Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/B48qkRdOfa6_cPOlPzDgOqUlWSg.roa
File: B48qkRdOfa6_cPOlPzDgOqUlWSg.roa (raw, json)
Hash identifier: wSI7kbco2gmflRi9epKlQvIQAAUD21wLcZHQLK7txNA=
Subject key identifier: 07:8F:2A:91:17:4E:7D:AE:BF:70:F3:A5:3F:30:E0:3A:A5:25:59:28
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A4270E703313C12AEECBD07A21F6
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/B48qkRdOfa6_cPOlPzDgOqUlWSg.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201544
IP address blocks: 89.108.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a4:27:0e:70:33:13:c1:2a:ee:cb:d0:7a:21:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078f2a91174e7daebf70f3a53f30e03aa5255928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:c1:0c:85:05:d8:59:0d:10:e0:85:4d:55:
68:40:ee:5d:fb:20:fd:16:22:25:61:3f:7d:61:01:
c7:c1:65:13:51:4f:5e:1a:43:ec:90:e7:96:08:21:
c2:69:e2:18:ea:8d:02:ea:d9:21:5a:e1:ad:c6:8d:
bd:48:fb:c6:0d:39:5d:48:fb:dd:90:01:4b:68:6b:
a0:b1:60:08:d9:49:4e:a4:2c:38:5b:34:8b:86:c6:
cf:27:49:a0:b3:9c:2d:44:a0:44:65:79:ef:e5:ae:
17:8e:ab:88:90:79:82:47:b4:26:41:5c:c6:97:f7:
bc:31:45:0b:fd:55:10:32:4f:bd:fd:9d:27:6a:53:
66:e1:ab:d6:4d:76:1f:02:16:f3:df:21:45:ad:c4:
fb:58:09:f9:23:48:af:45:69:25:c3:76:3c:94:c8:
a1:05:99:e6:8e:95:c1:f9:8d:d2:07:53:cc:e2:b9:
6d:9d:45:60:de:95:83:12:60:c9:a5:1f:78:8a:ce:
b5:51:4d:5d:89:c3:2f:97:6e:36:af:79:8b:7f:a4:
f0:2c:d6:af:e6:1b:5f:0b:a5:c6:3d:78:48:5a:a9:
fd:79:37:bb:58:50:78:33:0f:95:d1:c4:9b:cf:5e:
a8:a9:17:89:1c:b7:90:c7:8f:83:71:3b:f7:ba:9b:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:2A:91:17:4E:7D:AE:BF:70:F3:A5:3F:30:E0:3A:A5:25:59:28
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/B48qkRdOfa6_cPOlPzDgOqUlWSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.134.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4f:27:8c:3c:33:dc:af:c3:8b:40:b0:f0:b5:08:2f:6d:80:
66:cb:1b:e8:51:67:60:b1:11:37:5a:a6:2d:8f:6d:62:ce:51:
29:c9:e5:3a:ee:6c:13:59:92:92:7d:7b:08:d3:f2:4e:74:4a:
1c:2f:68:e1:ce:47:5d:0a:ab:0a:b0:dd:16:11:be:4d:bf:bc:
9a:b8:35:09:d2:e4:03:8a:c6:ea:8b:d5:aa:07:27:15:37:7a:
cb:f8:1e:ca:c9:32:8e:49:93:8c:7a:c6:59:c9:fb:20:a2:ea:
87:f8:27:ec:72:11:5c:17:39:f4:cf:d2:bb:d9:13:c1:07:e9:
3b:9f:05:d1:ad:37:99:60:9b:20:ae:df:01:7d:44:ea:f7:79:
df:d5:07:e9:6c:1a:b6:c0:96:c0:79:f7:0c:93:c5:1f:d2:24:
f1:e8:13:10:21:59:90:91:17:37:f0:3b:f6:6f:08:cb:1d:83:
da:a7:ab:02:87:81:d0:72:52:82:d4:67:16:0e:01:1a:52:36:
09:71:24:87:39:42:a1:68:8b:e5:5b:95:9c:08:b5:48:c2:d1:
8f:ae:23:b2:78:ec:d8:87:31:4a:51:16:25:63:29:76:11:a4:
4d:07:62:f9:d6:0e:bd:5a:aa:45:fe:cb:89:50:21:48:7b:47:
28:74:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:57:40 2026 by rpki-client