Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PP8iWp69Xumj_jCCT6AlVn7_2Ik.roa
File: PP8iWp69Xumj_jCCT6AlVn7_2Ik.roa (raw, json)
Hash identifier: DbOqJ9KDGeHtROeN7yQgMWjvd8bev7Va3DHFSUIRBKI=
Subject key identifier: 3C:FF:22:5A:9E:BD:5E:E9:A3:FE:30:82:4F:A0:25:56:7E:FF:D8:89
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0F25D5F20046548F8CCEB2C3813CC845C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PP8iWp69Xumj_jCCT6AlVn7_2Ik.roa
Signing time: Wed 30 Sep 2026 12:50:00 +0000
ROA not before: Wed 30 Sep 2026 12:50:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 89.125.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:5d:5f:20:04:65:48:f8:cc:eb:2c:38:13:cc:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 30 12:50:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cff225a9ebd5ee9a3fe30824fa025567effd889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:b2:43:1e:cb:fe:40:bc:f6:d8:4f:9b:b8:
cf:df:74:3d:16:29:c3:d7:7c:57:e5:97:ec:17:7e:
9a:d8:40:5f:4f:fc:17:8d:11:d6:21:5e:a1:b9:a1:
26:0b:75:28:62:8e:6d:22:82:48:d0:eb:d3:61:d0:
18:b5:89:80:85:2f:66:28:91:36:99:bb:7c:f8:a9:
df:1f:5e:d6:e9:47:6c:07:f8:8e:eb:19:45:cd:3d:
b8:d4:2b:dd:ff:8c:9c:07:39:f6:25:f8:69:c0:6d:
db:8c:d5:84:69:24:23:3a:a8:31:b0:84:64:0a:cc:
cf:69:28:7d:64:58:ff:c5:ea:ad:3c:a7:c8:11:da:
5a:96:b6:a3:40:fc:66:8e:46:c3:1b:4b:9f:cc:36:
ed:c3:10:c6:18:d5:aa:70:89:67:46:b4:f9:de:a9:
2c:9e:45:98:25:a1:35:f9:05:2b:94:73:2e:28:74:
a0:69:de:09:c2:5e:2f:e8:3d:39:b9:24:a7:f2:1e:
76:2b:82:49:29:75:2b:c7:d8:16:11:59:a2:f6:79:
21:e9:26:88:c0:a9:e9:3a:2c:29:62:52:9c:60:83:
79:70:87:7d:a1:08:83:fc:06:73:96:f0:61:cb:14:
f5:ba:0e:33:cc:25:12:17:73:cd:be:21:4f:b3:5b:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:22:5A:9E:BD:5E:E9:A3:FE:30:82:4F:A0:25:56:7E:FF:D8:89
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PP8iWp69Xumj_jCCT6AlVn7_2Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.167.0/24
Signature Algorithm: sha256WithRSAEncryption
30:63:8d:f0:19:61:26:cb:02:54:cf:e4:cc:d5:11:d0:a2:93:
88:e0:5a:ee:d4:a1:cc:91:0e:74:d6:48:ff:5c:8a:b7:7b:87:
f5:08:d9:58:4b:9f:6c:5d:8f:c2:a4:58:77:94:2f:28:b1:ec:
78:43:91:da:34:89:0d:17:47:8f:2c:ac:09:26:1a:d0:61:b2:
03:50:ed:cb:f0:85:cc:e4:95:45:f9:37:41:44:c6:fe:ea:e5:
1a:0c:31:2f:a2:37:be:2c:d1:19:26:48:78:53:7c:b0:dd:27:
9a:eb:ba:a9:ac:af:47:29:ea:b9:3e:74:a8:be:f3:d8:ae:c9:
87:14:db:90:2a:7f:98:39:d2:cf:e7:d8:74:73:7f:68:b6:e9:
b6:7a:a6:d8:e5:3b:35:e8:b2:bd:85:2d:0e:fb:58:be:12:5f:
58:60:63:06:33:3a:a9:52:a8:f1:04:5f:56:ec:0e:db:9b:4a:
df:c9:8a:91:f5:ab:09:68:1d:be:12:93:bd:9b:e6:7c:74:93:
6a:cb:e9:00:b4:ed:72:12:97:1a:53:90:8e:25:4e:1a:8f:ae:
e6:93:08:45:03:1a:f0:b0:d1:08:5b:d2:5d:b8:05:ab:03:67:
d3:15:3b:e5:6c:41:16:a6:60:19:7e:c3:c7:44:29:f8:05:67:
f5:20:a6:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDyXV8gBGVI+MzrLDgTzIRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTMwMTI1MDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2ZmMjI1YTllYmQ1ZWU5YTNmZTMwODI0ZmEwMjU1NjdlZmZkODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVyyQx7L/kC89thPm7jP33Q9FinD
13xX5ZfsF36a2EBfT/wXjRHWIV6huaEmC3UoYo5tIoJI0OvTYdAYtYmAhS9mKJE2
mbt8+KnfH17W6UdsB/iO6xlFzT241Cvd/4ycBzn2JfhpwG3bjNWEaSQjOqgxsIRk
CszPaSh9ZFj/xeqtPKfIEdpalrajQPxmjkbDG0ufzDbtwxDGGNWqcIlnRrT53qks
nkWYJaE1+QUrlHMuKHSgad4Jwl4v6D05uSSn8h52K4JJKXUrx9gWEVmi9nkh6SaI
wKnpOiwpYlKcYIN5cId9oQiD/AZzlvBhyxT1ug4zzCUSF3PNviFPs1vnMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDz/IlqevV7po/4wgk+gJVZ+/9iJMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvUFA4aVdwNjlYdW1qX2pDQ1Q2QWxWbjdfMklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX2nMA0G
CSqGSIb3DQEBCwUAA4IBAQAwY43wGWEmywJUz+TM1RHQopOI4Fru1KHMkQ501kj/
XIq3e4f1CNlYS59sXY/CpFh3lC8osex4Q5HaNIkNF0ePLKwJJhrQYbIDUO3L8IXM
5JVF+TdBRMb+6uUaDDEvoje+LNEZJkh4U3yw3Sea67qprK9HKeq5PnSovvPYrsmH
FNuQKn+YOdLP59h0c39otum2eqbY5Ts16LK9hS0O+1i+El9YYGMGMzqpUqjxBF9W
7A7bm0rfyYqR9asJaB2+EpO9m+Z8dJNqy+kAtO1yEpcaU5COJU4aj67mkwhFAxrw
sNEIW9JduAWrA2fTFTvlbEEWpmAZfsPHRCn4BWf1IKZy
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:29 2026 by rpki-client