Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ObylHZ_HkO92o5o16zyvfcuarhE.roa
File: ObylHZ_HkO92o5o16zyvfcuarhE.roa (raw, json)
Hash identifier: Zr8qrRyKZUgHHu1Q7JOC+BdLi37E4r+WsT2+p9//JEU=
Subject key identifier: 39:BC:A5:1D:9F:C7:90:EF:76:A3:9A:35:EB:3C:AF:7D:CB:9A:AE:11
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D7093B1A231E94665F3177D3AC358170E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ObylHZ_HkO92o5o16zyvfcuarhE.roa
Signing time: Thu 09 Apr 2026 04:50:20 +0000
ROA not before: Thu 09 Apr 2026 04:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 89.34.224.0/23 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:93:b1:a2:31:e9:46:65:f3:17:7d:3a:c3:58:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 9 04:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39bca51d9fc790ef76a39a35eb3caf7dcb9aae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:19:f4:5f:f7:77:7d:ff:9c:ce:98:53:19:
13:e8:e3:4c:63:fb:b1:f0:be:0b:8a:51:88:53:3f:
c4:be:1a:97:08:ab:d1:04:07:46:08:a7:8e:17:a4:
f8:49:31:8a:fc:28:7c:f3:35:06:50:c0:ac:20:80:
2a:16:38:34:0f:46:ae:81:b2:b2:2f:07:84:b5:b8:
02:28:ed:0e:d7:56:b4:8c:5e:9b:f4:0a:71:3b:27:
d7:ba:bc:29:3b:e1:e2:0f:f5:2b:db:d0:35:24:29:
45:da:d2:f4:66:fa:d2:7a:d9:22:17:d5:f5:fa:e4:
62:00:59:31:36:be:2c:53:ad:33:a4:30:0a:d3:e3:
a3:c6:77:92:2a:c6:74:8e:42:53:c9:1f:62:e5:8c:
7c:bd:ec:d1:a5:bf:86:f4:84:5c:2b:ab:5c:1d:a9:
8e:7b:b9:74:e2:64:14:e7:e6:ba:d7:bd:b4:1d:c0:
95:00:a6:3d:77:a4:cb:40:3c:79:dc:5e:ae:98:fd:
72:11:25:6f:c1:ea:da:da:9c:44:34:c4:55:19:aa:
9e:f5:00:e3:98:d2:b4:84:10:d1:06:ca:62:08:63:
54:69:b2:82:03:81:19:8e:93:38:93:48:0e:68:5f:
60:7a:23:8d:69:7f:69:1c:58:03:d5:da:8f:45:7b:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BC:A5:1D:9F:C7:90:EF:76:A3:9A:35:EB:3C:AF:7D:CB:9A:AE:11
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ObylHZ_HkO92o5o16zyvfcuarhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.34.228.0/24
89.34.231.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.42.143.0/24
89.43.140.0/24
89.43.143.0/24
89.46.0.0/24
89.46.3.0/24
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.127.255
93.113.181.0/24
93.114.74.0-93.114.79.255
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ea:c6:26:82:93:9d:71:0d:f5:a0:98:9a:fe:eb:ef:60:77:
34:77:25:8f:67:be:73:b1:f8:62:89:49:12:2a:f7:d8:f0:79:
76:af:d7:0e:fd:16:64:d0:7a:0b:2d:4c:8e:26:22:c9:91:49:
8f:3e:a7:e3:48:cb:33:94:12:4f:79:b7:cc:e9:95:52:5a:ed:
96:a5:31:2d:24:7c:00:a1:a5:4c:b9:2c:18:e0:fd:a6:38:90:
f2:b4:6d:5c:35:c0:33:9f:cc:43:36:54:a6:e5:c8:e7:f6:47:
45:a1:70:18:ce:8d:c4:da:e1:a7:7a:64:17:9a:18:92:97:71:
6a:e1:6f:6e:7f:70:d8:dd:8a:0b:6c:a1:36:c6:12:5b:64:48:
d3:6c:c2:80:50:77:51:f3:66:ca:f7:fe:c3:44:06:35:cd:dc:
c0:f0:73:04:ce:9a:98:2d:cb:46:c9:68:2a:63:ab:e6:82:53:
ca:bb:32:e0:1f:b6:51:7b:aa:30:65:e0:1e:8f:09:9a:bd:b1:
66:3b:b4:d4:82:44:26:2a:d1:22:07:8b:c5:02:93:4e:4e:c9:
0c:18:af:fa:84:6e:eb:0d:fa:28:19:fc:ac:25:6e:52:82:3b:
f8:96:58:2d:88:9a:0f:1b:a9:02:76:9c:5c:02:e0:f6:e8:82:
06:bc:cb:85
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZ1wk7GiMelGZfMXfTrDWBcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNDA5MDQ1MDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWJjYTUxZDlmYzc5MGVmNzZhMzlhMzVlYjNjYWY3ZGNiOWFhZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYoZ9F/3d33/nM6YUxkT6ONMY/ux
8L4LilGIUz/EvhqXCKvRBAdGCKeOF6T4STGK/Ch88zUGUMCsIIAqFjg0D0augbKy
LweEtbgCKO0O11a0jF6b9ApxOyfXurwpO+HiD/Ur29A1JClF2tL0ZvrSetkiF9X1
+uRiAFkxNr4sU60zpDAK0+OjxneSKsZ0jkJTyR9i5Yx8vezRpb+G9IRcK6tcHamO
e7l04mQU5+a61720HcCVAKY9d6TLQDx53F6umP1yESVvwera2pxENMRVGaqe9QDj
mNK0hBDRBspiCGNUabKCA4EZjpM4k0gOaF9geiONaX9pHFgD1dqPRXuqBQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFDm8pR2fx5DvdqOaNes8r33Lmq4RMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvT2J5bEhaX0hrTzkybzVvMTZ6eXZmY3VhcmhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAFZ
IuADBABZIuQDBABZIucDBAFZJuQDBABZKFIwDAMEBFkqUAMEAFkqUgMEAFkqVgME
AFkqjwMEAFkrjAMEAFkrjwMEAFkuAAMEAFkuAwMEAFkvYwMEAFkvcwMEAFkvdQME
AFkvdzAMAwQAWS99AwQHWS8AAwQAXXG1MAwDBAFdckoDBARdckADBAC5ZWkwDQYJ
KoZIhvcNAQELBQADggEBAFXqxiaCk51xDfWgmJr+6+9gdzR3JY9nvnOx+GKJSRIq
99jweXav1w79FmTQegstTI4mIsmRSY8+p+NIyzOUEk95t8zplVJa7ZalMS0kfACh
pUy5LBjg/aY4kPK0bVw1wDOfzEM2VKblyOf2R0WhcBjOjcTa4ad6ZBeaGJKXcWrh
b25/cNjdigtsoTbGEltkSNNswoBQd1HzZsr3/sNEBjXN3MDwcwTOmpgty0bJaCpj
q+aCU8q7MuAftlF7qjBl4B6PCZq9sWY7tNSCRCYq0SIHi8UCk05OyQwYr/qEbusN
+igZ/KwlblKCO/iWWC2Img8bqQJ2nFwC4Pbogga8y4U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:03 2026 by rpki-client