Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5089.roa
File: AS5089.roa (raw, json)
Hash identifier: fLPNv/hrZNFcbijIPaCiPjnsDXaGiltJwHc16Rf3MnE=
Subject key identifier: 95:F5:55:73:46:25:F9:79:30:47:C8:92:5D:05:5C:8C:10:B5:81:E0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2DBC4900BD2D5AA506C9C21D401C48E0F403FE13
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5089.roa
Signing time: Tue 08 Sep 2026 00:07:34 +0000
ROA not before: Tue 08 Sep 2026 00:02:34 +0000
ROA not after: Tue 07 Sep 2027 00:07:34 +0000
asID: 5089
IP address blocks: 82.26.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bc:49:00:bd:2d:5a:a5:06:c9:c2:1d:40:1c:48:e0:f4:03:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 00:02:34 2026 GMT
Not After : Sep 7 00:07:34 2027 GMT
Subject: CN=95F555734625F9793047C8925D055C8C10B581E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:7f:6b:2f:33:fe:68:3d:e8:65:a0:d2:fb:
72:2c:a8:01:fc:c9:51:6f:c1:a8:59:c5:0f:0a:8b:
fc:79:4f:0d:85:2c:b2:c9:2d:0a:81:23:80:24:12:
42:f1:78:43:12:3f:a3:d9:1f:8a:41:ac:e0:28:2a:
02:1e:59:79:4b:33:de:42:3e:38:a9:6f:e4:85:d6:
35:c9:8a:33:a0:b0:04:ac:69:87:09:86:d4:b8:81:
ab:e2:f8:5c:cb:00:f7:39:41:05:fd:2f:ea:d1:1b:
3f:c7:fb:64:a3:32:0f:a0:85:97:00:c1:27:7b:af:
fa:fd:bc:72:93:ef:e3:47:d8:8b:87:5e:01:bd:5e:
c3:cb:4e:52:ac:ba:1b:31:99:9a:71:f3:e9:6c:a3:
c1:28:bb:10:2b:ad:c0:08:a5:45:c0:dd:e8:e8:c8:
50:c9:96:75:0b:00:47:ba:0e:c8:36:c3:99:bf:b5:
5b:2d:4a:c3:8c:1b:26:7a:5f:05:4b:c9:71:33:24:
3f:16:d8:38:e7:0b:68:44:4a:ae:09:c2:03:95:20:
a4:14:d2:e6:af:22:c9:57:bb:a3:b9:6f:f3:25:f9:
b7:21:d1:9d:84:42:1c:5d:c0:53:b9:6b:da:71:a7:
10:8b:b1:b2:7a:37:76:5d:b3:06:06:40:55:9d:ae:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:55:73:46:25:F9:79:30:47:C8:92:5D:05:5C:8C:10:B5:81:E0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.0.0/18
Signature Algorithm: sha256WithRSAEncryption
20:db:c9:3a:e5:67:08:31:e1:01:f7:e3:25:39:b0:b9:58:13:
92:11:48:7f:b9:a2:c7:39:68:d3:cb:52:5e:37:91:c1:c5:c3:
bb:01:48:f0:dc:1b:62:7f:d4:c8:1d:ae:89:b0:82:71:f5:40:
8d:b2:0d:b6:0f:77:52:40:98:fb:13:23:d3:1f:b7:2f:9f:70:
ce:71:98:fe:46:c7:6e:10:e2:81:f4:4f:6a:b8:7e:f0:a8:67:
1c:ae:b4:da:ba:bd:0d:a6:20:9b:a2:64:78:fc:6c:ae:5f:cf:
c8:b5:e6:f5:59:a7:e1:36:02:95:d9:bc:61:ce:4c:b8:99:1b:
02:94:3a:8e:37:fa:2f:10:09:8d:8d:be:75:02:9c:87:80:50:
e6:a9:50:27:32:6d:b8:2a:d8:cb:98:79:27:93:07:89:42:84:
7b:66:da:13:1e:aa:9a:65:24:5b:3b:cf:f6:d8:ee:17:02:ab:
b0:d7:4a:c8:af:8f:03:c8:dc:86:af:b1:bb:5d:5f:80:d8:32:
73:84:6a:45:aa:d9:a0:78:bd:4d:4f:66:d6:4d:3b:44:6f:4b:
8c:58:1d:06:7c:47:f1:7d:aa:bc:27:2a:33:b0:65:8d:fc:22:
ca:00:96:7e:c0:d1:a0:80:32:86:83:3e:0e:37:4b:99:76:a7:
60:0a:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:59:18 2026 by rpki-client