Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0kLUxYDuHIGmFYWzeAzQYRQz0WY.roa
File: 0kLUxYDuHIGmFYWzeAzQYRQz0WY.roa (raw, json)
Hash identifier: 6ymjOGAXtzSi1zQ+5CBz69Qoc+KEQ0o9BffLxnVLS6Q=
Subject key identifier: D2:42:D4:C5:80:EE:1C:81:A6:15:85:B3:78:0C:D0:61:14:33:D1:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A18CD0C863E0E94C3D11903532F0E05EEF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0kLUxYDuHIGmFYWzeAzQYRQz0WY.roa
Signing time: Fri 30 Oct 2026 12:37:35 +0000
ROA not before: Fri 30 Oct 2026 12:37:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218239
IP address blocks: 89.35.130.0/24 maxlen: 24
104.143.222.0/24 maxlen: 24
153.76.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:d0:c8:63:e0:e9:4c:3d:11:90:35:32:f0:e0:5e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 30 12:37:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d242d4c580ee1c81a61585b3780cd0611433d166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:da:c2:d3:8a:b7:17:11:df:f2:54:23:8e:
44:5b:04:65:d8:a3:2e:ee:4e:82:99:ca:4b:4c:66:
60:83:73:6c:f1:22:65:1b:4c:8c:de:63:a5:e8:9a:
b8:8c:06:4b:fe:18:40:61:29:bb:f0:a8:63:35:ef:
6d:ee:73:58:42:12:74:69:ca:09:7c:44:78:b0:a9:
68:fc:ac:e5:9c:45:ce:dc:57:70:08:f8:ef:6b:44:
08:8c:63:17:2d:5a:bd:e5:54:8f:73:7c:e0:fd:21:
c8:71:3a:9e:9a:a1:9c:c3:42:58:46:d9:3a:d3:11:
e0:8d:87:d5:dc:fa:73:d6:1a:fa:5c:bf:62:11:c0:
4f:44:02:ff:21:35:85:db:c7:21:8a:50:d8:5c:5b:
6a:38:d7:22:77:39:a8:76:d5:34:a6:be:8a:45:d9:
44:ab:0f:0c:11:74:b4:e9:11:0b:b7:e4:80:36:cb:
81:69:1c:57:53:3f:20:3e:92:1a:3b:dd:2c:b6:78:
98:bb:d0:fe:c1:7b:a9:d7:05:4e:01:0e:e7:f5:40:
f5:99:43:46:67:a6:e0:1b:97:44:4f:33:7c:97:1e:
d2:e3:03:d0:da:db:7f:91:2b:b1:9d:15:35:68:8c:
82:0f:64:f2:6b:23:e3:59:ea:78:83:61:88:df:ca:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:D4:C5:80:EE:1C:81:A6:15:85:B3:78:0C:D0:61:14:33:D1:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0kLUxYDuHIGmFYWzeAzQYRQz0WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
104.143.222.0/24
153.76.204.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ee:d7:60:fc:f1:89:b6:a1:fb:78:bb:79:d2:6b:ad:45:39:
c6:00:73:e6:67:58:90:3e:c2:e1:0a:81:6a:32:45:22:e5:88:
aa:68:c5:af:29:05:d2:f4:c9:60:68:b8:63:18:36:2d:c1:8d:
d0:ba:f0:5c:b6:37:30:c0:fb:8a:32:3a:a0:f4:b5:a6:3c:e4:
c1:48:55:d1:6b:02:85:ae:bd:2a:7a:6d:96:b2:fe:46:96:db:
b9:39:b7:f8:d1:18:76:cc:c3:81:94:ed:cd:23:e1:eb:a6:e6:
1e:96:e5:c3:e3:e7:bf:1c:40:35:bf:b8:90:ed:45:a4:7a:90:
ae:7e:9a:3a:ad:c2:cb:47:7f:3b:25:7c:f7:4c:5a:df:96:db:
55:22:3d:1d:2f:72:79:76:b3:00:da:d7:75:72:45:33:62:3c:
80:60:bc:ce:59:35:33:1b:9e:e2:f2:83:2d:04:ed:fb:74:6a:
01:77:4b:63:d4:b0:4d:0f:a4:4d:11:2f:b9:25:b3:47:ae:a9:
5e:db:dc:5e:98:f4:c2:3e:01:c2:f9:09:cf:10:41:4c:0c:32:
27:e6:01:a6:7d:1d:ba:8e:62:59:69:4e:99:99:db:6d:3e:8b:
14:6b:60:68:21:41:a4:4b:9c:0c:cf:52:81:dd:79:1c:86:18:
66:32:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:41 2026 by rpki-client