Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_VxGh-Oq3DaaHn_ofewCN0NDjtI.roa
File: _VxGh-Oq3DaaHn_ofewCN0NDjtI.roa (raw, json)
Hash identifier: DmdxxE0PCq8kE0nWWcr+VjK7zZ+RIwOiInwzbGobRHM=
Subject key identifier: FD:5C:46:87:E3:AA:DC:36:9A:1E:7F:E8:7D:EC:02:37:43:43:8E:D2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A167002D77D31B4C33682CC968F1D34351
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_VxGh-Oq3DaaHn_ofewCN0NDjtI.roa
Signing time: Fri 23 Oct 2026 04:23:47 +0000
ROA not before: Fri 23 Oct 2026 04:23:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 89.40.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:00:2d:77:d3:1b:4c:33:68:2c:c9:68:f1:d3:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 23 04:23:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd5c4687e3aadc369a1e7fe87dec023743438ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:e0:b0:f5:74:c7:de:f4:30:33:63:db:c7:
93:4b:5f:ca:d3:14:d6:7f:0f:69:e5:ed:e9:92:28:
10:b3:4d:39:7c:d0:b3:02:69:01:1e:8f:b6:c3:99:
83:3d:5b:58:69:87:13:40:a4:cf:c2:22:76:00:94:
28:77:07:d3:76:73:a1:69:3b:47:f3:90:bc:49:d4:
b4:92:98:20:36:d5:ae:a3:08:20:c0:f4:0d:f7:2a:
f6:1e:cb:47:b7:f8:dd:1a:89:d7:f4:ac:8c:c2:ca:
72:cf:f7:e3:83:6e:5f:f8:2d:f9:51:21:24:fa:f3:
f9:72:e2:ea:f5:b7:0f:e8:cf:5a:76:ce:9c:4b:a2:
02:6f:26:0d:38:32:c8:2c:f4:de:2c:4f:4d:c7:5c:
fa:ba:72:d5:f9:39:3a:ec:3e:01:52:b9:0e:36:d4:
52:55:8b:8d:4a:89:04:87:19:88:7d:fa:87:e1:f3:
6a:4e:cb:66:e2:22:4d:7d:69:ed:39:73:8b:8f:fd:
f7:8d:97:7b:8f:c8:d6:35:ea:76:db:ec:09:2a:f4:
b4:ac:88:8c:e9:0b:cf:45:48:36:39:21:86:12:f9:
48:8e:c4:21:1a:39:9a:95:c1:b1:88:1a:6b:6c:f4:
c5:a9:23:d7:cf:38:49:88:bc:8a:4d:5d:4d:85:84:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:46:87:E3:AA:DC:36:9A:1E:7F:E8:7D:EC:02:37:43:43:8E:D2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_VxGh-Oq3DaaHn_ofewCN0NDjtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:50:90:af:a7:ce:39:ed:86:b9:4e:66:76:9a:df:61:5a:1c:
b6:3a:49:41:3d:35:e9:10:e7:08:ef:be:c9:53:3c:87:dc:ce:
b5:cb:e0:12:4a:fe:ad:ec:72:7e:b6:77:8d:0e:ff:d4:58:24:
c8:49:57:a2:e4:b0:1c:4b:03:38:78:7a:ff:68:35:65:bb:2a:
b8:ed:4f:8f:de:84:1e:11:93:3c:e2:3c:dd:9e:74:f8:9c:a9:
a2:d0:58:4d:4f:f1:a9:ec:c8:fe:a0:03:11:92:ed:1f:d5:27:
57:cd:c2:86:bd:33:f8:da:28:27:de:e9:f8:c6:3f:49:95:f7:
46:f0:b3:45:c8:ef:73:ae:0a:50:c4:e8:93:56:34:3a:e0:2c:
c2:5f:cd:4e:e9:af:60:51:eb:09:f7:49:49:f3:a6:58:1b:e9:
68:9e:3e:5c:80:6b:75:9f:e4:64:3f:49:72:26:af:ac:29:dd:
8e:65:54:4f:e2:e4:76:d3:7b:d9:30:4b:6b:26:ea:f1:10:4e:
7a:62:b0:bf:49:ee:de:0f:7b:db:8b:87:24:fc:76:5f:e8:1e:
c2:6d:dd:9b:b9:0f:92:04:ed:17:4a:38:69:2f:1c:7d:42:99:
3e:f0:d4:e2:f2:77:58:78:50:ba:cf:ba:45:5e:07:db:80:52:
1c:2a:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:12:55 2026 by rpki-client