Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QrHq-ZUMbqGyOkO22bgi6lDoJaU.roa
File: QrHq-ZUMbqGyOkO22bgi6lDoJaU.roa (raw, json)
Hash identifier: F0z5bblRODhl4d2MuMa5WUcgUB7nWyB+jViH3jfn3q4=
Subject key identifier: 42:B1:EA:F9:95:0C:6E:A1:B2:3A:43:B6:D9:B8:22:EA:50:E8:25:A5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A04BFAA664B3670A159D4E6FBA2D6BE8AB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QrHq-ZUMbqGyOkO22bgi6lDoJaU.roa
Signing time: Sat 29 Aug 2026 05:25:12 +0000
ROA not before: Sat 29 Aug 2026 05:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218964
IP address blocks: 89.125.99.0/24 maxlen: 24
89.125.101.0/24 maxlen: 24
89.125.142.0/24 maxlen: 24
89.125.149.0/24 maxlen: 24
89.125.157.0/24 maxlen: 24
89.125.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:fa:a6:64:b3:67:0a:15:9d:4e:6f:ba:2d:6b:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 29 05:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42b1eaf9950c6ea1b23a43b6d9b822ea50e825a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:3c:45:40:d1:34:ef:27:f3:84:ee:74:b3:
06:59:d0:1b:9d:62:79:b9:20:5f:52:7f:16:30:2a:
93:db:e4:b9:ea:13:26:c1:a5:c1:ce:d2:78:68:e6:
77:b2:1b:6e:f6:ef:60:2b:44:1d:cc:91:6c:fa:d5:
83:1d:fc:1e:c1:b4:62:21:b3:d0:ef:95:59:0d:01:
c0:30:dd:89:2a:90:fd:e7:88:c8:58:94:0f:07:81:
75:08:e9:08:b0:04:24:01:0f:a2:2b:d2:cb:e4:66:
64:89:05:0e:1e:0c:ac:82:eb:79:c3:15:d6:51:85:
09:50:07:77:22:20:28:9a:c9:74:ef:c6:4c:51:29:
47:69:9c:23:5c:79:34:cf:a3:68:af:71:ee:b9:b6:
98:1a:33:62:dc:e3:11:d1:8e:a4:7b:c2:2b:18:1a:
31:d5:aa:de:83:ff:e8:7e:82:33:d4:80:9a:fa:fc:
f2:21:2f:a9:ab:fc:3e:33:01:8d:3f:c6:76:93:40:
b9:15:e4:32:5d:29:17:59:74:e2:95:bf:5a:45:df:
3e:0c:48:22:64:d3:6b:57:69:d4:7f:44:98:d5:7b:
70:fc:dd:04:0b:3d:4f:93:d7:bf:1c:80:e7:21:86:
20:5e:c2:4b:28:ab:d1:59:d2:8b:45:1b:a4:10:16:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:EA:F9:95:0C:6E:A1:B2:3A:43:B6:D9:B8:22:EA:50:E8:25:A5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QrHq-ZUMbqGyOkO22bgi6lDoJaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.99.0/24
89.125.101.0/24
89.125.142.0/24
89.125.149.0/24
89.125.157.0-89.125.158.255
Signature Algorithm: sha256WithRSAEncryption
6d:24:e5:ed:bf:23:33:c6:f9:1f:b6:67:c4:df:7e:be:23:af:
c3:6d:28:1b:6a:9b:cf:3c:6a:e7:28:04:95:7d:f3:1c:7d:bd:
d1:90:96:40:3e:bb:6d:7e:35:a7:c6:03:4f:fc:56:a5:59:b4:
92:4b:1d:1a:65:04:19:bb:6c:72:6d:2d:23:ba:d5:0c:d5:97:
76:a5:c2:6a:fa:7f:dc:b1:24:d6:19:86:39:ba:f4:24:4a:da:
08:ab:a0:18:a4:0c:5c:57:4c:32:fb:bb:ff:db:dd:6a:6f:c1:
9a:37:e1:cb:d8:fa:35:bb:91:0e:2b:7d:6f:84:99:7f:07:0d:
9f:70:6f:74:b1:c3:f8:d0:ac:d4:fe:46:71:f5:b0:17:24:c3:
1d:b9:0f:ac:17:54:5a:f0:7d:57:8e:95:36:40:31:fd:14:4b:
36:ad:f9:50:5c:99:cf:fe:02:e8:72:b3:65:b5:a6:f1:0b:cd:
de:5a:c7:2b:0e:15:5f:5a:f3:ae:b7:1c:f5:8c:11:7e:06:21:
5c:ae:ba:07:c6:8d:df:ae:9a:9c:25:7d:14:ad:05:4a:ff:ca:
ec:a6:b1:2b:40:a7:14:a8:94:0c:4f:62:17:f4:5d:77:c3:83:
9b:f7:df:37:ca:a1:8d:a7:26:a6:ef:40:11:c9:52:3f:eb:6b:
42:df:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:44 2026 by rpki-client