Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/By2NBRKaAJMkCra4RNsOZa0Hyqs.roa
File: By2NBRKaAJMkCra4RNsOZa0Hyqs.roa (raw, json)
Hash identifier: L0ry7nDGwodjBVzZL/kkJgYwlYte5GbHio2krotjXn4=
Subject key identifier: 07:2D:8D:05:12:9A:00:93:24:0A:B6:B8:44:DB:0E:65:AD:07:CA:AB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A01E333A305C6E8BF6FD2E82BEB144179F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/By2NBRKaAJMkCra4RNsOZa0Hyqs.roa
Signing time: Thu 20 Aug 2026 08:04:28 +0000
ROA not before: Thu 20 Aug 2026 08:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 89.125.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:33:3a:30:5c:6e:8b:f6:fd:2e:82:be:b1:44:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 20 08:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=072d8d05129a0093240ab6b844db0e65ad07caab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:54:a5:64:b1:35:4b:90:2c:ab:9b:9d:e7:
fe:33:ee:b5:4d:d2:1c:be:1f:64:76:d4:5b:4a:92:
2b:ba:97:9b:62:89:8a:f9:d9:59:70:79:55:58:c0:
2d:7b:95:b3:5d:75:84:aa:c9:ea:59:50:b6:f1:c1:
f8:e0:40:96:84:0d:1c:a2:6f:01:53:cf:e2:3a:4f:
00:28:67:c6:d6:3f:1f:9a:ad:25:7c:b6:9e:05:48:
d1:80:62:df:11:98:b8:69:a1:04:f1:57:48:8e:17:
ab:d8:f2:60:4a:28:bd:1c:c7:43:50:04:79:88:14:
aa:d8:74:d2:19:26:a6:2e:cc:b1:53:82:8c:9d:b9:
15:a9:c7:03:92:d9:89:28:f9:3d:16:7c:6e:bb:8d:
2a:08:a1:89:90:ba:ed:75:b0:fd:de:a5:fe:1f:b6:
47:b2:0b:26:e3:04:6d:ce:59:bd:8f:22:cd:45:c4:
96:6f:89:b5:52:58:df:35:6f:36:5a:3c:2e:d7:68:
4d:01:29:47:6f:cc:b1:d3:29:a3:b9:28:7e:46:2c:
cb:f1:8c:73:83:5d:dd:83:3f:1b:d4:bb:a4:c9:3b:
5b:20:09:a4:47:49:b6:f8:93:04:f2:bc:be:7f:a9:
4f:e4:9a:6c:ed:be:6b:e1:73:01:01:18:9f:45:ff:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2D:8D:05:12:9A:00:93:24:0A:B6:B8:44:DB:0E:65:AD:07:CA:AB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/By2NBRKaAJMkCra4RNsOZa0Hyqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.97.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5d:74:99:60:a4:ea:7e:e1:e8:28:89:49:a1:21:59:1e:0f:
80:a4:90:c9:11:29:42:89:bf:00:81:59:3b:85:2d:72:9f:e9:
eb:a7:98:30:cf:43:f7:2e:7e:d3:c6:ea:62:47:c5:3e:7e:67:
dc:de:44:52:00:c5:60:51:46:dd:1b:12:96:2a:ed:a1:9c:a4:
e9:db:a6:2c:33:e6:08:a6:17:65:fd:87:79:e2:36:b5:ef:ae:
ad:6b:dd:0a:c6:2b:c5:28:89:04:06:5e:8f:9c:f1:89:9b:a4:
ac:74:e3:10:98:a2:8b:9f:e2:08:66:0f:bd:63:8f:2f:4f:43:
c1:94:e8:fd:03:ce:6c:ad:73:71:85:de:94:1c:7f:9c:b3:87:
06:d2:73:3f:a7:de:ae:e7:06:08:dc:25:f6:1f:50:0a:34:de:
62:02:33:5e:bf:89:84:9e:56:74:0f:da:0d:aa:6b:06:7c:b0:
1b:08:7a:bf:6a:9c:c4:55:25:77:67:1e:92:f7:c9:e4:d4:6d:
d0:e6:ef:a3:bb:ff:95:ba:1f:55:65:ef:7d:b8:fe:21:25:47:
44:88:27:f8:7a:b6:69:4a:8f:e1:38:03:8b:1c:60:f1:a2:6f:
09:53:f3:b2:49:67:26:59:50:cd:0e:91:a5:5f:8c:76:9d:19:
46:57:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:22 2026 by rpki-client