f:71:0a:f2:
d7:34:cd:8a:be:d2:bf:e6:75:a3:8f:71:83:db:d0:
62:28:4b:bc:87:92:89:2a:c8:d8:6b:50:42:ae:85:
70:57:a5:94:c2:f9:74:49:e7:9e:9d:05:7c:c3:32:
62:80:bd:35:44:9b:b8:91:a7:a5:69:84:5f:67:d9:
14:b1:db:c0:7e:78:73:1c:0e:0b:b2:ec:2a:75:a9:
06:c2:53:1f:83:70:f5:bb:ad:a1:50:93:94:71:e6:
3d:b9:db:89:bc:e5:e3:96:cf:63:14:16:44:e0:1f:
4c:0c:31:e0:19:2f:d7:b0:10:10:12:c1:99:dc:3b:
23:98:71:b5:02:cf:50:8d:83:98:36:9a:fc:77:01:
a8:be:91:75:c1:ff:10:ed:ae:34:f2:7c:e5:00:e7:
9d:f0:8c:21:12:5c:8a:07:95:c2:c0:af:55:10:d8:
ed:70:2f:07:b9:cd:89:d7:67:d8:22:f6:ff:e4:f0:
83:c4:18:64:34:62:05:f4:e7:ef:a2:5c:cb:26:c1:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5C:D9:2A:5E:4E:67:C2:24:5B:33:DF:64:7A:1A:A4:0A:DE:6A:DC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kFzZKl5OZ8IkWzPfZHoapAreatw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ac:a9:ab:4c:76:cc:2d:5f:0f:3c:1b:19:77:92:c1:00:d6:
a0:f6:55:2f:b7:58:51:87:d4:2b:47:4e:a6:6d:23:7a:a4:9a:
89:75:1a:e2:68:31:0b:5b:86:87:c2:ce:a7:10:d2:97:be:c9:
7e:a8:75:30:9c:1f:c5:5f:5c:04:1a:02:8e:1f:35:bb:3e:d3:
4a:76:9c:71:22:a4:48:45:f7:31:0c:85:67:1f:38:70:53:34:
bd:cf:27:64:30:4f:57:46:c2:1f:95:67:38:63:09:b7:b6:f0:
34:b9:d9:cc:85:14:5e:c8:b0:5d:ba:71:58:ee:c5:74:a3:18:
e8:e8:95:84:2b:01:1d:07:c0:5e:bf:2b:26:2b:ec:1f:86:fc:
d4:e5:e0:96:c7:b0:39:2d:76:ca:21:fb:f8:7c:3b:28:16:87:
f0:0f:79:1c:52:08:79:ce:6f:17:5c:8e:27:42:2f:0a:87:6e:
34:b9:d8:37:db:ca:41:38:ce:cd:62:95:ad:39:f0:c5:21:54:
e8:6a:48:92:5b:38:25:b7:b5:d5:7b:8e:9b:96:e9:e4:38:b8:
11:f6:a0:da:e4:2d:43:6d:8d:6b:8e:21:24:30:dd:21:0e:4b:
be:97:f2:3b:5d:3e:1a:2e:33:72:33:2a:0c:5b:43:68:bd:7d:
9c:64:0e:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFZyu+BpSd9oL1/pY3CeYFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYxMDIwMTQ1MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDVjZDkyYTVlNGU2N2MyMjQ1YjMzZGY2NDdhMWFhNDBhZGU2YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O215ODqJChjGNVAM+YP1cHY7MPU
qxp14JiddeXBM+LG7yr27/P5fVDHhw5d/FX/0D0umIb4oE9xCvLXNM2KvtK/5nWj
j3GD29BiKEu8h5KJKsjYa1BCroVwV6WUwvl0SeeenQV8wzJigL01RJu4kaelaYRf
Z9kUsdvAfnhzHA4LsuwqdakGwlMfg3D1u62hUJOUceY9uduJvOXjls9jFBZE4B9M
DDHgGS/XsBAQEsGZ3DsjmHG1As9QjYOYNpr8dwGovpF1wf8Q7a408nzlAOed8Iwh
ElyKB5XCwK9VENjtcC8Huc2J12fYIvb/5PCDxBhkNGIF9OfvolzLJsEHkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBc2SpeTmfCJFsz32R6GqQK3mrcMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEva0Z6WktsNU9aOElrV3pQZlpIb2FwQXJlYXR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpXMA0G
CSqGSIb3DQEBCwUAA4IBAQB+rKmrTHbMLV8PPBsZd5LBANag9lUvt1hRh9QrR06m
bSN6pJqJdRriaDELW4aHws6nENKXvsl+qHUwnB/FX1wEGgKOHzW7PtNKdpxxIqRI
RfcxDIVnHzhwUzS9zydkME9XRsIflWc4Ywm3tvA0udnMhRReyLBdunFY7sV0oxjo
6JWEKwEdB8BevysmK+wfhvzU5eCWx7A5LXbKIfv4fDsoFofwD3kcUgh5zm8XXI4n
Qi8Kh240udg328pBOM7NYpWtOfDFIVToakiSWzglt7XVe46blunkOLgR9qDa5C1D
bY1rjiEkMN0hDku+l/I7XT4aLjNyMyoMW0NovX2cZA7v
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:13 2026 by rpki-client