Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Wbia7UKKiNmuKSFzqBedxUZBnI.roa
File: 5Wbia7UKKiNmuKSFzqBedxUZBnI.roa (raw, json)
Hash identifier: zI8aEG2pZLtCbcd8fJC44EZ47nPNgRdUsuohsQT6JFU=
Subject key identifier: E5:66:E2:6B:B5:0A:2A:23:66:B8:A4:85:CE:A0:5E:77:15:19:06:72
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EF30E3903B6E79282A906B31BA07BFBE9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Wbia7UKKiNmuKSFzqBedxUZBnI.roa
Signing time: Tue 23 Jun 2026 05:57:35 +0000
ROA not before: Tue 23 Jun 2026 05:57:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 89.125.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:0e:39:03:b6:e7:92:82:a9:06:b3:1b:a0:7b:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 23 05:57:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e566e26bb50a2a2366b8a485cea05e7715190672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:eb:52:9f:66:7e:e2:6f:2e:39:12:9a:9a:
93:24:e0:ec:1f:5f:6c:ae:ea:0b:14:bb:bf:10:31:
cb:b8:92:84:32:5e:25:d9:1d:7e:1e:b4:10:57:35:
c9:d5:ee:bd:93:ed:62:70:32:22:32:eb:b1:c4:86:
e4:89:c0:b1:10:b3:53:27:40:d9:ed:2b:72:3e:b2:
ef:68:cd:b7:a3:86:19:cb:e9:10:26:df:a8:bb:e2:
d2:6f:d4:51:26:1a:30:eb:44:91:01:f6:9b:59:9c:
91:cf:df:eb:ac:1e:72:2e:67:9e:a0:84:c9:e8:27:
28:ea:8a:82:1f:dd:cd:70:51:72:35:1f:78:ca:0c:
06:f3:6d:43:86:c6:cc:18:b6:04:b4:78:57:98:c4:
29:c6:48:e0:73:c4:af:62:11:22:83:4a:23:52:6c:
d5:55:b5:03:fe:11:42:c0:7c:e2:24:19:6e:d3:df:
85:fa:89:83:4e:9f:bd:ec:53:e1:8a:93:af:b2:a2:
51:af:c3:10:75:9a:21:3a:a5:fc:d8:be:89:da:50:
a0:f9:f2:97:5f:c6:24:f9:35:d3:eb:bf:e1:31:ec:
15:86:25:f9:36:c4:fb:46:6e:86:f6:de:ae:cf:43:
18:30:47:ab:9d:cd:f6:35:3a:a1:d0:bf:d9:29:08:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:66:E2:6B:B5:0A:2A:23:66:B8:A4:85:CE:A0:5E:77:15:19:06:72
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Wbia7UKKiNmuKSFzqBedxUZBnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bd:9f:28:5d:80:e8:20:e2:ff:c3:8c:f5:ce:f0:47:38:d3:
08:aa:76:ae:41:81:10:ac:e3:8a:25:b8:64:94:78:5c:c0:bf:
63:9c:82:c1:a6:8b:be:c7:d8:76:2d:38:12:e3:cc:cf:70:7c:
68:b1:57:06:96:dd:54:74:03:dd:f9:6c:8b:6f:38:a4:c7:2d:
15:3b:67:40:69:9c:1c:b2:f2:22:9b:82:3c:28:7e:d0:54:68:
2d:d3:37:72:90:2f:e0:df:6a:8a:a8:37:8b:6b:39:8f:67:09:
f7:fb:e2:c8:60:b9:e8:7d:07:69:bd:f5:5f:df:e5:d6:0b:d3:
82:bb:d2:54:e6:89:08:bc:29:d2:df:e4:b3:82:92:28:9d:60:
1e:4c:ef:0e:01:65:78:f6:4a:1f:f1:53:c7:14:32:9d:26:49:
f8:c9:47:1a:56:17:88:5e:be:a2:63:77:2a:f9:94:47:e1:e8:
b4:e8:a8:f8:33:fd:f1:11:3a:98:a1:74:b9:23:77:11:fc:51:
57:f4:dd:76:b3:76:80:c3:96:b6:b6:52:7c:86:92:61:e2:db:
66:b6:bc:0a:b5:17:fc:d3:bf:e2:e9:27:34:02:f7:fb:5e:eb:
f8:6b:51:db:ce:a0:e7:d0:38:f1:41:8c:c7:0f:b7:5a:76:43:
ff:56:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:35 2026 by rpki-client