Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HCvjpoVBaDj7iCkRjbb_Keo0NZ8.roa
File: HCvjpoVBaDj7iCkRjbb_Keo0NZ8.roa (raw, json)
Hash identifier: FtHsavw7XVeKJmOFGJPivCWiNrNllH8P5SffPQVca3A=
Subject key identifier: 1C:2B:E3:A6:85:41:68:38:FB:88:29:11:8D:B6:FF:29:EA:34:35:9F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F59BC0DB57D04249CFC36D8BEB8F86637
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HCvjpoVBaDj7iCkRjbb_Keo0NZ8.roa
Signing time: Mon 13 Jul 2026 04:28:44 +0000
ROA not before: Mon 13 Jul 2026 04:28:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 89.125.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:bc:0d:b5:7d:04:24:9c:fc:36:d8:be:b8:f8:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 13 04:28:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c2be3a685416838fb8829118db6ff29ea34359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:b8:2f:c8:b6:c0:ed:83:ff:0e:1d:8b:ea:
34:25:25:7a:eb:bd:66:84:6d:54:35:07:32:30:31:
11:b4:58:6a:8c:05:a3:2f:f9:45:85:03:17:31:92:
fa:3e:c0:e2:c0:0c:27:01:86:40:08:e8:9c:00:0e:
94:2f:2c:ca:08:de:7b:51:13:c6:30:90:3a:da:8a:
e9:25:5f:83:ca:80:cb:65:4b:15:9d:b5:83:b5:7c:
be:51:0e:f1:44:7c:12:85:e3:3a:ae:57:20:31:26:
75:0b:49:d7:35:0b:42:2a:bd:79:25:64:99:f9:70:
85:e1:41:82:9f:0f:2d:23:cd:85:9f:5d:8b:1b:c5:
c0:0f:ee:22:39:e8:00:e2:7d:d2:6c:f1:19:c9:7b:
8e:6e:18:4c:a1:9c:79:8e:f7:7c:8d:e5:25:41:fb:
b0:71:8d:de:17:4b:13:b1:b6:1a:5c:c3:d4:95:7d:
e4:5b:dd:3c:d4:f7:e0:6e:32:67:62:88:0a:2d:29:
e6:c4:cf:47:cc:4e:60:dd:a7:e2:33:97:62:21:8a:
99:7d:9a:b2:66:91:92:5d:b8:1d:90:a6:eb:8a:cc:
1d:65:4f:0c:4d:1d:29:6b:57:cb:0a:56:b5:80:ea:
4c:a5:ed:0e:77:84:01:68:d1:70:82:26:36:8b:99:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:E3:A6:85:41:68:38:FB:88:29:11:8D:B6:FF:29:EA:34:35:9F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HCvjpoVBaDj7iCkRjbb_Keo0NZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ef:9b:f6:36:fc:41:4e:da:84:c3:3b:46:d7:c5:78:d4:91:
d2:a6:e4:39:8e:67:6d:ab:e5:d2:41:ac:1b:48:11:4b:6d:38:
6a:19:15:d1:64:cd:75:cb:44:7b:2d:e6:bc:8e:23:ca:65:c3:
5a:b2:ab:ae:16:a0:82:a7:86:5a:34:24:81:f8:e1:75:db:e6:
76:92:f2:f4:e0:2f:b7:03:19:0e:44:05:ff:47:e8:c6:54:1b:
68:ad:5d:7e:fc:b3:91:62:c5:36:13:3d:cc:02:76:ec:da:c8:
e5:db:7d:c5:b1:31:7c:80:8a:05:99:b8:f5:1f:c7:d4:6b:7a:
35:93:22:89:39:5d:0d:5c:41:1c:91:32:be:8e:b1:a9:81:5e:
e0:5e:e8:2d:1a:c4:e2:f0:55:10:7b:3e:8d:9f:05:1a:2a:78:
07:75:cd:99:f6:8a:dc:76:6d:48:7a:bb:a1:ea:e4:62:54:16:
ca:16:ea:78:d1:e7:bd:68:88:b8:93:c9:15:3b:57:d1:3b:da:
3a:bb:64:5d:c8:69:33:88:80:bf:cd:59:0c:5f:a3:46:81:e4:
bd:22:b1:71:56:b3:d5:b0:cd:14:4b:c5:9b:30:63:4c:87:68:
e2:a8:0c:52:99:2f:6f:35:81:62:09:23:c4:a2:e8:5f:47:3a:
4d:42:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:32 2026 by rpki-client