Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZDjk9Sc8MYM6vSLLtt1_1WY0dPs.roa
File: ZDjk9Sc8MYM6vSLLtt1_1WY0dPs.roa (raw, json)
Hash identifier: UQ0vhUUnUqKx6lyLlgh1u+Erosox4EafMcwgq0c8IF4=
Subject key identifier: 64:38:E4:F5:27:3C:31:83:3A:BD:22:CB:B6:DD:7F:D5:66:34:74:FB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A08AA2EB92C2145AD27AF8D58EF9943DB0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZDjk9Sc8MYM6vSLLtt1_1WY0dPs.roa
Signing time: Thu 10 Sep 2026 09:25:27 +0000
ROA not before: Thu 10 Sep 2026 09:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:a2:eb:92:c2:14:5a:d2:7a:f8:d5:8e:f9:94:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 10 09:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6438e4f5273c31833abd22cbb6dd7fd5663474fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:6f:c6:b8:1f:67:29:eb:44:70:49:03:d6:
4a:ca:15:a5:48:e8:06:7f:e1:88:32:74:3a:4f:7d:
a4:55:26:6e:5b:9b:e4:d3:06:63:ac:69:f4:2b:68:
3b:cf:3f:ba:bd:ab:28:85:af:7f:aa:1c:01:8a:b6:
60:46:2d:fa:72:3c:15:fe:a0:43:85:92:8b:25:ae:
ba:33:48:5d:f0:34:07:2e:8e:6b:13:91:f3:36:3b:
87:8f:05:f0:23:f1:e0:c7:63:68:b5:58:9d:7a:4e:
8c:98:81:e1:3a:55:31:51:4b:49:6f:fe:75:7d:f5:
b2:53:9a:6a:11:6d:50:ca:4a:43:37:2c:3d:08:36:
84:1f:dd:04:b6:c7:a4:0c:fb:b0:46:af:7c:70:78:
0e:01:00:cf:65:54:03:c9:ac:11:a6:d4:be:37:70:
1a:8a:15:39:f7:ec:40:a1:a8:e3:49:82:3a:67:50:
78:ef:f8:6a:74:7c:35:c2:f7:19:17:a3:bf:a9:ed:
99:9d:6a:0a:d9:71:74:46:9b:11:33:61:08:fc:93:
2b:28:32:11:95:ea:11:b2:b2:01:97:2b:4f:9a:cf:
96:b1:7f:92:6c:98:21:0f:67:3d:41:d7:b6:7e:99:
09:3a:6b:47:a3:bf:13:02:88:3c:33:45:57:34:4e:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:E4:F5:27:3C:31:83:3A:BD:22:CB:B6:DD:7F:D5:66:34:74:FB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZDjk9Sc8MYM6vSLLtt1_1WY0dPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.89.0/24
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c3:99:97:6b:c8:20:52:04:05:6b:78:e5:30:0d:4f:58:28:
17:f5:fd:02:a6:b7:57:72:9e:91:f8:56:f6:3f:43:ca:ea:81:
80:1d:9a:67:ed:5f:f9:fa:f5:c4:3c:8b:fd:a0:c3:c3:7e:87:
7a:1f:09:42:81:48:d8:b8:aa:ed:da:1d:5a:9e:ba:04:e4:e4:
94:64:7e:12:fd:1a:df:b4:9e:ec:3c:f5:8b:af:86:40:c4:c5:
cb:ae:32:d6:29:c6:3e:03:a1:06:0c:8b:52:6b:e5:1c:93:ff:
a7:d9:41:bb:b0:89:06:f7:df:00:df:63:29:fb:49:c8:65:fb:
aa:a4:61:48:44:15:af:a1:fe:10:c4:67:c0:c3:58:9a:e8:a4:
62:ec:bc:74:c5:28:0a:90:ca:2f:b3:c6:d1:98:05:8b:64:65:
53:66:41:aa:83:17:b0:7a:31:07:f2:68:99:e3:e9:88:56:45:
e6:6a:62:88:91:b1:6d:66:ac:47:5c:82:f5:ae:2e:d1:a9:1e:
c5:15:3d:10:47:53:ee:e4:56:a8:0c:a4:88:79:8b:29:64:83:
01:e9:07:81:d6:7c:7a:53:24:cb:ff:01:09:84:8d:48:e3:93:
db:ce:4f:9a:c7:10:53:b3:f6:fa:33:38:3e:78:68:53:54:54:
e8:c5:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:39 2026 by rpki-client