Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q8EarZ55HO0LfZroarNBvfYOjcM.roa
File: Q8EarZ55HO0LfZroarNBvfYOjcM.roa (raw, json)
Hash identifier: l6KR/LrhJdNEP5oZrj7W58406Bdb4Wqc0tbubxNK4+0=
Subject key identifier: 43:C1:1A:AD:9E:79:1C:ED:0B:7D:9A:E8:6A:B3:41:BD:F6:0E:8D:C3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A08C053A0811C08FE3C0E579D8E074ABB9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q8EarZ55HO0LfZroarNBvfYOjcM.roa
Signing time: Thu 10 Sep 2026 15:52:27 +0000
ROA not before: Thu 10 Sep 2026 15:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 31.207.7.0/24 maxlen: 24
89.125.13.0/24 maxlen: 24
89.125.37.0/24 maxlen: 24
89.125.43.0/24 maxlen: 24
89.125.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:05:3a:08:11:c0:8f:e3:c0:e5:79:d8:e0:74:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 10 15:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43c11aad9e791ced0b7d9ae86ab341bdf60e8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:5c:85:27:1f:29:71:12:a4:65:d2:c0:5f:
e1:94:f0:94:b4:17:0b:68:ef:0c:b0:c1:3c:3c:7c:
72:b3:f4:87:47:0a:eb:16:d9:99:e0:b4:9e:3b:66:
88:df:d0:db:ba:a2:1b:c3:99:06:e5:ea:13:df:71:
09:4b:bc:d0:21:8e:1c:6a:13:b0:a1:cd:06:28:f8:
ff:d3:ed:eb:ea:d2:0c:5d:c0:36:b5:de:91:51:cd:
1e:21:6c:f3:f7:4b:fc:c7:26:20:08:3b:af:72:cf:
5e:e9:25:81:f9:2b:c2:38:f7:2c:34:81:4a:b7:fe:
6e:bc:96:4c:3a:38:37:77:f1:9a:51:b6:12:0c:d5:
07:21:b1:ae:91:2e:15:a5:8f:80:93:d3:67:57:ac:
e7:6f:ab:16:9a:49:09:08:12:8b:40:6a:b0:97:2c:
22:ba:6d:b3:3d:71:33:87:71:e5:cd:97:35:ac:d7:
34:da:65:a1:ff:5b:78:4b:f1:bf:e5:d7:d1:c3:a5:
f6:25:38:b4:18:03:5f:86:f7:60:54:8f:57:b8:61:
e8:ec:79:c0:56:67:ae:51:02:ae:17:d8:91:f6:7e:
87:94:c2:e8:9f:55:26:74:78:62:1a:4a:1a:d1:55:
9a:29:23:c6:29:84:15:11:cb:a8:f6:14:d2:cf:ad:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:1A:AD:9E:79:1C:ED:0B:7D:9A:E8:6A:B3:41:BD:F6:0E:8D:C3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q8EarZ55HO0LfZroarNBvfYOjcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.7.0/24
89.125.13.0/24
89.125.37.0/24
89.125.43.0/24
89.125.48.0/24
Signature Algorithm: sha256WithRSAEncryption
64:16:ed:8c:e3:1e:9f:d5:c8:5b:96:f3:1e:35:1d:f0:13:0f:
28:a0:84:63:90:9e:28:fd:cf:8d:d2:dc:00:b4:e2:07:c5:f2:
61:58:94:a5:00:95:f8:42:8c:ea:c6:77:5f:5d:2a:d4:70:c6:
11:d6:90:f9:87:eb:ab:57:11:4e:51:b0:19:d0:67:eb:a0:86:
c9:5b:ca:e5:43:ec:37:1e:43:68:f9:24:2f:ad:0e:52:bb:22:
83:e7:5e:c3:5d:85:47:83:e7:16:8a:7f:17:bf:6b:5e:23:ca:
90:9f:ea:d9:bf:04:21:54:99:e1:74:31:d3:b8:d5:02:42:f0:
6b:68:03:a2:eb:5b:01:6d:55:b9:74:7d:7b:cd:00:f1:37:0f:
0d:02:85:bd:1e:7e:6e:ea:f0:75:44:1f:2e:4e:b1:68:95:30:
e8:e3:98:98:d1:92:2e:71:54:05:72:02:d1:ae:6d:21:65:14:
64:d8:88:92:03:45:a0:43:6d:23:8f:43:01:60:e5:f4:3d:d2:
eb:7a:eb:39:6c:8c:01:4f:22:59:3b:54:d0:88:94:b6:0b:d8:
5b:3f:c3:ce:c9:06:bf:54:9c:d0:6e:31:ac:5e:a0:b6:26:9a:
d4:5d:7b:e5:76:9a:ac:8e:03:f4:49:13:97:18:a6:30:a8:10:
73:21:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:35 2026 by rpki-client