Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa
File: 0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa (raw, json)
Hash identifier: Z+X5uR9flAhy3leFkC+AcvzMmGH3LvnP56qA4XdH7UM=
Subject key identifier: D1:F2:38:C2:67:46:39:0D:64:2E:EB:EF:D6:A1:E2:2B:40:BE:F8:BF
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019C91196749E8163CF7E28C24C3366DEB1E
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa
Signing time: Tue 24 Feb 2026 19:21:26 +0000
ROA not before: Tue 24 Feb 2026 19:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199058
IP address blocks: 89.126.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:19:67:49:e8:16:3c:f7:e2:8c:24:c3:36:6d:eb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Feb 24 19:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1f238c26746390d642eebefd6a1e22b40bef8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:87:1c:51:80:66:38:3c:6e:99:7b:78:44:
60:22:ba:20:7f:e8:57:7a:45:1a:c1:bd:f7:0e:62:
21:8e:68:96:d0:1f:01:d7:4b:78:f0:27:87:01:84:
78:31:9a:06:bb:19:00:8c:38:69:bd:28:c9:aa:5e:
28:f9:18:4b:74:62:fa:ce:5d:35:d2:53:46:33:80:
7e:40:70:3e:f3:f8:3e:d6:a8:c9:0d:85:33:66:7f:
6b:10:c4:30:ec:56:df:f0:f7:8f:ac:6a:9c:ca:29:
8f:8a:d6:6a:67:9d:1e:3d:2f:79:c3:fe:90:a9:c6:
d0:f5:98:a4:e9:ed:9b:54:b7:5b:65:1f:05:be:17:
43:f5:1b:97:60:95:1a:7a:74:91:c6:81:6e:2b:8f:
70:27:26:58:32:88:bb:fb:23:c5:f7:53:ba:97:53:
68:83:ff:40:e8:70:d5:3e:cb:ac:58:7e:3d:51:69:
8d:ea:59:ba:56:1c:4a:1e:ad:e7:0a:2d:5e:3a:42:
e3:17:b5:8c:01:86:49:9c:b1:63:9b:21:1b:e7:ca:
83:e5:1f:6e:be:92:36:96:24:29:e9:90:9c:09:57:
51:09:21:a6:9c:23:cf:e3:5c:ab:ff:8d:9c:2d:41:
ab:59:e6:2c:d2:f3:f5:b6:6f:0c:ed:f5:0b:62:51:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:38:C2:67:46:39:0D:64:2E:EB:EF:D6:A1:E2:2B:40:BE:F8:BF
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.229.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bb:21:e8:ec:d2:23:96:63:53:41:7a:28:43:a0:9d:8e:79:
92:14:31:47:89:74:a2:7a:f4:ca:ed:b2:48:7d:e7:1e:e1:67:
a2:52:47:41:4c:93:56:ed:77:fe:49:00:04:dd:5f:f5:5e:d2:
8b:7a:54:4d:7a:1d:39:14:48:38:e7:b7:48:72:33:57:79:95:
4d:1c:65:73:15:cb:38:28:8d:34:9d:27:8a:2e:f9:d6:7a:ca:
8f:77:1d:04:a9:46:60:8e:2e:fc:d3:75:08:3c:20:7a:09:70:
fd:77:33:32:79:5d:67:f0:48:9f:20:14:38:69:77:65:48:ee:
dc:a1:b5:a2:e5:d1:f3:c5:79:2a:75:dd:18:9a:f1:ee:e0:b6:
6b:46:f9:a0:fc:de:3c:46:3b:dd:d3:b1:1e:ae:74:f2:bc:09:
be:2c:5c:6f:27:9f:ae:05:27:50:9c:8c:21:fe:05:ef:de:54:
6d:da:a5:20:46:1b:fd:eb:4f:68:8c:9e:6b:9f:4f:de:1a:b9:
a8:ad:ad:0c:07:b8:48:ba:63:5c:7e:ed:e6:69:a8:0e:95:75:
dd:73:b6:c7:b7:65:a0:86:51:24:0c:41:6f:3f:32:20:34:03:
c9:c2:1f:7c:02:2c:23:6e:e8:5e:f7:5d:f7:56:58:b7:de:99:
85:f7:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:53 2026 by rpki-client