Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/R1V8zfRRKbU6ZQ2XmDDbsEPMGwo.roa
File: R1V8zfRRKbU6ZQ2XmDDbsEPMGwo.roa (raw, json)
Hash identifier: XiA+vq85O5ueVRDqpIu5yb6LpXIIIMSvx79y4lrKK6A=
Subject key identifier: 47:55:7C:CD:F4:51:29:B5:3A:65:0D:97:98:30:DB:B0:43:CC:1B:0A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C1E71B1316F886724DD95ECE40936E22A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/R1V8zfRRKbU6ZQ2XmDDbsEPMGwo.roa
Signing time: Mon 02 Feb 2026 13:01:33 +0000
ROA not before: Mon 02 Feb 2026 13:01:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 89.125.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:71:b1:31:6f:88:67:24:dd:95:ec:e4:09:36:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 2 13:01:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47557ccdf45129b53a650d979830dbb043cc1b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:79:73:3b:c9:28:22:63:9d:64:37:6e:a3:
f3:5e:10:3a:c4:36:28:63:c1:16:d6:95:c4:4a:c0:
b6:96:37:60:9a:cd:8c:4b:20:ac:d5:17:d8:b3:f3:
93:4f:e0:7d:77:1a:b7:4b:59:c4:db:6e:10:f6:eb:
5e:0f:5a:05:77:81:a8:b1:9a:75:59:8f:bc:f0:d0:
12:1c:4d:01:56:ef:f0:42:23:97:7e:67:49:02:a3:
57:13:ab:59:af:ef:6e:e0:ca:ce:47:bf:1c:bc:f7:
2d:03:99:57:86:50:a6:9a:2d:98:68:5a:a7:11:3e:
f2:f8:95:e7:a9:56:6a:74:61:7a:7b:f3:4d:b6:a4:
8d:bd:d7:75:7e:ed:d8:a8:59:90:52:14:e4:c7:b6:
29:ae:dc:08:12:ab:73:c3:fd:9f:2b:84:f4:02:8b:
04:9e:5a:76:40:bf:75:87:e4:82:fe:a1:62:65:f7:
f5:bc:ef:8d:56:5c:86:30:84:d3:82:7e:9d:6f:08:
11:74:e7:a1:e1:b7:c5:c1:08:a1:17:17:79:63:d9:
73:13:39:f3:cf:da:02:4c:6a:65:cc:3d:21:c3:41:
01:80:1e:f4:09:a3:3b:f6:3f:5b:99:c4:e1:6b:d8:
ac:77:f9:3c:5c:a6:dc:f5:3b:27:3a:b2:86:8a:54:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:55:7C:CD:F4:51:29:B5:3A:65:0D:97:98:30:DB:B0:43:CC:1B:0A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/R1V8zfRRKbU6ZQ2XmDDbsEPMGwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.38.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9b:2a:30:23:e9:3c:21:d3:f3:fe:f6:e4:17:ed:b1:89:cd:
bb:1b:75:2b:0e:0a:b7:36:1b:bb:97:74:ef:c9:5f:e6:99:2a:
d6:37:c6:50:23:c3:95:e6:83:44:52:06:6d:9f:56:14:a2:49:
c8:71:6b:51:a5:e8:01:c5:da:da:79:f4:2f:37:4b:3a:63:31:
05:59:9f:e4:f3:e3:4f:01:11:e0:7a:7a:a1:ff:34:fe:fa:f1:
b6:22:53:3b:3a:5a:40:05:30:3b:14:d1:fd:35:df:93:86:7d:
dd:26:75:48:ce:9e:1c:a8:9e:c0:51:d8:82:5c:ec:5a:85:d1:
54:31:46:35:c6:e6:eb:d2:57:71:64:89:cf:7c:27:bd:da:df:
36:20:3b:f7:18:76:67:9b:33:61:61:18:91:8e:47:d7:99:45:
ec:42:47:3c:a5:d7:b4:d7:df:c4:74:b8:87:4b:4d:f4:72:21:
9f:b8:64:dc:02:e3:80:80:fa:c1:7d:83:b3:f1:26:d6:a2:a4:
ad:7e:2b:ff:63:f4:01:df:0b:90:b0:5f:ee:b9:95:f5:e9:ef:
8c:e4:89:07:0e:5e:ef:10:05:a2:95:53:25:c2:68:3c:36:c3:
73:c8:37:fb:60:83:71:2a:36:d3:9b:99:6d:be:1e:ee:26:73:
3b:10:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 21:20:16 2026 by rpki-client