Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/8FD4U6ZGtuoAHocljE-7ZaSj_2s.roa
File: 8FD4U6ZGtuoAHocljE-7ZaSj_2s.roa (raw, json)
Hash identifier: QKGIUmJdU7SFEM11wIAC5KNHu59OvooxmJA3U48JvIk=
Subject key identifier: F0:50:F8:53:A6:46:B6:EA:00:1E:87:25:8C:4F:BB:65:A4:A3:FF:6B
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01A09EE38A4C3CBE573B78E09BF85B1D995B
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/8FD4U6ZGtuoAHocljE-7ZaSj_2s.roa
Signing time: Mon 14 Sep 2026 07:48:27 +0000
ROA not before: Mon 14 Sep 2026 07:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 89.149.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:e3:8a:4c:3c:be:57:3b:78:e0:9b:f8:5b:1d:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Sep 14 07:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f050f853a646b6ea001e87258c4fbb65a4a3ff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:b5:d9:62:1b:db:00:22:b4:07:61:a7:1d:
69:0d:e3:ab:c2:ae:7a:52:27:23:29:c9:70:ca:a2:
e2:0d:3d:90:54:61:fe:01:75:8c:c9:f1:7b:cb:b4:
57:43:3d:19:8f:b1:62:ec:24:c7:7d:4b:21:b4:e1:
72:6f:25:8e:7b:2d:46:df:2c:77:20:e2:3e:36:54:
63:63:e3:2d:94:a0:5b:7a:3a:d5:84:55:b3:77:ec:
fc:c0:78:7c:9e:51:00:48:29:d3:75:50:56:3c:1a:
f2:d2:0d:fd:cf:f7:44:52:06:fc:14:d1:c6:33:6c:
80:2c:22:25:9f:3b:17:c8:a6:4d:d5:e6:63:43:34:
e5:d1:5b:b2:01:3f:a7:4a:6a:61:12:d2:9c:d1:37:
ce:8d:1e:6f:ec:ae:d7:ff:33:fe:ee:cb:16:26:09:
4f:ed:3c:0b:c4:4b:a5:92:b1:28:36:9e:0b:87:a8:
c8:ca:b1:27:0d:2f:65:e7:44:69:83:01:57:56:68:
06:56:88:ab:49:e7:25:5e:0d:cc:5a:ae:8e:7b:54:
c0:df:2c:f8:bf:a0:90:96:72:5c:f0:91:0f:e3:bf:
86:8a:ca:44:b4:91:94:55:cc:06:23:59:b9:41:64:
36:8f:85:1c:07:91:c0:22:64:43:91:46:b5:81:28:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:F8:53:A6:46:B6:EA:00:1E:87:25:8C:4F:BB:65:A4:A3:FF:6B
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/8FD4U6ZGtuoAHocljE-7ZaSj_2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.17.0/24
Signature Algorithm: sha256WithRSAEncryption
41:10:00:d4:9c:98:a7:77:17:a9:51:85:33:27:77:a3:28:88:
fb:69:15:46:86:2a:56:5e:f6:38:bd:e0:06:9d:e2:1f:3f:71:
b1:ae:fe:01:0b:2f:e2:f3:bc:6b:34:27:8e:06:cf:c9:11:c1:
7f:cd:88:1c:8e:af:24:67:9b:f3:25:63:e9:79:c5:14:b6:44:
e6:de:fe:1e:f7:6b:89:d3:0d:4f:df:db:29:86:63:09:87:43:
f5:36:a4:62:4d:74:7b:b9:94:12:9f:80:b5:01:e9:bd:75:07:
cc:e2:c8:96:3d:1c:41:9b:99:78:6a:3e:3c:c7:2d:06:d9:94:
5d:e3:a3:0b:98:89:f9:dd:a5:84:97:c9:10:9b:f3:d7:6e:44:
e7:9a:4e:c7:a6:79:d3:46:04:9d:4c:78:08:f1:f1:be:a8:75:
0b:ae:ba:ac:32:9d:97:f6:e9:78:63:4d:8d:39:eb:8c:f6:ec:
ff:86:85:e7:35:0e:6f:ae:e1:fd:2c:d7:aa:3d:6b:84:27:58:
24:50:23:57:0f:66:2d:d4:2c:d0:e9:e3:36:73:63:a4:fc:cb:
08:6a:e1:c3:0b:9c:b7:11:d0:e5:25:c7:66:7c:fa:a2:0c:40:
f5:eb:fb:de:3c:59:d5:21:9c:d2:43:a7:31:cb:08:e3:33:bb:
1f:c6:b4:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCe44pMPL5XO3jgm/hbHZlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjYwOTE0MDc0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDUwZjg1M2E2NDZiNmVhMDAxZTg3MjU4YzRmYmI2NWE0YTNmZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5i12WIb2wAitAdhpx1pDeOrwq56
UicjKclwyqLiDT2QVGH+AXWMyfF7y7RXQz0Zj7Fi7CTHfUshtOFybyWOey1G3yx3
IOI+NlRjY+MtlKBbejrVhFWzd+z8wHh8nlEASCnTdVBWPBry0g39z/dEUgb8FNHG
M2yALCIlnzsXyKZN1eZjQzTl0VuyAT+nSmphEtKc0TfOjR5v7K7X/zP+7ssWJglP
7TwLxEulkrEoNp4Lh6jIyrEnDS9l50RpgwFXVmgGVoirSeclXg3MWq6Oe1TA3yz4
v6CQlnJc8JEP47+GispEtJGUVcwGI1m5QWQ2j4UcB5HAImRDkUa1gSh6bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBQ+FOmRrbqAB6HJYxPu2Wko/9rMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvOEZENFU2Wkd0dW9BSG9jbGpFLTdaYVNqXzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZURMA0G
CSqGSIb3DQEBCwUAA4IBAQBBEADUnJindxepUYUzJ3ejKIj7aRVGhipWXvY4veAG
neIfP3Gxrv4BCy/i87xrNCeOBs/JEcF/zYgcjq8kZ5vzJWPpecUUtkTm3v4e92uJ
0w1P39sphmMJh0P1NqRiTXR7uZQSn4C1Aem9dQfM4siWPRxBm5l4aj48xy0G2ZRd
46MLmIn53aWEl8kQm/PXbkTnmk7HpnnTRgSdTHgI8fG+qHULrrqsMp2X9ul4Y02N
OeuM9uz/hoXnNQ5vruH9LNeqPWuEJ1gkUCNXD2Yt1CzQ6eM2c2Ok/MsIauHDC5y3
EdDlJcdmfPqiDED16/vePFnVIZzSQ6cxywjjM7sfxrRX
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:12 2026 by rpki-client