Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xfWsq9BAkqHozJmSanNQepK9r1A.roa
File: xfWsq9BAkqHozJmSanNQepK9r1A.roa (raw, json)
Hash identifier: 7JnIynLFWnkJ04PZfMk/Ht9P7RM0+tFklDlzeTobCm0=
Subject key identifier: C5:F5:AC:AB:D0:40:92:A1:E8:CC:99:92:6A:73:50:7A:92:BD:AF:50
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A08B26C3184BDE44FD8AD79561B2A526F3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xfWsq9BAkqHozJmSanNQepK9r1A.roa
Signing time: Thu 10 Sep 2026 11:49:28 +0000
ROA not before: Thu 10 Sep 2026 11:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 89.213.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:26:c3:18:4b:de:44:fd:8a:d7:95:61:b2:a5:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 10 11:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5f5acabd04092a1e8cc99926a73507a92bdaf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:86:51:f5:0e:d1:56:8f:58:bb:51:86:81:
a0:9b:3b:5c:f7:29:16:40:1e:c1:8c:a9:38:5d:fb:
8b:63:69:a8:18:ba:2a:d6:b7:cc:9f:9e:72:40:1c:
33:46:1e:1a:c6:f2:40:f8:83:c0:3a:15:7a:8b:94:
17:4f:c0:c7:b9:6e:4a:02:c2:a3:93:da:49:23:33:
f7:2f:33:18:c0:3f:5c:9e:c1:31:1a:a9:62:b3:43:
2b:7f:5f:ea:92:17:7d:0f:c2:38:38:08:74:b4:e4:
ae:e7:e1:9c:6c:b3:f8:95:c1:3b:5a:be:63:e5:9a:
fa:e0:a3:ad:da:cf:2f:07:eb:e6:d3:87:8f:a3:bc:
ad:b1:89:e7:19:a0:55:a9:e5:16:23:12:a2:42:26:
83:e3:88:22:93:55:97:29:ba:bc:db:9f:b3:b7:3a:
33:81:5b:21:74:cb:32:dd:ed:a5:f7:da:d5:79:be:
83:ed:5d:9b:12:eb:36:00:7b:d8:10:5f:14:06:4e:
05:d8:49:ee:c8:43:bc:87:16:91:48:25:4e:43:0c:
d2:ec:82:3b:cd:e3:e2:f6:74:fd:b7:e7:ee:67:ac:
0f:40:38:ff:3f:e6:7d:83:37:65:19:fb:3f:93:41:
d5:fb:bc:11:88:72:db:cd:d5:64:d2:b9:62:5d:1e:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:AC:AB:D0:40:92:A1:E8:CC:99:92:6A:73:50:7A:92:BD:AF:50
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xfWsq9BAkqHozJmSanNQepK9r1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:76:24:0e:fb:7b:91:ba:a5:c0:cf:e8:31:c4:ac:79:21:27:
86:50:db:4c:bf:26:56:b9:86:17:03:e5:dc:8f:60:94:a8:4b:
59:46:c2:f5:56:e6:28:d0:25:cc:4c:36:ab:3b:50:00:b0:30:
12:c0:f0:a9:bd:8b:02:8a:25:fe:7c:4a:dc:cd:25:6f:91:62:
4f:3b:1b:aa:c9:d3:5f:c9:fa:99:bf:55:2a:d6:e8:cd:fe:90:
3b:14:76:82:e6:fd:68:09:05:0b:4f:01:21:44:6a:e1:cd:90:
e9:26:54:db:23:13:f3:56:17:54:44:8e:6a:01:88:a9:c5:95:
79:3b:fc:95:63:db:55:27:55:fa:1c:e6:19:aa:a4:9d:38:fa:
1b:97:b0:36:24:53:07:52:e8:2b:0c:74:f1:77:fe:73:21:98:
bb:c9:b5:94:a3:ef:5d:a5:67:c0:62:f7:78:ab:3f:a3:91:68:
a8:22:e2:1e:6e:02:9b:d8:68:5b:58:64:01:08:ce:e5:1b:1a:
40:94:ec:f8:f8:05:1d:fb:59:0f:4c:3a:29:c6:ba:cc:1a:1d:
a2:58:02:8d:b6:d7:5d:e1:3f:e1:ec:c0:b0:50:68:ed:43:e6:
b2:b8:3d:b6:cc:04:fc:99:62:5b:6a:c3:dc:0d:b5:78:78:94:
f0:98:27:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCLJsMYS95E/YrXlWGypSbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTEwMTE0OTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWY1YWNhYmQwNDA5MmExZThjYzk5OTI2YTczNTA3YTkyYmRhZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB+GUfUO0VaPWLtRhoGgmztc9ykW
QB7BjKk4XfuLY2moGLoq1rfMn55yQBwzRh4axvJA+IPAOhV6i5QXT8DHuW5KAsKj
k9pJIzP3LzMYwD9cnsExGqlis0Mrf1/qkhd9D8I4OAh0tOSu5+GcbLP4lcE7Wr5j
5Zr64KOt2s8vB+vm04ePo7ytsYnnGaBVqeUWIxKiQiaD44gik1WXKbq825+ztzoz
gVshdMsy3e2l99rVeb6D7V2bEus2AHvYEF8UBk4F2EnuyEO8hxaRSCVOQwzS7II7
zePi9nT9t+fuZ6wPQDj/P+Z9gzdlGfs/k0HV+7wRiHLbzdVk0rliXR4pQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMX1rKvQQJKh6MyZkmpzUHqSva9QMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveGZXc3E5QkFrcUhvekptU2FuTlFlcEs5cjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdU/MA0G
CSqGSIb3DQEBCwUAA4IBAQBPdiQO+3uRuqXAz+gxxKx5ISeGUNtMvyZWuYYXA+Xc
j2CUqEtZRsL1VuYo0CXMTDarO1AAsDASwPCpvYsCiiX+fErczSVvkWJPOxuqydNf
yfqZv1Uq1ujN/pA7FHaC5v1oCQULTwEhRGrhzZDpJlTbIxPzVhdURI5qAYipxZV5
O/yVY9tVJ1X6HOYZqqSdOPobl7A2JFMHUugrDHTxd/5zIZi7ybWUo+9dpWfAYvd4
qz+jkWioIuIebgKb2GhbWGQBCM7lGxpAlOz4+AUd+1kPTDopxrrMGh2iWAKNttdd
4T/h7MCwUGjtQ+ayuD22zAT8mWJbasPcDbV4eJTwmCdv
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:44 2026 by rpki-client