Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G6kMTRM_qnP7FsPB0WfdYsEY8IQ.roa
File: G6kMTRM_qnP7FsPB0WfdYsEY8IQ.roa (raw, json)
Hash identifier: Ix4rUkjsZXoHH3jdbE4xar0FMAcjCem2yccWxpLUZ9Q=
Subject key identifier: 1B:A9:0C:4D:13:3F:AA:73:FB:16:C3:C1:D1:67:DD:62:C1:18:F0:84
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F7EBD7A783CAED74266A0FBDAB0E01BD0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G6kMTRM_qnP7FsPB0WfdYsEY8IQ.roa
Signing time: Mon 20 Jul 2026 08:56:14 +0000
ROA not before: Mon 20 Jul 2026 08:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 89.125.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:bd:7a:78:3c:ae:d7:42:66:a0:fb:da:b0:e0:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 20 08:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ba90c4d133faa73fb16c3c1d167dd62c118f084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:b1:86:13:bb:54:82:7e:02:b3:ce:31:d2:
15:72:37:aa:f9:34:e0:ec:84:13:7d:0b:bd:b7:25:
b2:79:19:3a:4c:b5:18:84:5e:ae:9a:01:b9:20:77:
a9:79:4c:27:99:3a:e0:d1:eb:c6:96:87:73:20:36:
b2:9b:9c:ad:f6:ae:39:e9:53:55:f4:4f:97:f2:0c:
2c:ca:82:21:fb:16:c9:9c:d4:b5:5a:ec:f6:6e:95:
b6:7d:1e:83:0b:3e:9a:60:a0:9d:c1:bf:cb:72:a6:
3f:25:87:58:89:c1:24:37:2a:c2:63:45:b4:b0:c4:
01:e8:34:dd:d3:d8:05:a5:af:da:2a:6b:3f:eb:d3:
d3:d6:ae:d6:92:79:18:2d:bb:0d:20:06:af:3c:f7:
72:e8:6c:87:1e:07:63:41:53:fa:89:8e:48:6a:ad:
84:00:4e:4e:33:39:29:1c:63:59:ec:56:79:0a:44:
72:73:3f:dc:e9:0e:33:3e:9b:c6:c7:e9:8e:6f:d0:
f9:ae:b2:ca:35:b4:df:bf:28:8e:bf:e9:b9:96:f0:
95:7c:b5:a4:ac:20:53:01:1f:ec:95:79:6f:4a:cc:
ec:93:6c:3e:a9:c2:93:1f:fa:bd:75:58:61:69:41:
0e:75:96:4e:ae:b5:11:37:14:4e:43:ef:73:8d:18:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:0C:4D:13:3F:AA:73:FB:16:C3:C1:D1:67:DD:62:C1:18:F0:84
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G6kMTRM_qnP7FsPB0WfdYsEY8IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.221.0/24
Signature Algorithm: sha256WithRSAEncryption
34:14:c0:56:fb:36:20:14:c3:0f:79:b0:45:0e:38:8b:12:af:
f3:b2:3b:71:b4:83:ee:f3:f4:71:17:04:58:65:40:30:fd:79:
dc:37:f7:e0:9c:ce:b9:fc:f3:4a:42:80:64:50:c9:8e:d2:f2:
34:d2:40:6f:50:ca:a6:23:10:7c:c1:3a:60:72:e0:a7:a5:86:
00:d9:ae:25:0c:86:45:c3:46:b0:74:81:c9:01:64:fe:54:77:
0d:92:a1:d0:d9:36:7e:e2:0e:3e:5c:30:a7:ff:e0:b0:30:75:
64:e8:41:31:6b:c8:fc:a6:8a:c4:c3:e1:c8:0c:e3:85:db:72:
e5:58:2c:8b:ef:cf:4c:2f:8a:96:93:00:f0:fb:a6:d2:27:94:
63:22:80:73:7c:55:47:d5:86:73:89:27:c1:cf:9c:cd:93:4f:
16:25:ee:90:56:af:10:d8:e5:c2:b9:0b:fb:0c:50:5b:56:d5:
7b:37:0f:2b:71:df:a0:47:3c:5a:29:0a:86:75:64:c9:28:19:
bd:8f:be:9b:02:17:1e:33:21:bf:b2:65:d8:1a:a3:7e:ac:af:
5d:41:7d:dc:af:58:79:bb:bc:2f:cb:f6:56:d5:2e:fa:67:ae:
7f:6e:6b:cf:31:50:f4:a6:d5:58:00:b9:5e:29:db:a0:4d:00:
32:8e:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client