Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/89ukMjzwPFcHCCrcLwqU7SH9BUA.roa
File: 89ukMjzwPFcHCCrcLwqU7SH9BUA.roa (raw, json)
Hash identifier: 6GEdV45Dp+nLzLbKogAyg4KSWruKlUIen2AxEJJ0gak=
Subject key identifier: F3:DB:A4:32:3C:F0:3C:57:07:08:2A:DC:2F:0A:94:ED:21:FD:05:40
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019C8BE72554CDC2910A089AF7B48EA301BF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/89ukMjzwPFcHCCrcLwqU7SH9BUA.roa
Signing time: Mon 23 Feb 2026 19:08:27 +0000
ROA not before: Mon 23 Feb 2026 19:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200697
IP address blocks: 193.233.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:e7:25:54:cd:c2:91:0a:08:9a:f7:b4:8e:a3:01:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 23 19:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3dba4323cf03c5707082adc2f0a94ed21fd0540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:fd:5b:c1:7d:ed:db:92:8f:e4:1d:b6:0a:
63:35:8a:4d:29:77:a7:53:1c:1c:a3:86:fe:b0:6e:
c1:1a:97:87:4e:a6:00:62:be:98:a6:ba:17:b3:c5:
29:62:a0:a0:63:1c:ff:b6:c4:d1:45:7a:fd:75:9a:
7b:65:a3:35:0c:3f:3e:c1:f7:fc:b6:58:f2:4f:bc:
9a:6c:a3:d6:17:cf:31:7e:12:6f:74:80:68:9e:9f:
42:e5:58:c5:c2:56:5c:09:04:13:4a:5a:69:a6:d3:
c5:aa:79:8b:a2:f6:17:09:45:9b:2a:1e:d3:07:1e:
75:4d:f1:ef:a5:29:17:d8:c7:6f:77:e1:80:7a:20:
f6:a5:6d:c2:29:fb:9e:86:95:dd:f4:21:d9:71:57:
78:ae:32:9c:f4:9d:c4:6c:ad:14:0f:af:09:01:ef:
05:cc:96:14:ba:94:97:60:8c:1f:5b:78:c1:22:0f:
f4:16:3a:cb:28:2c:70:40:ab:25:aa:35:09:e4:ef:
94:93:11:86:2f:c5:e5:67:53:2d:7a:3e:19:be:f9:
31:e3:34:b2:9f:4e:09:cc:34:4c:fc:d6:fe:ee:d3:
59:f8:be:23:ed:64:3e:ff:37:41:bc:3f:18:c7:2f:
9b:fe:ba:23:ac:4e:e9:21:ab:5d:5b:4d:f4:92:63:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:A4:32:3C:F0:3C:57:07:08:2A:DC:2F:0A:94:ED:21:FD:05:40
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/89ukMjzwPFcHCCrcLwqU7SH9BUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3a:c7:41:b7:ab:00:4f:8c:9b:d3:91:8a:59:45:65:7c:70:
a8:8b:31:b2:0a:1e:1e:97:d6:d5:8a:61:a0:34:6f:b2:61:a6:
de:6a:53:fa:ae:61:dd:9c:b6:00:8e:09:e6:96:d3:52:7f:db:
50:50:9d:5a:e5:3b:0f:7d:8f:1e:c9:3a:77:77:b8:08:35:9e:
93:d5:9d:0f:39:9d:3a:93:7d:91:56:f5:8c:4b:6a:b0:6b:9c:
5c:fe:62:7e:65:7e:bc:27:4d:00:c7:fb:2d:9f:9e:f8:64:1c:
d3:ab:ed:02:08:5c:3f:4b:f8:b8:d1:6a:47:16:fb:7d:bb:3e:
a9:09:7c:38:ba:79:7d:ff:c3:31:56:cf:19:e1:cc:80:28:6c:
ed:a2:7d:29:b9:d5:65:a7:46:25:c8:ab:98:e5:72:d2:6b:2f:
32:7b:03:04:3b:d6:c2:dd:6e:05:32:04:05:92:8f:5b:b1:74:
fd:2b:29:5e:b6:0e:66:48:01:42:2d:71:7f:4a:92:e8:3f:85:
1a:8d:ac:26:10:29:ca:ec:74:80:d2:66:df:24:59:5b:f5:16:
6c:c7:fe:b6:9f:a2:67:5b:19:aa:54:74:79:87:d9:a4:df:25:
1b:ec:b6:19:91:c0:20:7a:e9:cd:bd:fc:1a:79:49:24:23:6c:
70:7b:0d:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyL5yVUzcKRCgia97SOowG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwMjIzMTkwODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2RiYTQzMjNjZjAzYzU3MDcwODJhZGMyZjBhOTRlZDIxZmQwNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRD9W8F97duSj+QdtgpjNYpNKXen
Uxwco4b+sG7BGpeHTqYAYr6YproXs8UpYqCgYxz/tsTRRXr9dZp7ZaM1DD8+wff8
tljyT7yabKPWF88xfhJvdIBonp9C5VjFwlZcCQQTSlppptPFqnmLovYXCUWbKh7T
Bx51TfHvpSkX2Mdvd+GAeiD2pW3CKfuehpXd9CHZcVd4rjKc9J3EbK0UD68JAe8F
zJYUupSXYIwfW3jBIg/0FjrLKCxwQKslqjUJ5O+UkxGGL8XlZ1Mtej4Zvvkx4zSy
n04JzDRM/Nb+7tNZ+L4j7WQ+/zdBvD8Yxy+b/rojrE7pIatdW030kmMjJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPbpDI88DxXBwgq3C8KlO0h/QVAMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvODl1a01qendQRmNIQ0NyY0x3cVU3U0g5QlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemYMA0G
CSqGSIb3DQEBCwUAA4IBAQAdOsdBt6sAT4yb05GKWUVlfHCoizGyCh4el9bVimGg
NG+yYabealP6rmHdnLYAjgnmltNSf9tQUJ1a5TsPfY8eyTp3d7gINZ6T1Z0POZ06
k32RVvWMS2qwa5xc/mJ+ZX68J00Ax/stn574ZBzTq+0CCFw/S/i40WpHFvt9uz6p
CXw4unl9/8MxVs8Z4cyAKGzton0pudVlp0YlyKuY5XLSay8yewMEO9bC3W4FMgQF
ko9bsXT9Kyletg5mSAFCLXF/SpLoP4UajawmECnK7HSA0mbfJFlb9RZsx/62n6Jn
WxmqVHR5h9mk3yUb7LYZkcAgeunNvfwaeUkkI2xwew2/
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:08 2026 by rpki-client