Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/CsbFJodnTTBOteGZYTM_kxh6h4A.roa
File: CsbFJodnTTBOteGZYTM_kxh6h4A.roa (raw, json)
Hash identifier: 1youDpmPpKqapYaqaUtX7DWp3NhFDZTB5nkz5cNz1/A=
Subject key identifier: 0A:C6:C5:26:87:67:4D:30:4E:B5:E1:99:61:33:3F:93:18:7A:87:80
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 01A0AB04182E8939F6A2BC2A9688D49DDFC5
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/CsbFJodnTTBOteGZYTM_kxh6h4A.roa
Signing time: Wed 16 Sep 2026 16:19:27 +0000
ROA not before: Wed 16 Sep 2026 16:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201097
IP address blocks: 89.19.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:04:18:2e:89:39:f6:a2:bc:2a:96:88:d4:9d:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Sep 16 16:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac6c52687674d304eb5e19961333f93187a8780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:82:f9:14:67:ce:c1:51:9e:1f:ea:ae:76:
1a:4f:bf:d5:2c:ae:6b:8d:0b:2c:1b:61:8f:4a:b7:
d2:05:2c:45:e8:44:47:c0:6d:e1:74:b7:47:2a:34:
f4:d6:49:cc:f3:ff:1d:50:90:70:de:fd:c1:25:20:
df:cc:b5:92:25:a3:3f:36:a9:bd:bc:26:2a:55:61:
04:a0:b7:c7:f0:2d:22:fb:cc:ab:3b:1f:51:c9:24:
e5:ce:f7:25:75:b0:ec:d3:f3:84:84:ab:7b:f5:50:
59:45:20:8e:8c:be:06:5c:94:da:08:93:b6:6d:5e:
98:70:59:a7:e6:91:06:ee:2f:09:cc:a6:6f:2e:31:
e0:0d:5e:f3:0f:ed:a0:1d:29:6f:b0:46:5f:f4:af:
5c:64:c7:6c:86:8a:16:1a:6f:68:0d:b7:aa:d1:51:
50:15:b3:dc:d9:da:0e:51:05:dd:dc:cf:ba:d9:22:
10:ad:42:82:96:38:4c:78:c8:77:42:d4:b0:34:de:
20:9f:f2:f6:b5:19:dd:4f:e1:41:eb:33:62:90:d0:
46:e7:a0:23:17:0f:18:5b:b7:05:a4:06:7c:17:c0:
33:d4:c9:78:f5:c1:4d:28:84:57:53:73:89:ed:76:
8f:95:7e:77:65:e2:67:5b:ca:24:29:e8:56:fc:0d:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C6:C5:26:87:67:4D:30:4E:B5:E1:99:61:33:3F:93:18:7A:87:80
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/CsbFJodnTTBOteGZYTM_kxh6h4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0b:fe:b3:5a:05:3a:12:c2:4e:3b:28:24:7b:ac:e3:2e:41:
1c:5b:73:d2:f4:0d:44:11:42:9c:07:b1:e8:30:d5:1d:e1:93:
85:39:ea:16:8e:ab:27:7b:4b:ba:f5:8a:3b:9f:7f:17:b5:14:
e2:3e:c2:35:0c:16:e0:0f:07:b0:1e:98:1e:75:36:c7:ba:24:
4b:da:dc:53:76:bb:8b:e7:d8:f5:98:e7:88:4c:8d:2d:77:ad:
38:5a:f9:2b:d5:e5:83:ab:5f:59:8c:c3:2b:39:3e:78:69:f1:
d6:f0:88:38:1b:71:47:2d:c1:57:1a:d6:69:3e:d7:f6:bc:72:
cc:16:1e:2d:20:c6:67:9b:4f:d0:18:61:94:dc:2d:ce:51:28:
04:7d:eb:1b:8e:3a:b1:8c:fc:f6:fa:7a:56:89:cf:3f:e3:1c:
4a:c3:7b:2a:5f:d5:bf:2e:e9:66:6a:33:e3:42:74:08:c5:86:
42:10:ba:54:62:04:9a:3a:14:ab:df:02:46:d6:9a:63:c2:eb:
26:2e:2c:04:93:6f:5c:6b:03:80:f0:a8:31:29:71:40:a0:ef:
b1:07:9f:ce:8b:dd:2a:01:ad:82:db:43:6f:e2:63:8a:c3:0a:
7e:7a:24:0b:c1:c6:6b:66:67:61:eb:7f:78:55:5e:de:27:e0:
9a:93:a0:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCrBBguiTn2orwqlojUnd/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjYwOTE2MTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWM2YzUyNjg3Njc0ZDMwNGViNWUxOTk2MTMzM2Y5MzE4N2E4NzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu52C+RRnzsFRnh/qrnYaT7/VLK5r
jQssG2GPSrfSBSxF6ERHwG3hdLdHKjT01knM8/8dUJBw3v3BJSDfzLWSJaM/Nqm9
vCYqVWEEoLfH8C0i+8yrOx9RySTlzvcldbDs0/OEhKt79VBZRSCOjL4GXJTaCJO2
bV6YcFmn5pEG7i8JzKZvLjHgDV7zD+2gHSlvsEZf9K9cZMdshooWGm9oDbeq0VFQ
FbPc2doOUQXd3M+62SIQrUKCljhMeMh3QtSwNN4gn/L2tRndT+FB6zNikNBG56Aj
Fw8YW7cFpAZ8F8Az1Ml49cFNKIRXU3OJ7XaPlX53ZeJnW8okKehW/A0OBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFArGxSaHZ00wTrXhmWEzP5MYeoeAMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvQ3NiRkpvZG5UVEJPdGVHWllUTV9reGg2aDRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRPfMA0G
CSqGSIb3DQEBCwUAA4IBAQAcC/6zWgU6EsJOOygke6zjLkEcW3PS9A1EEUKcB7Ho
MNUd4ZOFOeoWjqsne0u69Yo7n38XtRTiPsI1DBbgDwewHpgedTbHuiRL2txTdruL
59j1mOeITI0td604Wvkr1eWDq19ZjMMrOT54afHW8Ig4G3FHLcFXGtZpPtf2vHLM
Fh4tIMZnm0/QGGGU3C3OUSgEfesbjjqxjPz2+npWic8/4xxKw3sqX9W/LulmajPj
QnQIxYZCELpUYgSaOhSr3wJG1ppjwusmLiwEk29cawOA8KgxKXFAoO+xB5/Oi90q
Aa2C20Nv4mOKwwp+eiQLwcZrZmdh6394VV7eJ+Cak6CP
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:54 2026 by rpki-client