Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9zYxsMfDNZzTCB1y9TCJueu16Lo.roa
File: 9zYxsMfDNZzTCB1y9TCJueu16Lo.roa (raw, json)
Hash identifier: h7pYHnCyQ3pxR65Rn5vaXEfbQABuP6YUHeOXQ3o69P8=
Subject key identifier: F7:36:31:B0:C7:C3:35:9C:D3:08:1D:72:F5:30:89:B9:EB:B5:E8:BA
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A1544EE4915C29687E76095349EA912EBE
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9zYxsMfDNZzTCB1y9TCJueu16Lo.roa
Signing time: Mon 19 Oct 2026 13:16:58 +0000
ROA not before: Mon 19 Oct 2026 13:16:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154602
IP address blocks: 89.167.167.0/24 maxlen: 24
89.167.172.0/24 maxlen: 24
89.167.212.0/24 maxlen: 24
89.167.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:4e:e4:91:5c:29:68:7e:76:09:53:49:ea:91:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Oct 19 13:16:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f73631b0c7c3359cd3081d72f53089b9ebb5e8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:57:29:4e:9f:e5:07:3e:07:dc:62:49:17:
fd:f0:6b:71:96:84:29:9f:23:1d:5f:c2:9a:89:9c:
08:f5:e6:0d:e8:50:8c:32:3b:53:c4:b9:8c:e3:9f:
32:96:52:96:bf:e5:ef:b3:53:7e:bf:df:33:0d:1f:
0f:7e:ed:d9:15:82:7f:72:36:42:75:ef:ed:5a:81:
b8:2d:af:fa:cf:5a:a0:c3:26:4e:17:a6:fc:b2:44:
1f:ff:ed:b1:c2:e6:52:7e:b3:e0:41:d9:25:a0:30:
db:1a:06:cc:6a:12:c9:bf:45:79:6d:76:1b:cf:e6:
69:c5:f7:71:52:a6:26:e2:a9:8a:71:bd:e5:95:19:
1d:49:fb:41:a0:15:a8:9b:4c:ce:08:fb:0f:f0:97:
8d:b2:92:a1:15:b5:1d:0a:dd:5c:1b:98:a4:67:12:
c2:f9:2c:05:ac:a6:55:ea:4d:90:fc:b6:02:d5:7c:
7a:26:06:a9:ed:86:c6:9e:68:75:86:6b:cc:c6:d1:
d1:3d:fe:c7:bc:a6:d1:7b:36:35:47:33:78:04:8a:
4d:4a:df:3d:4b:8c:03:0c:52:13:06:8a:d6:9f:f2:
9a:d9:d0:cd:a4:34:24:e1:7b:ed:15:b4:de:35:22:
03:96:73:c4:85:af:01:82:c4:b2:a7:10:4b:50:78:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:31:B0:C7:C3:35:9C:D3:08:1D:72:F5:30:89:B9:EB:B5:E8:BA
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/9zYxsMfDNZzTCB1y9TCJueu16Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.167.0/24
89.167.172.0/24
89.167.212.0/24
89.167.221.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d1:03:c6:c5:3a:0a:08:f0:01:05:43:17:77:8b:c3:49:38:
72:2b:2f:0c:b4:38:50:a4:08:1f:3c:10:69:17:6c:f0:a5:7f:
16:e4:59:01:f6:f9:22:cb:40:8a:3e:8f:ee:e7:9b:8c:c8:d1:
2e:40:e5:d3:90:17:50:5e:9c:8b:b3:45:68:b6:a5:f6:c1:4a:
25:6c:0b:3e:9f:0d:ee:3f:93:87:3d:9e:f6:f9:15:a8:3b:60:
30:28:eb:7d:6f:41:53:82:34:52:aa:bb:30:ec:ff:ad:4e:bc:
3c:e4:e6:6f:29:f9:28:84:38:8f:7c:9f:91:9e:47:3a:6d:6a:
a5:e0:bb:6e:8c:47:f9:05:d6:f1:79:5e:20:0f:e9:63:88:13:
d3:97:3a:67:b9:70:6b:19:33:82:66:b6:8b:09:3d:12:bc:28:
85:b8:0f:db:de:74:56:72:c4:a0:a7:87:71:f5:95:01:5a:53:
8f:ab:9e:7c:0e:e5:d1:15:87:c1:d5:b0:eb:65:13:25:d1:21:
bd:fd:84:22:a7:21:1c:20:3f:8d:1a:70:61:cd:d8:9b:52:e7:
d1:17:3a:38:8a:85:68:9c:04:03:d9:95:0f:20:f8:6d:62:e0:
66:be:6b:df:64:dd:e2:83:3f:a5:e9:da:60:b7:9b:f9:49:22:
c7:01:0e:f4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFUTuSRXClofnYJU0nqkS6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYxMDE5MTMxNjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzM2MzFiMGM3YzMzNTljZDMwODFkNzJmNTMwODliOWViYjVlOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2dXKU6f5Qc+B9xiSRf98GtxloQp
nyMdX8KaiZwI9eYN6FCMMjtTxLmM458yllKWv+Xvs1N+v98zDR8Pfu3ZFYJ/cjZC
de/tWoG4La/6z1qgwyZOF6b8skQf/+2xwuZSfrPgQdkloDDbGgbMahLJv0V5bXYb
z+ZpxfdxUqYm4qmKcb3llRkdSftBoBWom0zOCPsP8JeNspKhFbUdCt1cG5ikZxLC
+SwFrKZV6k2Q/LYC1Xx6Jgap7YbGnmh1hmvMxtHRPf7HvKbRezY1RzN4BIpNSt89
S4wDDFITBorWn/Ka2dDNpDQk4XvtFbTeNSIDlnPEha8BgsSypxBLUHjAvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPc2MbDHwzWc0wgdcvUwibnrtei6MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvOXpZeHNNZkROWnpUQ0IxeTlUQ0p1ZXUxNkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWaenAwQA
WaesAwQAWafUAwQAWafdMA0GCSqGSIb3DQEBCwUAA4IBAQAl0QPGxToKCPABBUMX
d4vDSThyKy8MtDhQpAgfPBBpF2zwpX8W5FkB9vkiy0CKPo/u55uMyNEuQOXTkBdQ
XpyLs0VotqX2wUolbAs+nw3uP5OHPZ72+RWoO2AwKOt9b0FTgjRSqrsw7P+tTrw8
5OZvKfkohDiPfJ+Rnkc6bWql4LtujEf5BdbxeV4gD+ljiBPTlzpnuXBrGTOCZraL
CT0SvCiFuA/b3nRWcsSgp4dx9ZUBWlOPq558DuXRFYfB1bDrZRMl0SG9/YQipyEc
ID+NGnBhzdibUufRFzo4ioVonAQD2ZUPIPhtYuBmvmvfZN3igz+l6dpgt5v5SSLH
AQ70
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:56 2026 by rpki-client