Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/IRAfjWAlERnsxDrkVza8YXCUxl4.roa
File: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (raw, json)
Hash identifier: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=
Subject key identifier: 21:10:1F:8D:60:25:11:19:EC:C4:3A:E4:57:36:BC:61:70:94:C6:5E
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 019C1138F14624F7F6B48AB08FCF330E4479
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/IRAfjWAlERnsxDrkVza8YXCUxl4.roa
Signing time: Fri 30 Jan 2026 23:24:30 +0000
ROA not before: Fri 30 Jan 2026 23:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29072
IP address blocks: 89.234.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:11:38:f1:46:24:f7:f6:b4:8a:b0:8f:cf:33:0e:44:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 30 23:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21101f8d60251119ecc43ae45736bc617094c65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:7b:e9:9a:a6:20:10:6c:1a:6c:77:ed:3e:
98:3c:39:fa:3b:92:bf:b8:19:3f:b7:78:e4:b6:d9:
99:6c:b1:e2:54:b8:63:60:ae:63:dc:cb:f8:41:6e:
cb:ab:30:6a:d8:2b:a6:3f:f6:9d:e6:2f:1a:16:1d:
c8:7f:ef:f5:dc:a1:98:45:25:2c:cc:8e:f4:7e:53:
ca:89:b0:11:fc:a9:53:70:fb:86:47:1a:da:d7:3b:
2f:31:2b:61:ef:08:af:f9:77:71:94:d0:40:46:d6:
60:d0:6d:f1:af:1b:cf:85:08:8e:63:2b:b3:77:20:
76:44:08:0b:98:5b:c5:43:e5:ed:d2:87:1a:52:4e:
37:99:25:b5:d1:eb:af:c0:80:26:e2:c6:e0:31:f4:
98:e2:58:89:40:40:3f:18:2f:50:f1:66:2a:d9:5a:
f2:ed:fe:7b:84:9f:fd:92:8d:8c:f2:28:7c:b9:57:
be:68:33:54:97:33:a1:bf:7a:ef:1c:58:7d:1a:1e:
f0:3e:88:c9:c0:13:a5:e3:79:66:41:92:80:24:3f:
7f:d8:5e:78:73:5a:7b:5d:f1:34:bf:2d:aa:cb:ef:
b1:9e:d0:95:52:80:89:a6:bb:38:83:3c:f4:f2:47:
ca:fe:a7:85:5d:fe:e6:82:0d:92:5c:17:7e:98:82:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:1F:8D:60:25:11:19:EC:C4:3A:E4:57:36:BC:61:70:94:C6:5E
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/IRAfjWAlERnsxDrkVza8YXCUxl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:21:e6:2c:61:e1:b0:17:34:80:5e:c4:cf:52:78:5a:1f:
ee:87:2b:ad:d3:c4:bc:76:40:52:79:d9:df:1a:9f:dd:02:34:
88:4e:19:6f:9e:04:3d:33:9e:8c:5e:f6:2f:dd:2a:e3:01:c4:
32:98:6f:b8:21:0f:73:05:cc:19:dc:10:31:88:62:bc:9a:f5:
3d:99:2a:9e:21:2f:b4:64:a2:d0:c5:b0:b6:a0:f2:3e:1f:a7:
c2:83:07:05:7e:b4:8d:9b:04:83:7d:54:e6:49:fa:e8:44:08:
3d:c9:b1:b9:9f:a2:a6:c2:a4:ef:fd:30:d8:9e:9a:0d:9c:22:
ab:4c:9b:2f:6b:7c:bd:97:5f:c2:ae:af:29:e3:33:b2:e2:d9:
33:98:3b:ac:81:e4:6a:19:cf:c6:fa:b4:e4:23:c6:5e:2c:22:
a5:e6:d0:36:7e:de:da:5e:b8:c4:32:d1:9c:1e:72:aa:9d:81:
aa:89:f6:f4:da:3d:2f:0c:47:aa:4d:fe:0e:17:73:b4:a5:7c:
39:19:fd:1e:75:8f:f8:34:fb:8c:9e:2c:90:9d:c8:2c:f9:d2:
6c:41:d5:b5:bd:00:db:32:ef:22:4a:00:1a:79:fb:9b:c9:02:
74:79:5f:61:60:66:bd:da:b1:9d:e2:18:ad:1c:b9:39:6c:90:
90:78:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:09 2026 by rpki-client