Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/wb4RxzbkvODkvr8c1lotFZbk07I.roa
File: wb4RxzbkvODkvr8c1lotFZbk07I.roa (raw, json)
Hash identifier: v19ol9warSyYW++fuy8gfHR8gO87vsuzAdQvtcHeStc=
Subject key identifier: C1:BE:11:C7:36:E4:BC:E0:E4:BE:BF:1C:D6:5A:2D:15:96:E4:D3:B2
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019C911A516CFDC321DA3613A6C864D24CCE
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/wb4RxzbkvODkvr8c1lotFZbk07I.roa
Signing time: Tue 24 Feb 2026 19:22:26 +0000
ROA not before: Tue 24 Feb 2026 19:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:1a:51:6c:fd:c3:21:da:36:13:a6:c8:64:d2:4c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Feb 24 19:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1be11c736e4bce0e4bebf1cd65a2d1596e4d3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:ed:e5:0f:a8:61:54:9b:72:18:d0:b7:93:
7e:1e:8b:b4:ad:69:de:7a:96:30:98:af:43:fc:11:
0a:71:7a:d9:1a:92:4e:6f:5e:25:06:de:5b:40:99:
6f:af:8b:1f:e6:e5:bd:21:d2:08:91:f4:3a:95:98:
c7:d3:b0:08:f7:2e:b8:03:8f:70:40:54:54:d0:77:
a7:9e:4f:b1:36:b5:d7:3e:8f:71:65:27:a7:8f:6e:
89:b6:69:51:93:9d:b4:05:d2:4d:f2:95:76:8f:b6:
1d:fd:ba:77:b9:d9:e4:15:1c:c3:96:bb:93:da:ac:
3c:b0:9c:9b:c1:74:20:e7:70:0a:b4:1b:e2:ad:34:
e4:ec:bf:3a:cf:2d:d9:41:27:71:ad:b3:86:19:cf:
8b:0f:cc:de:cb:f4:e7:9b:7b:e3:7a:cf:bc:3e:bb:
24:4f:72:9c:82:ee:84:dd:16:d1:f4:9c:db:05:b6:
e8:f9:00:b5:11:27:9c:48:80:e7:cc:63:0c:07:80:
ec:40:1c:84:80:a0:0e:96:44:77:fa:a7:3f:35:97:
6b:23:30:95:6e:9e:72:d1:69:9f:bf:d1:1c:c7:29:
8e:f9:b3:9b:34:0e:83:0a:85:04:f7:37:00:85:00:
b9:2a:a4:cf:01:aa:13:d3:8f:9a:4d:f3:c8:71:91:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:11:C7:36:E4:BC:E0:E4:BE:BF:1C:D6:5A:2D:15:96:E4:D3:B2
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/wb4RxzbkvODkvr8c1lotFZbk07I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
70:02:b3:5b:93:fc:51:0e:91:e8:89:a8:bb:2a:24:9b:d4:64:
ae:9a:55:7f:f4:7d:2d:fc:89:08:56:2c:1e:b8:30:e3:8c:c2:
f3:01:71:e1:aa:07:56:35:cf:74:77:ee:05:58:3d:e6:c3:0a:
05:e3:d6:6e:08:83:85:65:b7:fd:ed:84:a6:7a:69:33:8d:94:
85:b1:ea:f1:b4:b5:41:8a:8e:cd:89:43:54:25:9c:dd:fa:73:
b6:83:4e:58:7b:00:cb:fb:42:4d:05:a1:07:0b:6c:e6:f4:0f:
15:03:eb:6d:ed:b0:52:5e:5b:ce:f7:94:8c:6d:71:7b:7b:83:
5d:5c:2f:f4:59:7e:ad:34:3e:c1:61:c8:3e:64:87:3d:46:0f:
67:70:79:5d:bf:69:3c:dc:25:98:a8:2d:31:3d:6b:59:12:ca:
0a:80:50:4a:ce:37:b7:32:bf:45:ff:83:cd:94:27:54:12:ea:
87:d5:df:a0:8a:b0:08:75:71:36:7d:43:39:ee:31:17:4e:a2:
c6:5e:07:9b:27:07:e3:69:5b:f3:0e:55:d6:7a:c9:47:e9:02:
81:3c:9d:67:45:ac:b9:0f:8f:ee:73:16:43:4a:9b:74:14:a0:
0c:52:47:dc:b3:e9:62:c1:16:c1:d4:5d:74:58:15:19:63:63:
86:29:3a:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyRGlFs/cMh2jYTpshk0kzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwMjI0MTkyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJlMTFjNzM2ZTRiY2UwZTRiZWJmMWNkNjVhMmQxNTk2ZTRkM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnjt5Q+oYVSbchjQt5N+Hou0rWne
epYwmK9D/BEKcXrZGpJOb14lBt5bQJlvr4sf5uW9IdIIkfQ6lZjH07AI9y64A49w
QFRU0Hennk+xNrXXPo9xZSenj26JtmlRk520BdJN8pV2j7Yd/bp3udnkFRzDlruT
2qw8sJybwXQg53AKtBvirTTk7L86zy3ZQSdxrbOGGc+LD8zey/Tnm3vjes+8Prsk
T3Kcgu6E3RbR9JzbBbbo+QC1ESecSIDnzGMMB4DsQByEgKAOlkR3+qc/NZdrIzCV
bp5y0Wmfv9EcxymO+bObNA6DCoUE9zcAhQC5KqTPAaoT04+aTfPIcZFykQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMG+Ecc25Lzg5L6/HNZaLRWW5NOyMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvd2I0Unh6Ymt2T0RrdnI4YzFsb3RGWmJrMDdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX7iMA0G
CSqGSIb3DQEBCwUAA4IBAQBwArNbk/xRDpHoiai7KiSb1GSumlV/9H0t/IkIViwe
uDDjjMLzAXHhqgdWNc90d+4FWD3mwwoF49ZuCIOFZbf97YSmemkzjZSFserxtLVB
io7NiUNUJZzd+nO2g05YewDL+0JNBaEHC2zm9A8VA+tt7bBSXlvO95SMbXF7e4Nd
XC/0WX6tND7BYcg+ZIc9Rg9ncHldv2k83CWYqC0xPWtZEsoKgFBKzje3Mr9F/4PN
lCdUEuqH1d+girAIdXE2fUM57jEXTqLGXgebJwfjaVvzDlXWeslH6QKBPJ1nRay5
D4/ucxZDSpt0FKAMUkfcs+liwRbB1F10WBUZY2OGKTr3
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:25 2026 by rpki-client