Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/a3bM8aFjJLr9wxQtfVHaGIBCcAs.roa
File: a3bM8aFjJLr9wxQtfVHaGIBCcAs.roa (raw, json)
Hash identifier: JmiKuqKsXCqSCRr6k+RJ8SQnQVNL1nlc1eGR0C13JGs=
Subject key identifier: 6B:76:CC:F1:A1:63:24:BA:FD:C3:14:2D:7D:51:DA:18:80:42:70:0B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F4C7688B5EF03A5402255673331F8FCBE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/a3bM8aFjJLr9wxQtfVHaGIBCcAs.roa
Signing time: Fri 10 Jul 2026 14:37:44 +0000
ROA not before: Fri 10 Jul 2026 14:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59692
IP address blocks: 89.125.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:76:88:b5:ef:03:a5:40:22:55:67:33:31:f8:fc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 10 14:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b76ccf1a16324bafdc3142d7d51da188042700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:61:dc:74:fd:bb:31:7f:46:41:ba:80:1f:
fd:8a:cf:8b:3a:70:75:82:cc:32:7c:25:a5:83:a1:
84:4e:27:36:f7:f0:33:f7:a0:73:25:6c:dd:de:fe:
80:3a:e8:fd:1b:48:b5:f4:c8:01:04:d3:ce:22:6b:
f1:d2:eb:38:2e:98:60:e4:5f:a6:31:6c:a1:4a:a6:
c9:6e:f3:0a:95:bc:6a:65:fd:30:c1:e8:ea:72:c1:
2b:f8:c5:8f:dc:d9:81:50:a0:48:2b:6c:cc:bf:b7:
5f:b7:65:86:a5:a0:01:99:1d:6b:4f:08:63:59:d2:
ba:eb:6f:44:b8:21:37:9a:1f:41:b4:ab:db:42:81:
c7:2e:3d:22:95:cb:68:7d:29:ac:6a:d2:2c:f1:c3:
01:3e:10:fe:16:8e:4a:d8:b2:6b:a9:75:f4:54:32:
96:59:7b:9d:1e:28:19:1b:39:b0:b1:89:0d:f2:94:
60:0b:2c:d8:3f:16:49:bd:23:6e:08:48:ad:65:b4:
c2:7e:0c:f2:93:7e:9c:8c:21:ab:11:a3:dd:cd:74:
4a:33:89:a3:ac:6c:49:12:5e:1b:5d:16:ea:a3:04:
06:cc:ad:d2:5c:89:3a:ba:cc:3a:50:3b:b1:e5:53:
43:1d:ee:76:fc:e9:69:a7:78:fc:00:19:bf:d2:52:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:CC:F1:A1:63:24:BA:FD:C3:14:2D:7D:51:DA:18:80:42:70:0B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/a3bM8aFjJLr9wxQtfVHaGIBCcAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ab:ff:f3:08:30:b0:25:66:84:72:00:1b:94:6c:40:13:14:
58:fe:b4:28:35:29:72:28:49:13:e8:57:0a:c1:20:cc:93:97:
b1:ce:75:8f:e4:1f:20:a8:14:ea:2d:13:c1:59:86:54:23:10:
b2:34:6a:1c:b2:0f:bf:6a:19:76:75:7f:e6:5f:a4:de:3e:03:
08:a0:7e:44:1b:4c:c1:d2:9f:5f:ef:ff:63:0f:4e:82:74:9a:
a8:84:6b:46:a6:b0:cd:77:f0:2c:29:e8:8e:6a:39:e5:fa:2f:
46:a0:09:1f:23:08:b0:5b:45:0b:6d:2f:d7:1f:10:cc:3c:9d:
d0:f9:30:24:c7:d4:ae:6d:e1:69:47:01:4c:89:18:83:1c:23:
5a:64:80:e4:21:eb:80:29:4b:f4:d7:38:ca:6b:80:33:20:9d:
91:56:a3:6e:e3:09:65:fe:62:15:cc:0e:d2:b4:5a:6f:eb:3b:
c2:88:db:17:87:1d:f7:dd:99:b6:bd:5c:09:30:d3:6f:f5:b5:
5f:ba:46:3a:4c:6f:44:1a:fd:28:ec:e2:fc:fb:e5:1b:73:1b:
ed:76:6f:e7:2e:ba:7d:7e:97:63:30:80:72:c7:59:a9:05:c1:
ff:40:38:ee:02:f9:1d:4e:e0:74:fe:5a:a2:22:53:31:fd:ff:
d7:fc:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:25 2026 by rpki-client