Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/URnt0CVMWkzI2dZBn2G3eBoJo5E.roa
File: URnt0CVMWkzI2dZBn2G3eBoJo5E.roa (raw, json)
Hash identifier: 48lZf0YlJE2I3mxjRRM6NfVgZYApJslipM54X9iUUUY=
Subject key identifier: 51:19:ED:D0:25:4C:5A:4C:C8:D9:D6:41:9F:61:B7:78:1A:09:A3:91
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F1E57E38371332FEF6F2F4FE9DFF5A47C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/URnt0CVMWkzI2dZBn2G3eBoJo5E.roa
Signing time: Wed 01 Jul 2026 15:41:44 +0000
ROA not before: Wed 01 Jul 2026 15:41:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:57:e3:83:71:33:2f:ef:6f:2f:4f:e9:df:f5:a4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 1 15:41:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5119edd0254c5a4cc8d9d6419f61b7781a09a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:33:b7:10:a8:4f:df:0a:81:69:9c:26:ba:
e7:95:45:a7:31:ce:34:88:fd:08:9f:a3:ce:7c:48:
70:e7:a9:dc:fd:61:88:30:28:38:5c:c1:0c:8b:44:
49:c0:44:3f:61:64:84:6e:46:bd:53:f6:ea:dc:b9:
cf:fb:7c:37:0c:18:fc:27:c3:1e:c8:79:53:1b:91:
8a:5e:de:a1:86:56:f6:d7:e7:e2:ea:81:c9:4f:5f:
ff:03:75:b9:62:70:21:85:99:68:68:76:7a:6b:6c:
60:3d:84:15:60:ac:1a:3a:e5:b2:2a:16:d3:a1:c8:
fc:c0:f4:54:49:96:4b:20:c3:5d:f8:94:2c:76:f5:
28:0c:0f:7f:07:87:e2:70:f1:35:de:97:09:88:f7:
a6:a4:12:0e:57:e1:0d:16:32:08:48:cd:3a:30:e2:
d4:c7:41:a3:17:25:d4:81:3b:2b:24:04:fb:e7:9d:
8d:1e:86:d2:3f:96:0e:e3:7b:0b:ab:7d:cc:62:df:
ed:a7:f0:44:7d:21:7b:5e:b2:0c:d5:8f:f7:e3:18:
b6:de:21:a4:63:68:64:f8:d3:26:1a:f4:47:50:ba:
40:7c:99:0f:77:60:a8:6f:ad:bf:90:40:1f:4e:2c:
ed:5a:78:ba:45:31:74:16:f4:d1:7a:3d:fc:8c:24:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:ED:D0:25:4C:5A:4C:C8:D9:D6:41:9F:61:B7:78:1A:09:A3:91
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/URnt0CVMWkzI2dZBn2G3eBoJo5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
67:dd:1f:ef:cd:eb:8d:00:33:6b:75:a2:af:07:e4:22:ea:b7:
13:49:89:66:2d:53:ad:21:2b:f2:81:c3:cf:2c:5d:a0:4f:ba:
16:a8:a1:7c:a4:0a:c6:b6:7c:88:94:9c:6c:0d:9d:7c:99:88:
30:07:2e:45:c0:ac:fb:fc:81:57:40:b7:86:0c:15:6b:fb:bb:
ef:6b:91:12:ff:94:86:5f:1d:f7:89:c2:27:a3:c5:a8:63:d9:
8e:d7:c3:38:3f:02:fb:9e:1e:79:7f:18:12:e0:36:5b:15:95:
0c:3f:e9:6a:4d:be:3a:ff:80:60:ed:99:1d:20:39:da:52:e6:
6d:ea:7e:ce:35:8a:b5:b3:4a:6f:d1:4e:cc:79:8b:f0:c0:01:
57:6b:a7:88:a5:f5:ae:de:f9:a1:6f:c3:c9:c1:f8:f1:4d:2d:
84:ea:ce:3a:3d:34:b5:43:d8:30:33:9f:d1:a1:28:80:88:7d:
58:98:35:c4:ec:fe:2b:c1:12:61:f7:18:c2:b6:b9:e1:9b:af:
04:61:3f:89:80:79:cf:b7:fb:4f:a0:ba:f1:1a:18:79:2c:8c:
a3:b6:26:23:44:59:be:4c:13:b4:f2:dd:8b:5d:ca:c1:8b:f4:
26:f5:5c:cd:f3:cb:3d:82:f2:f4:f5:80:e6:a8:4f:96:ee:96:
ba:04:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client