Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2sLPAOYwwNIK58J0FgAdXyKSNxo.roa
File: 2sLPAOYwwNIK58J0FgAdXyKSNxo.roa (raw, json)
Hash identifier: 3wZDvZGKirDnS7aI7tDPtCDQNjFoWgU87LeMBNwYQZI=
Subject key identifier: DA:C2:CF:00:E6:30:C0:D2:0A:E7:C2:74:16:00:1D:5F:22:92:37:1A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0F8BCD3832B1B81C11864FA009CB5E51A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2sLPAOYwwNIK58J0FgAdXyKSNxo.roa
Signing time: Thu 01 Oct 2026 18:31:59 +0000
ROA not before: Thu 01 Oct 2026 18:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211673
IP address blocks: 89.125.10.0/24 maxlen: 24
89.125.35.0/24 maxlen: 24
89.125.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:bc:d3:83:2b:1b:81:c1:18:64:fa:00:9c:b5:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 1 18:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dac2cf00e630c0d20ae7c27416001d5f2292371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:1f:0a:a9:15:56:3e:00:a4:c9:40:c1:e7:
af:e0:e9:a7:c3:d2:94:e2:15:cb:99:5f:1a:0b:ba:
58:48:0b:e0:02:45:a3:8c:b6:1d:bd:99:35:24:d7:
1b:6f:9f:8a:74:f7:47:34:e8:47:13:3b:33:0d:7a:
68:37:18:15:e8:35:97:0c:9f:68:6a:f3:71:22:3e:
3f:3a:b4:e5:4b:66:60:47:98:8a:38:1d:58:05:8a:
67:9d:45:b7:02:5c:d6:2c:bf:74:83:07:62:4f:c3:
f6:f2:67:c9:65:97:ea:48:0e:8a:62:d5:5c:29:72:
ea:91:a6:d1:17:df:b7:c2:82:d5:2d:ad:40:4a:53:
e1:f5:8e:df:13:31:6b:e6:c0:d5:0b:6c:a0:f9:2e:
de:22:e2:7a:d9:09:7e:3f:55:18:ab:16:29:5e:99:
dd:ad:b9:c5:1d:d4:c3:d7:4f:d5:bc:77:87:5f:b2:
9e:ee:0d:dd:17:e3:49:5d:03:a0:bf:2a:df:e4:9b:
a8:23:92:31:00:18:d7:bd:42:f2:92:3b:a1:68:6d:
0d:59:d9:2e:7b:af:9b:9d:f4:4e:3d:8e:c6:b9:65:
09:bc:d3:2a:e7:95:b6:18:13:27:62:8b:d4:92:c6:
f2:98:27:86:dd:1d:c5:c6:18:cf:d9:f8:ce:00:b2:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:CF:00:E6:30:C0:D2:0A:E7:C2:74:16:00:1D:5F:22:92:37:1A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2sLPAOYwwNIK58J0FgAdXyKSNxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.10.0/24
89.125.35.0/24
89.125.153.0/24
Signature Algorithm: sha256WithRSAEncryption
16:57:a2:cd:ee:66:b4:0f:41:7a:54:ef:6a:81:81:e2:dd:6b:
df:0f:87:1b:ba:d7:46:67:16:46:0d:e5:8b:71:34:49:39:54:
54:1f:dd:fd:99:a7:d9:dd:7e:91:df:7e:59:03:a1:bd:ca:44:
5b:95:06:88:8b:85:d4:c5:29:b0:f8:4c:c2:80:4c:7b:7c:87:
3d:a6:0d:83:eb:17:e1:71:5c:65:92:81:38:b6:05:7d:91:ba:
bd:a8:9e:56:e3:2e:dc:f1:e6:e3:c0:ab:f0:22:70:cb:0a:86:
bc:98:0c:44:b6:31:a4:84:e2:ec:77:00:c8:22:eb:5d:f1:50:
82:52:80:80:0e:66:10:c2:97:e2:16:37:67:fc:73:03:29:3f:
11:a2:88:56:ec:67:2b:67:f7:a4:b9:38:6c:32:74:74:b7:7f:
d9:92:a4:f2:ad:ce:1d:18:68:bf:0c:24:23:a3:51:2e:a4:76:
50:15:51:8c:79:30:58:d3:a2:57:51:07:42:d5:bb:71:f6:b6:
cb:8d:7e:af:2a:d4:66:7d:7b:ac:b7:54:c3:f8:f4:6c:a7:ba:
d5:44:93:25:25:82:7c:ff:2a:fb:b1:22:9a:f3:f7:2d:36:cb:
df:23:f2:ba:50:ee:8a:b7:75:92:0c:53:24:d4:1c:14:19:d8:
79:90:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:59 2026 by rpki-client