Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/RwNKa_ogUqGBHRLaOKyBj32Gito.roa
File: RwNKa_ogUqGBHRLaOKyBj32Gito.roa (raw, json)
Hash identifier: Vsdp7tNDT+ir+CZ/FE/LGXqFdol4dz9sVumfvHQ62gk=
Subject key identifier: 47:03:4A:6B:FA:20:52:A1:81:1D:12:DA:38:AC:81:8F:7D:86:8A:DA
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FEB868EEE1AA07DFE4F8483564CCC605A
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/RwNKa_ogUqGBHRLaOKyBj32Gito.roa
Signing time: Mon 10 Aug 2026 11:54:51 +0000
ROA not before: Mon 10 Aug 2026 11:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 89.167.192.0/20 maxlen: 24
89.167.208.0/22 maxlen: 24
89.167.216.0/22 maxlen: 24
89.167.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:86:8e:ee:1a:a0:7d:fe:4f:84:83:56:4c:cc:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 10 11:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47034a6bfa2052a1811d12da38ac818f7d868ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:0c:8d:78:d3:14:7f:94:70:ba:26:34:fa:
cf:70:c1:34:d3:5b:fd:08:04:05:d8:ad:ed:6a:5f:
ae:46:57:28:b5:6b:e6:df:4c:58:8a:13:5f:f4:73:
ec:e2:d8:07:a9:e1:7b:16:82:e6:ba:09:a2:66:4b:
5f:a8:02:1b:02:6d:db:26:ca:b1:22:66:4c:ad:13:
2b:f9:aa:79:db:99:74:df:c9:63:f2:bd:e5:60:e5:
b5:b9:c5:31:dc:29:20:e3:7b:3b:b4:1c:fa:84:47:
42:77:6b:18:e5:90:38:e4:66:c4:16:d9:ab:78:1f:
47:80:43:83:92:b6:86:6e:9a:ab:72:aa:d1:05:dd:
7f:56:3b:de:46:5e:32:42:f1:40:ba:42:bf:0f:35:
41:4e:d3:2f:72:82:29:ff:f4:47:0c:f1:5a:36:cb:
08:9f:2e:06:f2:5e:67:ef:93:45:72:3a:8b:3d:09:
8c:09:76:4e:25:4b:e5:bb:d7:c4:26:21:a4:ec:00:
ba:42:51:7a:bf:b6:c5:f8:1d:3a:ec:b8:c7:43:7c:
cc:e6:00:3f:44:79:b4:01:8f:b0:30:02:7d:c9:c8:
92:ab:7f:91:32:61:1e:26:8a:4a:c9:67:07:ed:fa:
88:81:c8:63:1b:5b:0a:14:a4:10:ae:34:2b:3c:9a:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:4A:6B:FA:20:52:A1:81:1D:12:DA:38:AC:81:8F:7D:86:8A:DA
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/RwNKa_ogUqGBHRLaOKyBj32Gito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.192.0-89.167.211.255
89.167.216.0/22
89.167.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:b4:14:6f:f6:05:b0:71:34:7a:57:db:8e:fc:5d:87:ca:6e:
d9:d3:3c:48:b9:cc:e6:01:75:4e:e2:a5:b1:cc:34:b8:80:6e:
2a:c8:e2:e0:ce:57:78:27:21:bb:f2:ce:c2:a5:37:00:f0:87:
fe:f7:e2:c7:30:a6:a2:98:7b:24:88:b7:06:fd:73:e0:ad:a1:
9f:48:d3:71:97:98:51:3e:aa:7e:92:4b:db:91:e4:02:f0:d7:
c4:4d:ca:16:b1:1e:81:10:6a:71:36:19:26:cd:56:9e:d2:20:
87:e7:9f:61:e4:d9:b5:86:f0:1a:c1:a6:4a:f8:5f:8e:2e:36:
3e:03:72:0d:2a:2d:40:77:19:c3:0e:d3:d0:7a:44:ca:72:5d:
a7:0e:ec:b7:8e:d8:dc:22:2a:38:b3:54:32:9c:d4:9c:b0:d8:
0f:53:3e:f7:fc:95:ec:d0:d0:b8:a3:54:7d:0e:3f:de:b9:b0:
f4:1a:27:8d:43:b1:9a:ac:29:d8:0e:43:c2:37:40:fb:b7:8f:
aa:60:84:5e:8d:ba:92:1a:b3:a0:35:5b:88:95:d7:a7:1d:1b:
20:01:c4:27:72:14:81:db:14:13:fb:b2:65:d6:1b:58:6c:bc:
49:da:dc:23:40:38:fd:a7:b2:24:af:11:f6:c6:98:a7:aa:95:
8e:33:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:29 2026 by rpki-client