Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u-d7X_AW9V4vXxLXDQ9da7w59oI.roa
File: u-d7X_AW9V4vXxLXDQ9da7w59oI.roa (raw, json)
Hash identifier: ojmt1yanA19Lzpv2/5UfU5KH5FAp3bFIlRB+Ny6uq+c=
Subject key identifier: BB:E7:7B:5F:F0:16:F5:5E:2F:5F:12:D7:0D:0F:5D:6B:BC:39:F6:82
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0AEBC12AEBF8856495600C92793F8DA34
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u-d7X_AW9V4vXxLXDQ9da7w59oI.roa
Signing time: Thu 17 Sep 2026 09:39:16 +0000
ROA not before: Thu 17 Sep 2026 09:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 89.251.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:bc:12:ae:bf:88:56:49:56:00:c9:27:93:f8:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 17 09:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbe77b5ff016f55e2f5f12d70d0f5d6bbc39f682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:cb:b0:c6:60:b6:4d:f8:fe:56:9d:ff:52:
d6:9d:f8:99:6b:ff:94:97:44:a8:56:c0:c9:ad:18:
ad:93:55:e4:7b:73:96:1e:16:10:98:ec:9f:e1:9c:
14:45:96:72:6c:3d:7e:41:82:18:49:cc:d9:f1:e9:
8b:69:63:61:48:84:c1:06:92:ad:5d:b8:4c:b8:93:
df:4a:79:c3:31:56:41:38:96:e7:4a:90:19:3d:73:
a3:80:ff:5e:67:bb:99:92:41:45:48:5f:aa:f5:e9:
a7:f1:ba:f1:fa:9d:4e:f0:db:23:61:9e:ca:6f:bb:
c1:cb:80:68:68:19:29:ce:3d:94:1e:bb:7b:d6:e3:
ca:5b:2b:21:07:cf:ef:a2:5a:05:0b:dc:93:d8:83:
5b:4c:b7:e6:a7:04:20:ec:82:15:c4:22:be:97:7e:
00:51:25:2c:82:de:ef:b4:c0:3e:ec:49:c9:ec:b7:
c4:62:f5:ac:6c:e7:3d:b9:6b:32:ea:e5:ee:1f:0f:
dc:d7:d4:0a:06:fa:05:fc:7d:c0:5e:76:84:0c:c7:
8b:6c:89:5a:53:47:1e:a8:70:ef:d1:4b:dc:4b:2f:
53:bd:e6:40:c4:eb:84:f2:c5:e3:de:8e:2e:f8:45:
7d:17:af:46:a0:56:c4:54:7b:cf:87:4b:24:b3:6a:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:7B:5F:F0:16:F5:5E:2F:5F:12:D7:0D:0F:5D:6B:BC:39:F6:82
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u-d7X_AW9V4vXxLXDQ9da7w59oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:13:30:18:52:27:8e:5f:fd:50:00:36:c0:cc:b5:37:8d:d7:
6d:73:4b:c6:dd:a0:a3:56:cf:c3:1d:0f:4e:e2:f4:50:45:9f:
7b:c5:55:eb:58:9f:39:b7:91:26:20:67:17:87:ee:83:83:9d:
71:40:5c:20:d9:aa:26:50:50:9e:36:6b:af:b6:a0:36:13:7f:
86:13:55:73:2d:00:ad:0c:f2:d6:c8:c2:b7:a0:fc:99:76:0c:
f7:f4:5f:d3:e9:40:09:5c:2c:c3:b8:17:bb:d1:3d:22:71:80:
6f:bd:28:1d:0c:4c:18:ba:3b:03:33:5e:6d:4a:6b:c3:72:0e:
6b:77:02:78:94:70:7e:4f:16:02:f4:b1:37:6d:0e:89:43:be:
cc:cd:3b:e8:2a:42:c7:6d:8b:4f:c9:53:91:8a:7e:33:d1:17:
72:30:96:69:9d:e9:dd:09:c2:fd:62:46:92:59:e8:cf:36:aa:
01:68:af:70:61:39:c6:2c:d8:23:8e:20:78:f9:7f:c8:3f:1a:
c0:e1:11:8c:bb:e5:ae:60:c0:90:17:95:7c:44:fc:c0:56:c9:
be:3a:a0:2f:e3:48:3f:1c:6f:ec:3c:20:b7:92:91:12:52:77:
72:45:a2:3c:8e:cf:c7:00:8a:8c:81:ee:32:9d:11:a6:d3:45:
ca:6d:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:11 2026 by rpki-client