Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/POANo8h_96DyZu7wzjScGiJo0yc.roa
File: POANo8h_96DyZu7wzjScGiJo0yc.roa (raw, json)
Hash identifier: 5hkvvfxTMsDP0yhrD7fWxYXaSVnsHNKYTiIoonQtAlQ=
Subject key identifier: 3C:E0:0D:A3:C8:7F:F7:A0:F2:66:EE:F0:CE:34:9C:1A:22:68:D3:27
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0145C986D2C14455D3E2282C1152C851E
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/POANo8h_96DyZu7wzjScGiJo0yc.roa
Signing time: Tue 18 Aug 2026 10:13:27 +0000
ROA not before: Tue 18 Aug 2026 10:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.167.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:5c:98:6d:2c:14:45:5d:3e:22:82:c1:15:2c:85:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 18 10:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ce00da3c87ff7a0f266eef0ce349c1a2268d327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:b0:6b:49:56:5c:01:48:c7:5b:57:bf:6d:
87:14:44:3a:4c:71:df:ea:17:5b:62:57:cd:85:42:
e7:57:17:fd:01:8c:d9:ac:1c:dd:4c:16:6e:45:73:
04:bc:e5:52:9a:79:91:fb:99:29:54:e4:66:21:ce:
0a:88:c3:af:80:48:94:c7:d1:95:3a:c1:b7:e2:3e:
8b:98:69:3d:1d:19:ea:22:82:04:44:5b:97:15:10:
ef:3c:8b:bc:4e:e5:b4:1a:4b:9d:78:d0:e2:6b:85:
e5:5f:4f:ae:0c:77:89:1a:72:79:27:b8:65:68:85:
ae:d2:54:c5:f3:44:39:a7:7e:cb:a3:bc:ca:45:de:
b3:4b:47:c4:76:ce:54:44:58:a4:14:df:35:ce:0f:
4f:77:67:f9:11:5e:82:fb:37:f1:0e:4a:2c:83:2b:
1f:c7:af:c8:35:84:38:43:69:00:d3:fe:50:5b:e7:
f2:4c:8c:ad:20:3a:6f:f1:01:f4:fe:98:e1:b1:f8:
5f:e3:79:01:f4:28:b3:fc:ba:22:5e:7e:c8:14:5d:
e5:42:fe:1b:d6:6c:b2:9e:57:5a:72:e1:6d:5a:bb:
96:f4:3e:d8:c7:b8:86:20:77:12:47:da:d0:4e:7b:
81:12:2b:78:8b:f6:9b:6b:2a:a4:f8:ec:8a:73:81:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:0D:A3:C8:7F:F7:A0:F2:66:EE:F0:CE:34:9C:1A:22:68:D3:27
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/POANo8h_96DyZu7wzjScGiJo0yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.133.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c9:58:b2:65:78:12:7c:3a:5a:59:63:44:c6:15:5c:7d:4e:
ce:d2:dd:cb:d6:00:35:8a:70:79:2b:85:a5:d2:85:d0:e7:22:
34:43:ca:ce:a6:5c:f7:3f:b0:39:b0:ab:c7:cd:35:6b:49:53:
cb:8b:4e:e9:f6:02:b6:b3:a8:34:ac:6c:38:de:f3:91:a2:d7:
be:ca:fb:59:46:98:b8:d4:d4:f2:3a:23:c2:a2:35:96:69:1b:
0a:ae:b8:54:d0:31:b4:8d:8f:78:04:2f:b4:75:2c:22:63:46:
a8:ca:79:4d:91:e8:11:be:0d:ce:18:f7:18:1d:10:6b:bc:49:
e9:17:fb:ed:9b:34:15:6f:6e:45:a8:80:89:0e:22:31:f0:07:
6b:e7:6e:cd:61:a8:a7:22:b4:a4:ef:93:4e:2b:10:eb:23:6e:
f6:bc:84:b8:5e:45:7c:3f:f7:b6:3d:30:6f:97:3e:2a:da:b8:
c6:a3:8e:84:72:59:e3:d8:19:da:70:51:bb:93:3b:50:50:96:
c3:da:81:8d:10:52:83:c5:5e:72:92:77:00:4a:e2:36:57:5e:
9a:73:53:ab:ea:08:34:d5:0c:5a:be:b3:fd:8c:84:cb:b0:dd:
3b:41:91:cc:3e:74:da:e0:38:3e:6b:b8:ff:87:3a:b9:a7:0c:
f2:a2:6d:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAUXJhtLBRFXT4igsEVLIUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwODE4MTAxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2UwMGRhM2M4N2ZmN2EwZjI2NmVlZjBjZTM0OWMxYTIyNjhkMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQCwa0lWXAFIx1tXv22HFEQ6THHf
6hdbYlfNhULnVxf9AYzZrBzdTBZuRXMEvOVSmnmR+5kpVORmIc4KiMOvgEiUx9GV
OsG34j6LmGk9HRnqIoIERFuXFRDvPIu8TuW0GkudeNDia4XlX0+uDHeJGnJ5J7hl
aIWu0lTF80Q5p37Lo7zKRd6zS0fEds5URFikFN81zg9Pd2f5EV6C+zfxDkosgysf
x6/INYQ4Q2kA0/5QW+fyTIytIDpv8QH0/pjhsfhf43kB9Ciz/LoiXn7IFF3lQv4b
1myynldacuFtWruW9D7Yx7iGIHcSR9rQTnuBEit4i/abayqk+OyKc4FeowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDzgDaPIf/eg8mbu8M40nBoiaNMnMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvUE9BTm84aF85NkR5WnU3d3pqU2NHaUpvMHljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaeFMA0G
CSqGSIb3DQEBCwUAA4IBAQBwyViyZXgSfDpaWWNExhVcfU7O0t3L1gA1inB5K4Wl
0oXQ5yI0Q8rOplz3P7A5sKvHzTVrSVPLi07p9gK2s6g0rGw43vORote+yvtZRpi4
1NTyOiPCojWWaRsKrrhU0DG0jY94BC+0dSwiY0aoynlNkegRvg3OGPcYHRBrvEnp
F/vtmzQVb25FqICJDiIx8Adr527NYainIrSk75NOKxDrI272vIS4XkV8P/e2PTBv
lz4q2rjGo46Eclnj2BnacFG7kztQUJbD2oGNEFKDxV5ykncASuI2V16ac1Or6gg0
1QxavrP9jITLsN07QZHMPnTa4Dg+a7j/hzq5pwzyom2u
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:49:10 2026 by rpki-client