Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_UnvfhbHauZ8ZxnhXJYZsQmFtkY.roa
File: _UnvfhbHauZ8ZxnhXJYZsQmFtkY.roa (raw, json)
Hash identifier: 6pau/B0DLOM2kcN2F8t92+jm4bD8aEypQzJzukcswrY=
Subject key identifier: FD:49:EF:7E:16:C7:6A:E6:7C:67:19:E1:5C:96:19:B1:09:85:B6:46
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1A20441E332498F87ABF82985AED91422
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_UnvfhbHauZ8ZxnhXJYZsQmFtkY.roa
Signing time: Tue 03 Nov 2026 15:25:50 +0000
ROA not before: Tue 03 Nov 2026 15:25:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:04:41:e3:32:49:8f:87:ab:f8:29:85:ae:d9:14:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 3 15:25:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd49ef7e16c76ae67c6719e15c9619b10985b646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f8:8c:2d:ec:84:5c:f8:14:03:2e:85:31:49:
51:f2:81:74:9f:9c:e2:bf:a5:31:1e:4b:f6:34:13:
de:a5:f4:9f:8e:fa:fc:da:41:49:e3:9e:7b:05:40:
82:67:33:87:4a:e0:53:4b:6e:df:58:20:f8:d8:5e:
9a:43:e6:ab:06:b3:82:0f:1b:6a:ff:27:df:e3:ef:
25:4f:46:47:e0:f8:ab:b0:ec:57:03:38:92:58:3c:
a9:d2:95:c1:c0:c8:23:b5:9e:b7:1c:a5:bd:9f:58:
e7:dd:c6:04:f5:74:32:d9:87:35:0e:f1:80:1e:dc:
5f:13:34:82:36:02:60:e7:7f:73:d1:b6:2f:c5:a4:
18:98:c1:38:72:ea:3c:56:d1:09:15:f1:04:6e:54:
f7:e2:f6:31:e0:6a:51:01:f5:aa:63:8c:41:32:0e:
7c:84:86:d5:e5:bf:a8:e5:6b:f0:ea:d0:d9:dc:41:
24:0a:fd:26:7b:b1:21:0a:47:f3:02:b1:cf:b4:44:
28:b1:b7:6c:ce:d6:10:ac:a1:dc:39:43:03:9c:ec:
d3:8f:8f:3d:2a:95:b4:f7:aa:ac:0c:81:65:7a:9e:
1f:2b:92:46:a3:81:8a:2b:47:44:ba:75:25:18:29:
bb:4a:24:3f:39:1f:2d:37:3f:5a:f5:68:e1:88:6c:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:EF:7E:16:C7:6A:E6:7C:67:19:E1:5C:96:19:B1:09:85:B6:46
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_UnvfhbHauZ8ZxnhXJYZsQmFtkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:97:e3:3f:9d:da:24:1d:37:a1:c1:11:aa:e3:2a:28:3d:90:
96:de:47:6b:2b:cd:4b:37:07:0d:5e:69:eb:29:29:74:cd:7c:
d9:08:a6:0a:32:29:8f:16:04:93:ff:ff:98:29:b6:8f:bb:b6:
2b:82:1a:70:de:ad:4f:d6:91:e9:dc:27:35:3d:6f:fb:b9:71:
57:2f:61:e6:24:58:68:79:81:b3:ab:0e:6e:37:63:e4:07:ba:
f9:5b:c4:2e:17:7a:3a:99:76:9c:bc:ab:e5:cc:e2:93:0a:d4:
20:1d:9c:94:00:16:5b:14:29:48:d2:3d:73:21:ea:ec:6e:a0:
a9:d3:78:7f:0f:a3:bc:55:74:03:5f:24:30:c1:bb:62:b4:b9:
6b:3a:f2:1a:de:d1:21:b5:10:25:80:03:59:de:05:09:c2:96:
21:dc:be:b2:20:f0:fc:71:8a:89:b3:27:67:07:76:c1:a4:4c:
d7:75:30:7b:db:15:c1:ea:ca:ce:78:6c:4d:c4:f7:72:7c:bc:
f5:83:96:31:21:23:f2:5d:ab:93:0c:75:d8:ba:bf:3d:c4:b5:
f4:62:98:59:ea:4d:b6:c7:d5:a5:aa:7f:6a:ad:c3:41:09:c8:
41:7c:21:7e:e3:bd:0c:55:34:a8:f6:66:55:e9:3c:3c:b0:c7:
f3:c4:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:47:43 2026 by rpki-client