Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/TT05hkSPrY5L8QkG-C8OdpaAByo.roa
File: TT05hkSPrY5L8QkG-C8OdpaAByo.roa (raw, json)
Hash identifier: 0OzFZZiRTAYjBZU+btrVQ7sofhphdY9wKWpQ0Wb2nh8=
Subject key identifier: 4D:3D:39:86:44:8F:AD:8E:4B:F1:09:06:F8:2F:0E:76:96:80:07:2A
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0599ACE46A3E5935A1BBBA8DF5AEB510F
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/TT05hkSPrY5L8QkG-C8OdpaAByo.roa
Signing time: Mon 31 Aug 2026 20:55:12 +0000
ROA not before: Mon 31 Aug 2026 20:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 89.126.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:9a:ce:46:a3:e5:93:5a:1b:bb:a8:df:5a:eb:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 31 20:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d3d3986448fad8e4bf10906f82f0e769680072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:2e:f7:18:1b:8d:24:ce:45:e0:37:93:3d:
4e:90:01:ff:d2:fa:fa:3d:b0:b6:b5:a2:49:2b:73:
e0:5a:2a:9f:c1:ac:c5:ca:e5:e5:8a:1c:e4:d4:86:
05:18:c9:74:7a:48:c7:f8:e3:34:f8:f8:07:9f:5a:
ef:66:82:cd:ab:fb:90:dd:d7:e1:0d:85:96:43:b1:
e2:87:cb:28:11:34:3c:08:a8:ba:1b:32:5e:39:78:
04:80:3a:41:0b:d3:27:fb:33:44:fe:97:89:62:bb:
8a:10:76:c9:dd:2b:68:c3:6d:8b:6b:0f:c2:77:40:
61:33:ee:46:19:be:56:f7:31:93:40:16:12:72:10:
a9:1d:41:7c:c5:72:1d:3f:8c:9a:9c:7c:54:e7:11:
50:ba:82:fb:4f:8f:e9:ed:34:41:65:98:29:c7:ef:
33:5d:c2:23:af:44:d9:e5:8a:5d:c6:9e:1e:99:71:
4d:d3:b1:49:d3:cc:59:4b:95:ce:89:62:a1:fb:91:
cd:6c:b0:81:86:d0:00:5e:44:6e:30:5a:83:89:e0:
81:d4:06:2e:7d:10:16:83:75:7e:76:4d:f2:ac:f1:
da:29:26:bd:97:e1:8a:f1:6f:a4:01:0a:aa:25:5f:
7a:a0:4c:80:d0:6c:2e:e5:a7:d3:c4:ee:6f:45:40:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:39:86:44:8F:AD:8E:4B:F1:09:06:F8:2F:0E:76:96:80:07:2A
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/TT05hkSPrY5L8QkG-C8OdpaAByo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e5:0a:e3:fb:41:5a:f6:ff:a7:78:52:c5:13:02:a9:b1:b1:
d5:01:e2:86:66:f1:e5:09:69:5d:73:99:b5:7c:bd:bc:c5:6a:
68:37:a3:20:70:23:e8:82:33:94:83:38:59:34:8e:2f:35:8f:
8f:90:52:51:3e:19:cf:95:ff:f6:88:df:d1:60:f1:a9:b1:99:
d6:48:34:30:71:f0:2e:dd:22:be:20:d2:07:6a:fa:b8:c1:84:
e6:18:a4:48:f6:e0:50:4f:23:ea:e5:d6:bc:e7:2d:a9:50:99:
95:e0:19:ca:79:df:fa:1d:46:eb:cc:65:38:91:e5:7b:ba:87:
c5:39:d4:8b:62:82:18:4c:9a:93:af:8c:77:3b:83:6b:ac:c9:
5e:20:ec:fa:7b:c5:96:a7:20:d9:4f:48:21:27:92:7d:f6:76:
4e:83:ec:98:05:d3:81:35:b3:fa:e3:08:c3:0d:89:47:b0:5e:
13:5f:c2:7b:42:85:de:e3:86:54:05:6f:4c:82:ad:0c:02:49:
35:be:e2:04:9c:2e:46:76:da:6d:3e:69:3c:04:54:4d:54:86:
04:1b:b4:6a:3d:60:95:c0:ec:20:f0:c8:33:a2:56:5b:6e:61:
8e:9c:dd:98:68:fc:b2:38:69:43:31:5d:b1:cd:49:de:3f:15:
2a:c8:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:11:44 2026 by rpki-client