Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fRVnl3-4mrcHb4aSXG5mR7Qc4Cc.roa
File: fRVnl3-4mrcHb4aSXG5mR7Qc4Cc.roa (raw, json)
Hash identifier: sH60ayxejmRJwi7eO+IEwVCR4nGGWaBEvfxW0J11iP4=
Subject key identifier: 7D:15:67:97:7F:B8:9A:B7:07:6F:86:92:5C:6E:66:47:B4:1C:E0:27
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F64FF0BEE2F76823C432D7E566C1F04B3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fRVnl3-4mrcHb4aSXG5mR7Qc4Cc.roa
Signing time: Wed 15 Jul 2026 08:57:44 +0000
ROA not before: Wed 15 Jul 2026 08:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 89.35.73.0/24 maxlen: 24
89.125.226.0/23 maxlen: 23
140.225.208.0/24 maxlen: 24
140.225.209.0/24 maxlen: 24
153.76.194.0/24 maxlen: 24
153.76.195.0/24 maxlen: 24
153.76.204.0/24 maxlen: 24
153.76.205.0/24 maxlen: 24
162.35.229.0/24 maxlen: 24
162.35.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:ff:0b:ee:2f:76:82:3c:43:2d:7e:56:6c:1f:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 15 08:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d1567977fb89ab7076f86925c6e6647b41ce027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:30:4b:9e:e4:73:79:9b:09:97:5c:b3:d6:
03:7d:5f:c5:8d:e0:c1:a4:48:25:de:50:db:61:64:
2e:9d:2d:b5:bd:4f:7b:cd:9a:6f:82:aa:75:84:fe:
ec:8a:1e:9e:3b:a6:d7:dc:b7:fd:81:3c:7c:29:27:
65:ce:04:a4:ec:26:72:10:6a:c2:3a:bd:91:7e:ba:
04:5b:c3:c3:44:f8:17:5a:6f:d0:e4:1d:aa:ae:3f:
a1:43:b4:ff:37:ce:a8:66:65:de:14:42:a1:f4:29:
ae:df:ec:f6:3b:da:e6:78:51:69:ac:b7:48:ff:65:
bb:0e:e1:65:d0:f0:a8:c5:6d:f1:9c:48:bf:e2:db:
00:d5:e4:59:b1:40:53:5a:8d:0a:a0:69:38:0c:c6:
dd:bd:6b:70:67:2a:72:7e:b4:08:b5:c1:cc:b1:e2:
ac:89:74:2a:d8:13:cd:15:5a:fd:22:b8:fd:de:bd:
75:1c:bc:c3:9d:9f:96:e8:60:d6:d2:d5:85:16:9b:
3b:11:c1:76:9e:f2:52:f9:76:1c:23:c4:77:da:68:
bb:0b:63:ca:e0:64:fc:cd:2a:66:fd:6c:db:e4:44:
16:bb:b0:c2:9e:20:7c:c8:6a:91:8b:3b:25:49:ce:
59:62:45:6a:79:64:b3:4f:9a:38:12:ab:56:fd:00:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:67:97:7F:B8:9A:B7:07:6F:86:92:5C:6E:66:47:B4:1C:E0:27
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fRVnl3-4mrcHb4aSXG5mR7Qc4Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
89.125.226.0/23
140.225.208.0/23
153.76.194.0/23
153.76.204.0/23
162.35.229.0-162.35.230.255
Signature Algorithm: sha256WithRSAEncryption
7e:5e:0e:ad:08:14:f3:e8:55:00:3d:8e:ad:4c:19:6c:16:1d:
25:12:51:5a:3e:03:eb:dd:23:72:b3:53:85:28:39:79:86:3a:
e0:4c:cc:eb:bd:76:5c:cd:0c:1e:a7:fe:32:24:43:68:45:de:
ef:ef:ec:e0:20:fc:e8:ea:91:ba:c6:3e:59:1a:79:5f:b3:b7:
f7:a3:db:03:53:57:3d:50:7b:f3:0c:40:81:3a:e7:0c:cf:f3:
eb:c5:56:a3:bf:81:90:62:84:9d:61:e6:17:01:f8:4b:ce:86:
db:10:39:09:71:12:6a:59:55:27:5e:06:19:e2:11:f7:08:2c:
46:8e:d3:30:a5:4c:7d:47:a0:22:f8:66:b8:87:62:73:28:e4:
9e:7d:25:55:0b:ac:e1:d2:e4:2e:1f:66:24:48:6e:89:91:eb:
28:72:49:88:6b:10:69:19:5d:21:2a:d6:9d:38:49:e2:e0:79:
99:6c:f3:05:0b:16:d5:5d:a9:e7:b9:32:18:8f:a9:2e:19:df:
50:b8:90:f6:86:dd:39:bb:66:fa:6a:b9:eb:30:37:9b:99:fb:
0a:31:7f:97:6a:b0:82:70:e6:f5:38:06:86:ec:58:c5:77:1c:
25:3b:53:db:9a:22:aa:d9:96:f1:c3:72:8d:fa:eb:3c:4d:7b:
70:86:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:25 2026 by rpki-client