Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1vqTzK08JMtJ1sVM_IyGAt5B6TE.roa
File: 1vqTzK08JMtJ1sVM_IyGAt5B6TE.roa (raw, json)
Hash identifier: ZQPGopTrgDWyQSN2mMdSjk/KI1wCE+2uKjbpUEVF6wk=
Subject key identifier: D6:FA:93:CC:AD:3C:24:CB:49:D6:C5:4C:FC:8C:86:02:DE:41:E9:31
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F715BD3BFB6823351797FFEC1A1CB55F6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1vqTzK08JMtJ1sVM_IyGAt5B6TE.roa
Signing time: Fri 17 Jul 2026 18:34:31 +0000
ROA not before: Fri 17 Jul 2026 18:34:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 89.125.113.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.140.0/24 maxlen: 24
89.125.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:5b:d3:bf:b6:82:33:51:79:7f:fe:c1:a1:cb:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 17 18:34:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6fa93ccad3c24cb49d6c54cfc8c8602de41e931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:c6:ce:b5:0e:e9:79:76:a5:59:70:3d:e6:
82:03:70:95:35:41:81:a2:74:66:ad:ed:04:b8:da:
16:21:48:95:e9:89:4a:9b:ff:ce:17:34:db:09:7e:
76:c8:87:20:29:8c:d1:26:ce:e2:37:80:f1:8f:b6:
17:19:a5:ae:4f:9c:a3:bd:8d:b7:66:c7:7c:65:02:
60:1b:b7:7a:ee:dd:6e:5e:39:ea:2e:be:0e:66:ae:
11:bb:17:77:74:a4:be:c0:7f:76:d1:1c:88:e3:ba:
de:e1:cf:86:25:9c:ad:80:d2:53:67:1e:ab:31:0e:
c9:ba:10:e6:b1:f4:af:a9:7e:a9:1d:6f:70:fa:28:
23:3f:8b:c4:4c:ab:92:30:78:34:c5:25:8f:c6:b5:
2b:ed:38:a9:df:ba:18:0b:32:f0:a6:0e:62:c0:54:
01:2b:ed:43:6e:55:67:1d:3d:88:27:14:13:93:76:
a1:b8:73:e2:d8:73:c0:a5:ec:af:90:1d:41:a8:c5:
74:c6:70:41:04:bd:f6:69:d6:83:cc:b6:b4:27:fc:
51:53:41:64:c5:e3:c0:a2:47:9e:d0:a4:12:b6:26:
4e:84:85:69:88:f8:f6:f2:61:ad:19:fd:2e:79:a3:
8f:c4:5d:ab:53:dc:3a:45:60:d8:b4:e5:0d:16:46:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:93:CC:AD:3C:24:CB:49:D6:C5:4C:FC:8C:86:02:DE:41:E9:31
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1vqTzK08JMtJ1sVM_IyGAt5B6TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.113.0/24
89.125.126.0/24
89.125.140.0/24
89.125.169.0/24
Signature Algorithm: sha256WithRSAEncryption
74:25:76:ee:18:31:74:62:a3:b0:29:1f:62:3e:a8:77:b4:9a:
21:7c:ce:bb:68:f8:b5:c8:e1:01:f2:31:e9:fd:08:db:0f:74:
75:95:b2:16:a4:52:d1:d0:9e:16:d5:a8:1d:dc:d5:51:42:b3:
27:5e:5e:0b:60:ea:b3:5d:06:68:db:6c:f9:67:c3:69:9d:41:
9d:43:6a:86:7f:2b:5b:39:0b:16:bb:f7:ff:27:17:bf:e1:7e:
a4:2d:c0:4e:ae:b6:e8:32:19:ab:c1:de:72:87:14:06:90:8d:
43:fe:2d:e3:88:1b:14:76:35:c5:c0:6c:cd:dc:45:10:20:a7:
39:23:4e:41:f5:fc:e3:fc:3a:18:bb:71:bb:4a:95:ab:24:5b:
8c:83:79:48:22:b0:1a:44:b5:69:8a:06:39:3c:c7:9d:d4:d2:
38:5b:8d:de:63:af:78:e5:b9:c3:15:0b:87:40:1b:d6:a6:e2:
b1:a6:25:f8:24:a0:61:35:c2:05:68:d1:c6:e3:ee:17:dd:b7:
c5:25:6a:de:67:7f:c6:c9:26:05:24:4e:38:c8:53:c3:7b:2c:
d0:56:9c:40:66:1e:e3:98:f7:ef:5d:a6:ce:49:53:e3:4e:dd:
50:e2:99:f5:b1:3d:4d:b5:09:41:df:0f:3f:97:35:4f:62:10:
6e:0c:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:22 2026 by rpki-client