Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/8in4oeVYlDvgloW9FdimkaiKCVM.roa
File: 8in4oeVYlDvgloW9FdimkaiKCVM.roa (raw, json)
Hash identifier: kjBbQ5mL6cOwZ/B7YVQOFDRhmXiliCPsQEZt1SnKDHs=
Subject key identifier: F2:29:F8:A1:E5:58:94:3B:E0:96:85:BD:15:D8:A6:91:A8:8A:09:53
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FC10591AD21D1546A1BF85E28EE31FE5E
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/8in4oeVYlDvgloW9FdimkaiKCVM.roa
Signing time: Sun 02 Aug 2026 05:49:55 +0000
ROA not before: Sun 02 Aug 2026 05:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209264
IP address blocks: 89.126.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:05:91:ad:21:d1:54:6a:1b:f8:5e:28:ee:31:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 2 05:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f229f8a1e558943be09685bd15d8a691a88a0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:0d:09:97:b5:33:ea:9d:bf:df:1c:8a:b1:
91:c9:79:56:35:c7:20:dc:26:72:61:e9:1d:97:ff:
7f:df:6a:eb:03:48:aa:d1:a8:91:ba:95:d0:0c:04:
44:1e:72:0b:9e:d3:ea:6b:ce:e6:18:d7:0c:03:0b:
16:61:f6:91:cd:05:47:16:12:6d:e5:09:30:93:12:
6b:22:59:1d:9f:3c:c4:6b:53:a0:12:bb:6d:07:55:
10:66:99:5c:e1:bb:ed:0f:dd:a1:6a:79:09:23:83:
c7:14:90:e0:40:e4:15:33:1b:f2:00:e0:94:43:a5:
28:7b:94:58:48:31:c4:12:70:ba:a1:fd:11:aa:c7:
ae:3f:ba:df:57:b0:5c:56:b4:34:f1:1e:e1:28:de:
bf:f2:4c:3b:64:a3:bc:38:a0:93:a0:76:93:54:ab:
ae:83:ba:44:84:5a:1a:27:ce:3d:e1:9f:86:97:5c:
39:d9:c5:24:54:ed:5c:0f:80:5a:2b:57:78:79:ed:
88:cd:f2:59:46:57:a8:ad:c8:df:d1:73:5a:b9:3a:
70:3a:de:58:d3:ea:24:93:59:f2:47:db:55:96:ce:
5d:22:05:fc:f9:c6:3a:4e:18:f6:a0:1d:2d:cf:6c:
74:47:01:6c:d6:a4:91:72:67:61:da:fd:2c:23:3a:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:F8:A1:E5:58:94:3B:E0:96:85:BD:15:D8:A6:91:A8:8A:09:53
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/8in4oeVYlDvgloW9FdimkaiKCVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:45:f0:38:b1:81:29:85:ce:77:26:85:b7:9b:1a:78:31:f4:
72:e7:91:38:5d:58:04:27:e6:62:d8:dd:75:8d:ec:48:ac:f4:
63:91:e6:db:9b:98:48:1c:d3:7e:9c:bd:c9:6c:cd:29:f1:d4:
6c:7e:b1:23:33:73:68:2d:2b:0f:cb:da:3d:99:ca:5b:68:19:
53:ac:7e:e1:8b:94:d1:d1:bd:6d:69:9e:f9:d7:6f:c4:f3:b4:
00:d0:fb:a3:66:cc:2b:5b:6b:17:1a:f8:8a:8e:6a:d9:ab:19:
ca:5e:23:dc:f4:5c:2e:bd:2e:b7:61:0d:fc:9d:80:35:2a:b7:
58:bb:cf:ca:0f:4c:08:39:12:27:e1:ae:13:1b:03:06:63:8f:
56:a1:82:5a:37:76:78:da:d8:d7:9a:ee:5b:d2:3e:64:fc:ad:
c4:31:74:d6:66:85:cf:0c:f1:76:9d:fa:a6:d7:3e:57:ed:78:
87:f2:9e:08:79:4d:8a:d0:ac:8e:de:69:57:4f:16:be:ff:6b:
d6:70:83:6c:77:89:ac:17:92:b5:15:bc:e5:c1:02:c4:ca:02:
14:9a:b2:e5:92:49:50:d5:7f:e6:6f:96:5e:75:f1:a8:8a:89:
6f:83:c6:03:b2:c4:d1:a4:a9:0e:66:a3:5c:fa:55:88:6b:30:
d8:4b:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:03 2026 by rpki-client