Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-NfiDOCzcwvp2G9QDBJN8UOtVqo.roa
File: 1-NfiDOCzcwvp2G9QDBJN8UOtVqo.roa (raw, json)
Hash identifier: ksWwE6ELqZihStXTYNK32xYLYQ87Uta0m4KF7waJz+E=
Subject key identifier: F8:D7:E2:0C:E0:B3:73:0B:E9:D8:6F:50:0C:12:4D:F1:43:AD:56:AA
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019CAE2D8EB5F8E958B477BBED819451D53A
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-NfiDOCzcwvp2G9QDBJN8UOtVqo.roa
Signing time: Mon 02 Mar 2026 10:52:26 +0000
ROA not before: Mon 02 Mar 2026 10:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 89.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:2d:8e:b5:f8:e9:58:b4:77:bb:ed:81:94:51:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 2 10:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8d7e20ce0b3730be9d86f500c124df143ad56aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:82:a7:7d:dc:6a:89:dd:5c:74:60:17:93:
9a:05:6d:9f:4c:fa:73:fd:85:29:5d:ba:18:9d:51:
e7:a3:d7:8d:c6:df:dc:ee:d8:13:ce:de:d3:23:5d:
4e:b7:33:e5:45:04:45:c4:84:6b:72:2b:45:ea:6d:
02:57:f7:d4:8c:cc:62:d0:fd:6e:7d:e3:47:01:1e:
3c:8f:c8:82:46:9d:89:ca:00:aa:9f:c1:6c:47:55:
82:ea:07:82:43:44:3a:67:7c:07:69:3d:59:30:33:
63:32:9b:d6:59:56:2b:19:88:6e:18:f5:0b:d3:e4:
0f:ae:fa:fa:c8:3d:d5:fe:40:cb:1b:7b:d1:90:e9:
35:74:70:70:e2:3d:60:21:0a:82:16:8c:7f:52:1b:
76:ed:83:2f:47:97:5d:d1:07:fc:75:c7:24:85:04:
5c:64:0a:58:74:e9:5b:d2:81:41:b8:30:e7:5a:e0:
2d:b5:fe:53:ef:94:b6:68:8b:cf:d5:5b:89:12:e2:
b6:dc:38:3d:39:30:c4:f4:b9:01:e2:57:18:f4:fc:
67:ba:de:8e:e5:0a:e7:2b:06:2c:a2:03:5b:49:2d:
e6:1c:53:c6:7d:ab:a8:c2:d1:f9:f9:90:eb:cb:23:
d5:02:41:5a:e4:19:8c:09:80:38:92:d5:46:8a:79:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:E2:0C:E0:B3:73:0B:E9:D8:6F:50:0C:12:4D:F1:43:AD:56:AA
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-NfiDOCzcwvp2G9QDBJN8UOtVqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c3:58:58:11:0c:e3:3c:ef:66:67:00:01:08:53:84:93:ad:
bd:9c:be:2d:aa:2d:a8:87:ae:19:a8:07:c4:a0:f6:10:91:60:
3a:d9:39:89:af:e4:66:77:a9:f6:d6:28:d3:19:aa:32:1c:8e:
f1:1f:1a:ee:2a:37:5a:c0:70:95:ad:e8:e9:29:f8:d2:a1:91:
b8:a2:b0:7d:2c:71:35:95:2a:dd:ba:15:74:87:ec:2e:b0:47:
6b:e1:db:f4:16:d7:ef:5e:3f:23:90:15:f5:5a:e1:30:4e:5a:
4f:f9:f3:3f:78:5b:b4:fb:77:25:a2:97:6a:66:c0:b3:8b:c9:
cb:9a:2e:f8:51:26:29:9b:3b:90:7c:bd:ea:7a:f0:8a:56:32:
93:0f:da:40:6b:dd:af:dd:8e:d7:25:a5:2f:a9:b8:43:f4:ce:
11:22:c5:8c:8a:3d:f2:27:fc:db:af:a1:b4:63:33:e1:93:ec:
51:5f:9e:35:e0:2c:f6:6d:0d:b6:21:bc:f7:07:fd:51:44:86:
f4:2d:bc:8d:b1:44:b9:a9:d8:f9:d1:59:8c:b4:d4:9e:58:b9:
5e:8b:c1:f4:0f:6e:34:a1:2c:26:64:84:75:8b:58:28:ea:95:
47:2d:83:4b:4c:73:4e:80:d8:d8:81:6c:c0:bb:05:7d:9e:1f:
09:04:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:42:36 2026 by rpki-client