Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DXWq4IOQOSUjLKZDU6qEEnuZLTY.roa
File: DXWq4IOQOSUjLKZDU6qEEnuZLTY.roa (raw, json)
Hash identifier: Hnl3vU32o8YiLsEXWTIhThoGNX5/Dq4KOzxN9AOmBos=
Subject key identifier: 0D:75:AA:E0:83:90:39:25:23:2C:A6:43:53:AA:84:12:7B:99:2D:36
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01A145268509BF12F5A72289841FBE26AD54
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DXWq4IOQOSUjLKZDU6qEEnuZLTY.roa
Signing time: Fri 16 Oct 2026 14:38:34 +0000
ROA not before: Fri 16 Oct 2026 14:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154725
IP address blocks: 89.43.41.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:26:85:09:bf:12:f5:a7:22:89:84:1f:be:26:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 16 14:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d75aae083903925232ca64353aa84127b992d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:fe:77:53:58:ba:6a:66:3c:13:12:7d:48:
a0:c3:0b:d3:de:06:bb:e7:a5:63:88:33:ff:33:63:
64:02:0c:5b:1b:48:54:06:47:15:11:aa:a4:ec:c1:
19:6a:f2:00:72:90:d3:57:39:75:7a:cd:5b:13:54:
a1:c2:a1:76:60:23:72:37:76:5e:6c:39:bf:f3:07:
83:1d:4a:9c:77:37:94:eb:b7:0f:5a:13:a7:3b:c7:
39:d3:bc:2e:61:42:9f:91:f4:0c:5f:da:8a:b7:15:
69:58:00:ca:4a:f5:3a:b0:12:39:9e:58:5b:70:0b:
93:67:8e:bc:ad:23:a3:1b:a8:ad:3e:95:ba:1c:86:
36:94:55:05:79:91:72:75:93:5c:03:e7:51:78:87:
15:63:e6:77:72:20:77:f2:34:c1:b8:78:a4:99:c2:
41:e3:80:92:77:c9:e9:f1:64:02:e4:ca:f5:8d:4c:
07:b3:8a:c7:6f:59:1f:f4:ac:0b:e1:38:06:78:19:
cf:8e:ae:71:31:8c:f0:3e:3f:6b:f4:23:cb:fa:a5:
25:a5:4c:8d:97:53:a5:cc:e4:2b:81:4f:f9:0d:d9:
4b:f1:5c:0c:cf:a3:c9:d7:9b:57:88:f8:0c:d8:f0:
92:08:02:41:c7:9e:d7:96:e3:51:36:32:b7:09:21:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:75:AA:E0:83:90:39:25:23:2C:A6:43:53:AA:84:12:7B:99:2D:36
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DXWq4IOQOSUjLKZDU6qEEnuZLTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.41.0/24
89.43.45.0/24
89.43.73.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b0:96:33:0d:fd:4f:18:2b:af:df:d8:fc:3f:07:42:1e:c6:
df:a9:f8:c3:45:b2:67:1b:9d:d9:fa:64:4c:3e:8d:9c:09:a0:
a8:61:d4:1c:06:f6:ab:1d:45:9f:fd:7b:06:41:02:de:f2:02:
28:2b:b6:3f:95:6c:08:ee:2f:ca:48:87:26:08:41:76:fe:24:
54:9c:ce:a1:19:15:5e:41:48:33:99:42:b1:b4:37:69:55:b7:
17:33:1b:84:09:31:aa:6d:2f:de:95:b5:fe:a8:2b:f1:15:29:
39:0e:2f:22:f1:b4:3c:7a:86:c5:cc:ea:50:fc:4c:6c:99:4f:
8c:1a:d6:15:8e:cd:72:ad:32:71:db:58:d4:d0:e3:61:6c:40:
0c:63:d0:93:24:18:ef:32:68:cf:67:8b:43:fe:0f:be:a6:8e:
23:8c:1b:99:d6:3d:c1:93:6a:91:bc:21:d6:05:88:4c:5a:f0:
9b:dd:1d:5c:61:8b:29:dc:4f:c1:3d:04:8c:48:1e:ed:d8:1a:
5a:13:cc:e0:3f:28:cd:df:dc:2c:b7:96:28:50:2e:21:d1:f5:
66:14:57:56:7c:e3:70:be:d8:b6:ae:99:a9:d2:3c:7e:12:00:
8a:9a:c4:de:a4:6f:37:30:8d:c1:20:7b:c7:30:db:df:fe:22:
8e:06:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:40:04 2026 by rpki-client