Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/1H9YHalQ74Abbv3sXsUKQSDoMVE.roa
File: 1H9YHalQ74Abbv3sXsUKQSDoMVE.roa (raw, json)
Hash identifier: f2UqrTu+rTVQYyRTJRyRotq9l86Y4aGXMKz+QTY2ILk=
Subject key identifier: D4:7F:58:1D:A9:50:EF:80:1B:6E:FD:EC:5E:C5:0A:41:20:E8:31:51
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A0EC7BE2CE4A67FA143DBEEE58594D3BDA
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/1H9YHalQ74Abbv3sXsUKQSDoMVE.roa
Signing time: Tue 29 Sep 2026 09:25:37 +0000
ROA not before: Tue 29 Sep 2026 09:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218641
IP address blocks: 89.106.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:7b:e2:ce:4a:67:fa:14:3d:be:ee:58:59:4d:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Sep 29 09:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d47f581da950ef801b6efdec5ec50a4120e83151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:ed:2e:6f:22:bc:a0:09:a7:b1:c5:82:f6:
18:83:ad:5f:40:c6:45:59:48:79:ea:26:82:82:3b:
de:88:4c:02:60:4f:6a:1e:cf:68:fe:ff:80:38:4b:
75:8e:06:01:52:e1:0c:2b:03:c7:40:50:ff:6f:eb:
a5:87:f4:82:ec:44:ff:d5:d3:d1:79:65:ed:8a:45:
b4:fa:1c:27:06:45:50:14:41:36:0a:2e:74:96:0b:
52:cd:03:72:a0:fe:0a:70:09:70:4b:6e:30:28:7e:
c3:22:cc:2d:44:b0:e8:f8:a3:3c:a0:fe:5f:04:6a:
e7:bb:d6:90:01:eb:be:b3:3c:41:f6:20:2e:73:e1:
56:5a:b7:06:a5:65:a9:2d:15:81:e5:7b:8d:6c:02:
ed:aa:93:fc:02:8b:e4:fc:be:12:29:1a:85:56:23:
4f:40:00:5e:e9:7a:5d:21:34:38:f3:a1:3e:26:bf:
e2:1c:29:c1:ed:fe:4e:1c:93:54:18:9f:bf:df:25:
6c:ec:93:73:b7:f2:50:e4:ed:95:a3:d9:04:5f:8d:
be:f6:f0:02:0b:27:5b:44:e9:ce:23:80:e9:75:cb:
98:2c:77:50:32:e2:87:08:00:89:bd:5f:40:f4:c9:
d3:e1:4e:00:63:db:9f:96:3c:51:bc:39:8a:01:bb:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:58:1D:A9:50:EF:80:1B:6E:FD:EC:5E:C5:0A:41:20:E8:31:51
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/1H9YHalQ74Abbv3sXsUKQSDoMVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:86:c9:9e:bf:56:cf:4c:2f:2a:b4:40:6c:c6:70:fa:58:69:
01:fa:6c:97:5c:0f:4b:f0:27:75:1d:48:fc:4b:51:98:9b:d1:
ea:dd:49:45:79:f9:21:8c:61:47:16:ea:4a:f1:25:cf:ed:23:
d7:31:44:ab:41:e5:9e:5c:24:d6:22:a4:29:42:2c:78:cc:6f:
7e:58:d5:e9:2d:37:e4:6f:d9:37:7e:bc:3d:0e:8c:7e:e6:41:
09:16:32:57:cc:4c:fb:b6:b9:00:5c:9f:f4:5b:b8:df:b1:e4:
e3:b5:01:83:72:76:77:74:dd:35:ee:a3:ec:1f:92:35:dd:ee:
ce:8c:0e:a5:46:a9:c3:2f:78:8b:76:88:96:76:8f:08:61:91:
9e:44:79:6c:11:2d:1d:eb:a3:04:39:e9:e5:e3:39:91:89:8a:
d8:e9:03:03:ee:0d:e2:20:9a:ab:3c:d6:eb:a4:27:4a:a0:4b:
a2:92:71:ce:2a:c5:73:5f:18:12:3d:66:ac:b1:99:58:fd:6c:
6b:29:1d:f4:64:71:d1:36:2b:13:96:d7:bc:ae:9a:81:a4:fa:
8d:e2:6e:bf:54:39:d4:01:42:15:6d:a7:54:48:a8:28:5c:c3:
d4:d2:58:45:11:71:e6:0a:c4:bb:59:a6:85:fa:04:04:c0:80:
32:c5:88:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDse+LOSmf6FD2+7lhZTTvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjYwOTI5MDkyNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDdmNTgxZGE5NTBlZjgwMWI2ZWZkZWM1ZWM1MGE0MTIwZTgzMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgXtLm8ivKAJp7HFgvYYg61fQMZF
WUh56iaCgjveiEwCYE9qHs9o/v+AOEt1jgYBUuEMKwPHQFD/b+ulh/SC7ET/1dPR
eWXtikW0+hwnBkVQFEE2Ci50lgtSzQNyoP4KcAlwS24wKH7DIswtRLDo+KM8oP5f
BGrnu9aQAeu+szxB9iAuc+FWWrcGpWWpLRWB5XuNbALtqpP8Aovk/L4SKRqFViNP
QABe6XpdITQ486E+Jr/iHCnB7f5OHJNUGJ+/3yVs7JNzt/JQ5O2Vo9kEX42+9vAC
CydbROnOI4DpdcuYLHdQMuKHCACJvV9A9MnT4U4AY9ufljxRvDmKAbtP+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNR/WB2pUO+AG2797F7FCkEg6DFRMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvMUg5WUhhbFE3NEFiYnYzc1hzVUtRU0RvTVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWqKMA0G
CSqGSIb3DQEBCwUAA4IBAQBchsmev1bPTC8qtEBsxnD6WGkB+myXXA9L8Cd1HUj8
S1GYm9Hq3UlFefkhjGFHFupK8SXP7SPXMUSrQeWeXCTWIqQpQix4zG9+WNXpLTfk
b9k3frw9Dox+5kEJFjJXzEz7trkAXJ/0W7jfseTjtQGDcnZ3dN017qPsH5I13e7O
jA6lRqnDL3iLdoiWdo8IYZGeRHlsES0d66MEOenl4zmRiYrY6QMD7g3iIJqrPNbr
pCdKoEuiknHOKsVzXxgSPWassZlY/WxrKR30ZHHRNisTlte8rpqBpPqN4m6/VDnU
AUIVbadUSKgoXMPU0lhFEXHmCsS7WaaF+gQEwIAyxYi3
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:36:27 2026 by rpki-client