Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RobOT9a-C4wIUZFFIRrlYx-n5Yo.roa
File: RobOT9a-C4wIUZFFIRrlYx-n5Yo.roa (raw, json)
Hash identifier: Iq9e+4xnv/ZvXJrw7duoPgBE5T3GoUcihd2Hc8o14O0=
Subject key identifier: 46:86:CE:4F:D6:BE:0B:8C:08:51:91:45:21:1A:E5:63:1F:A7:E5:8A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DDEFD3789FABDE26E021E1E76601792B9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RobOT9a-C4wIUZFFIRrlYx-n5Yo.roa
Signing time: Thu 30 Apr 2026 15:23:49 +0000
ROA not before: Thu 30 Apr 2026 15:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 89.125.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:fd:37:89:fa:bd:e2:6e:02:1e:1e:76:60:17:92:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 30 15:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4686ce4fd6be0b8c08519145211ae5631fa7e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:25:6d:13:91:0b:65:3e:2a:3f:f4:a8:5b:
22:cb:53:40:01:c4:28:30:ea:a1:44:fb:40:f2:3b:
9c:2a:b7:a5:98:cc:f5:66:79:9d:3a:ea:7c:e2:cf:
0a:3a:57:ec:c6:1e:89:73:d0:8b:18:de:47:45:5e:
1e:f4:9d:1d:a7:11:f5:00:f8:5f:3a:3b:d5:07:62:
bd:b5:11:00:c2:f6:f9:c5:44:b6:45:5e:b4:48:bb:
0e:c1:ea:05:f6:cb:28:b6:55:b6:9f:e0:8d:ea:37:
31:5b:0b:64:8f:87:ba:df:c2:30:40:db:83:68:4d:
b4:fc:ad:77:9f:bf:be:92:14:cb:92:e3:4a:35:a3:
41:79:77:3f:cd:73:2a:10:ee:cc:26:b3:60:36:c5:
f5:f2:de:ea:f7:67:27:e7:c0:13:cd:af:f0:12:a5:
17:bc:83:9c:b4:4d:33:71:87:b4:c6:38:a3:b8:b9:
0f:f0:11:54:14:ad:74:92:4f:05:7e:81:d7:76:ea:
ac:0a:a8:b5:a9:ce:4f:21:d9:e6:17:09:8b:45:41:
b6:fc:de:a2:3c:1b:42:01:65:cd:11:db:1b:27:7a:
a4:84:a8:9a:86:15:66:4f:50:fc:ce:7f:f4:6b:44:
2a:21:c7:a7:d7:5b:e0:b6:5c:26:49:af:d8:98:ed:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:CE:4F:D6:BE:0B:8C:08:51:91:45:21:1A:E5:63:1F:A7:E5:8A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RobOT9a-C4wIUZFFIRrlYx-n5Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9b:3c:2a:25:2d:18:80:b2:95:29:48:1d:52:c4:c2:e8:ec:
18:55:a7:a9:26:6e:8f:56:de:5f:e0:ed:c0:21:2f:2e:9e:9e:
22:fc:e1:93:3a:d0:00:79:b1:e3:f1:12:29:0d:52:99:63:f6:
b6:46:47:eb:08:6e:a6:da:90:5f:96:27:5c:c0:df:24:cf:af:
53:a5:e6:a6:35:db:82:94:00:ed:4d:c0:24:61:da:da:f8:e7:
4c:0d:ce:e7:31:76:8d:41:c2:48:88:93:6b:ff:66:82:73:8c:
9d:e4:4f:4f:d4:c7:a6:c6:5a:b4:3f:be:b8:71:30:44:92:00:
67:f6:c9:13:54:2b:54:01:d3:3f:60:c7:6f:05:80:ce:75:8d:
30:dd:ea:ff:27:b0:74:e5:23:c9:2b:a6:b7:f0:ae:27:fc:23:
d0:c2:08:4c:4c:37:66:b0:95:db:b1:f7:3b:7d:1e:4a:50:b4:
77:a2:64:2d:e3:f4:80:47:68:3c:d0:44:87:77:35:d3:81:5f:
8d:2b:c5:3b:eb:ef:ab:3b:3f:0e:ec:22:ae:a3:ad:1a:9a:13:
f3:ac:cb:4e:87:af:97:f8:fc:28:29:c4:2d:d5:58:ae:0c:5b:
ef:31:d6:79:c0:1b:ac:e2:a2:ec:9d:d3:68:62:95:fb:57:fa:
43:73:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:16:05 2026 by rpki-client