Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SrdDht1j-o0t3zl4XtjqjLiG2ZE.roa
File: SrdDht1j-o0t3zl4XtjqjLiG2ZE.roa (raw, json)
Hash identifier: hDnuwltD8WAkCpZo+wAbziFgSFeGqk/l5EPN2Tw94Ow=
Subject key identifier: 4A:B7:43:86:DD:63:FA:8D:2D:DF:39:78:5E:D8:EA:8C:B8:86:D9:91
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FACD4CBBDDC0ECDF8F9D12D7F7479FE09
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SrdDht1j-o0t3zl4XtjqjLiG2ZE.roa
Signing time: Wed 29 Jul 2026 07:44:14 +0000
ROA not before: Wed 29 Jul 2026 07:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 89.125.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:d4:cb:bd:dc:0e:cd:f8:f9:d1:2d:7f:74:79:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 29 07:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ab74386dd63fa8d2ddf39785ed8ea8cb886d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:29:12:06:ed:d9:fc:95:26:aa:66:5d:b9:
57:29:1d:ce:e1:c0:4f:e0:c7:19:85:e3:6a:0c:f8:
a4:9f:34:a1:2b:35:c1:54:17:b4:c4:63:58:bb:d5:
48:12:36:ca:cb:f7:d8:88:7d:ad:8a:cc:81:b5:6f:
ed:fa:34:e8:ad:bb:d2:0e:86:d5:1f:04:6a:fa:ad:
dd:9a:b4:4e:16:f9:45:bd:37:83:70:65:57:88:39:
07:4d:7e:91:e9:c9:bc:9d:2c:41:24:f2:70:75:a7:
01:6f:27:9a:be:b6:c7:62:df:ac:36:01:a8:eb:a6:
a5:5f:06:14:c7:00:1d:51:90:dc:ee:c5:e6:0b:1f:
74:ad:4c:1a:01:fd:01:71:c1:17:ba:5e:1b:b2:42:
f8:ca:35:04:4b:5e:64:de:d3:ad:a6:88:8b:d4:59:
f2:5e:7e:b2:c1:a0:63:e4:cf:03:7b:83:66:30:29:
2a:3a:e1:62:2f:18:86:e1:25:71:be:70:05:1c:d9:
87:c2:ce:df:26:cd:2c:40:0a:f5:80:42:a9:04:95:
6e:f6:b9:5f:06:de:48:7d:75:c1:03:4f:0a:54:74:
ad:92:35:9d:ed:77:5a:c8:4b:1f:47:e0:2b:e3:5d:
83:1d:36:cf:34:a3:c4:2a:a4:e0:d4:5c:71:e4:98:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:43:86:DD:63:FA:8D:2D:DF:39:78:5E:D8:EA:8C:B8:86:D9:91
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SrdDht1j-o0t3zl4XtjqjLiG2ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.156.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cf:de:f4:d6:99:8f:24:c7:e8:a6:bb:93:62:ab:03:36:de:
45:c8:60:3e:d3:4e:c7:3c:26:29:a1:f1:15:70:23:f5:70:7d:
5a:dd:3b:4a:69:f5:ed:4e:14:3a:9a:c4:c1:8b:00:92:18:15:
b4:0e:9f:2c:05:89:ac:5d:bb:15:b8:fa:e7:2a:d3:3b:67:34:
d3:24:72:67:02:29:8c:ff:1d:44:5b:ad:0c:99:39:1c:66:97:
98:f0:60:80:1e:25:62:16:29:26:92:74:78:84:46:1c:07:98:
c4:33:26:6f:8a:0e:37:5c:94:ed:cc:f0:b8:77:c9:10:20:b9:
d3:1e:7e:ae:46:f4:ea:91:0e:8e:51:77:87:de:93:f8:f1:53:
c6:69:1c:34:25:80:bd:1c:1b:ac:54:20:0d:a0:bf:27:31:a7:
df:da:00:1d:b4:52:27:9c:dc:ee:c7:24:55:6d:8b:39:81:18:
95:67:dc:f5:b4:d9:07:a4:0f:3c:80:e3:0b:fb:ee:99:52:8f:
f4:0c:60:cf:e7:10:80:99:dc:61:c6:f5:6a:35:ad:4d:96:e0:
61:c5:28:3b:0f:92:70:ad:43:d2:13:1d:91:01:e4:ef:1a:d6:
f3:4c:cc:c5:82:81:b7:b7:75:30:19:f0:7a:dc:b4:2a:65:7d:
98:9e:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:48 2026 by rpki-client