Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/_Hegz1VVkQxT8dMR4TPbzXidnGo.roa
File: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (raw, json)
Hash identifier: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=
Subject key identifier: FC:77:A0:CF:55:55:91:0C:53:F1:D3:11:E1:33:DB:CD:78:9D:9C:6A
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019C6FE56E84157AA4205CD7B889A60059C1
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/_Hegz1VVkQxT8dMR4TPbzXidnGo.roa
Signing time: Wed 18 Feb 2026 08:37:12 +0000
ROA not before: Wed 18 Feb 2026 08:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40964
IP address blocks: 89.107.129.0/24 maxlen: 24
89.107.130.0/24 maxlen: 24
89.107.131.0/24 maxlen: 24
89.107.132.0/23 maxlen: 23
89.107.134.0/23 maxlen: 23
2a01:afc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:e5:6e:84:15:7a:a4:20:5c:d7:b8:89:a6:00:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Feb 18 08:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc77a0cf5555910c53f1d311e133dbcd789d9c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:12:6e:57:b3:6a:02:b5:b8:1c:a6:a8:15:
f3:40:0b:44:ec:4e:eb:b7:d2:9a:18:ed:2d:b7:09:
fc:79:5e:5a:5c:b1:84:d1:17:a9:b2:95:b9:10:4b:
e7:cf:e8:e2:de:42:e6:3a:53:c6:42:e9:3d:85:86:
04:f9:9c:62:bd:52:d5:ef:1d:96:2a:85:63:cb:b7:
26:05:1c:5f:c8:22:07:e7:a9:0a:33:1d:00:79:76:
0b:65:ab:d8:fb:d2:ae:d4:f9:e0:98:37:30:16:af:
0c:51:da:13:d5:c2:4c:ac:e7:5d:3f:01:4f:68:6a:
d5:61:c3:24:92:24:f8:b1:cb:c1:0b:88:6c:a7:df:
43:09:76:d7:1a:13:1b:d3:60:89:7d:83:0b:28:50:
36:88:25:52:8d:77:0f:f0:3a:e2:70:0f:2a:18:4d:
dc:83:d3:5c:e3:19:d9:d9:af:67:18:24:07:59:3c:
08:22:d7:08:a4:ae:1d:9c:63:3e:6e:14:b4:1d:76:
fb:d8:67:08:f5:5a:73:b8:57:c6:3c:b4:fc:72:b2:
ea:9d:79:42:fb:ca:29:f7:51:cd:9c:de:7d:56:61:
16:a8:d7:33:b8:b7:a1:af:f9:df:49:f8:69:0b:ac:
28:f8:c8:b3:39:74:ea:ed:dc:34:5d:81:8d:2a:0c:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:A0:CF:55:55:91:0C:53:F1:D3:11:E1:33:DB:CD:78:9D:9C:6A
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/_Hegz1VVkQxT8dMR4TPbzXidnGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.129.0-89.107.135.255
IPv6:
2a01:afc0::/32
Signature Algorithm: sha256WithRSAEncryption
62:23:ab:07:de:2a:b6:c3:e8:8a:df:e3:94:4b:58:07:73:51:
5d:8f:e7:c2:d7:31:67:18:3d:1d:e4:c5:cd:d6:48:b5:69:f8:
2d:6a:f1:4e:2b:62:69:96:77:15:dc:26:65:25:f2:d5:cb:f4:
9f:c5:4f:4a:e6:6d:52:92:bc:a0:bc:b0:84:e7:68:b5:7a:69:
e6:9c:ee:a4:b8:a3:07:0d:88:98:3e:28:4f:c0:c4:a6:8d:08:
2a:8e:11:69:b8:81:9b:73:24:be:86:d8:73:1c:29:ec:91:71:
fa:1e:47:0b:e8:f2:8c:0c:20:b9:34:0c:e2:b5:db:b2:b8:e4:
a0:ba:61:4e:65:35:63:81:0d:e3:1e:5d:ed:32:0a:41:cc:90:
09:cf:7e:f7:1e:7a:a7:0c:6e:ff:51:1e:76:72:18:6f:54:ab:
ac:a7:1a:fd:b4:3b:03:f0:67:25:0c:35:eb:6d:c0:3f:a2:e5:
94:9e:c4:1a:35:9b:c7:fb:e7:e6:66:4d:45:2c:60:a0:20:28:
16:62:2a:4b:e3:ea:f8:62:31:15:f8:60:3a:00:d9:0a:b2:85:
c6:40:cc:13:e0:f0:61:6e:37:dc:bd:f6:e5:b2:e2:bf:bc:b8:
e6:07:f9:69:30:2e:45:5f:ca:73:ff:60:4e:83:5d:26:88:72:
88:c8:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:29 2026 by rpki-client