Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AXUvF_J_Dsx9KvnyrzNh7smqsyw.roa
File: AXUvF_J_Dsx9KvnyrzNh7smqsyw.roa (raw, json)
Hash identifier: BK70YR2LUM0Q4SKlX7kLgOZh9vQCoXPEw6ilbMrYiRw=
Subject key identifier: 01:75:2F:17:F2:7F:0E:CC:7D:2A:F9:F2:AF:33:61:EE:C9:AA:B3:2C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D525AA80B66B668F1DC4E3CA5F302D1DC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AXUvF_J_Dsx9KvnyrzNh7smqsyw.roa
Signing time: Fri 03 Apr 2026 07:59:26 +0000
ROA not before: Fri 03 Apr 2026 07:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 996
IP address blocks: 89.34.224.0/23 maxlen: 23
89.34.224.0/24 maxlen: 24
89.34.225.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:5a:a8:0b:66:b6:68:f1:dc:4e:3c:a5:f3:02:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 3 07:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01752f17f27f0ecc7d2af9f2af3361eec9aab32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:44:3c:c6:ab:6d:a2:8c:b1:94:36:ed:c1:
27:6e:c5:8b:dc:10:1d:2f:22:bb:40:10:f6:3a:71:
db:38:e4:26:0c:ed:8f:f2:29:83:9e:5f:3b:67:25:
fb:30:31:a0:2e:66:fc:c1:80:92:a9:14:50:08:af:
60:12:8b:89:9c:04:34:31:e4:a5:86:31:a3:76:d9:
5e:2a:7e:22:79:35:3a:c3:34:52:0c:2d:e1:c9:98:
13:0d:68:08:82:80:76:b8:75:1a:6b:31:58:0c:9c:
db:4c:3e:82:1c:70:02:57:9b:c3:e3:ed:b5:40:b8:
7b:c9:c3:3f:30:96:a1:62:12:fd:f2:4b:ce:73:1e:
e3:c8:43:52:ab:56:a5:14:71:c4:3e:1d:b6:81:fd:
e0:e2:39:41:66:59:e3:81:5f:9d:2e:4e:54:44:19:
6f:3d:b4:e9:e7:44:18:0b:ce:22:6e:66:cc:f9:1f:
1d:d2:a5:81:03:5e:a7:f7:71:c0:b2:0f:ac:a0:68:
96:b2:7b:d6:aa:b6:a8:fb:cd:9a:78:42:f2:6d:9a:
b1:9e:48:b3:83:24:9a:ae:57:90:9f:e4:c3:8e:8a:
85:cb:c5:ca:0c:f3:e0:be:9d:27:fa:8a:e2:a2:d8:
70:51:18:fa:f7:ce:a0:8f:0c:88:fd:ee:d8:29:25:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:2F:17:F2:7F:0E:CC:7D:2A:F9:F2:AF:33:61:EE:C9:AA:B3:2C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AXUvF_J_Dsx9KvnyrzNh7smqsyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.34.231.0/24
89.37.119.0/24
89.40.82.0/24
89.42.143.0/24
89.46.0.0/24
89.47.99.0/24
89.47.117.0/24
89.47.125.0/24
89.47.127.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7d:d7:6d:34:ac:da:84:10:60:61:be:78:9a:14:13:df:a8:
9b:6e:1a:aa:9a:34:db:11:72:e6:25:5f:ac:ee:97:2b:e3:84:
2e:24:55:a5:ac:ee:0d:6a:5b:e9:5f:4e:d2:a7:2c:85:8d:00:
da:52:af:25:86:46:11:d8:ef:4c:3a:d9:24:48:72:84:ba:0a:
f2:cd:39:85:d6:12:61:bb:5f:4e:80:b7:fa:c0:f1:c0:15:5d:
67:a8:29:04:7c:f7:bf:4c:ea:58:f8:4e:24:b2:8a:bc:89:23:
5f:93:73:78:37:92:6b:ae:19:0d:d6:b7:4f:f7:5d:20:71:4a:
b6:ea:1a:55:90:cf:ab:7c:27:2f:e4:f5:60:01:ea:31:84:cc:
8f:c0:c5:a6:aa:c9:d5:fc:82:df:cd:e8:f2:a6:4a:4d:1d:8f:
ca:e4:1d:d3:c4:a5:ff:a7:d4:2d:d6:9e:e6:f2:49:9a:ee:ed:
64:ea:3e:4c:91:20:fa:8a:1d:74:1e:53:22:64:37:22:32:ec:
50:1a:8a:75:2e:6a:4f:4a:4d:f8:b5:35:15:f8:f4:8e:50:0b:
51:fa:2d:ac:46:36:2f:22:bf:53:d3:b3:5a:45:e5:60:14:5b:
f6:9a:96:c1:e5:7c:17:71:2e:12:72:f4:d9:02:a3:b8:89:8a:
90:1f:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:13 2026 by rpki-client