Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XXyzX3gi9iWhVHFm59_QKLgwSSs.roa
File: XXyzX3gi9iWhVHFm59_QKLgwSSs.roa (raw, json)
Hash identifier: eGsN+Lz3slx2n2YgvogHZK8FHvuBD1q1L8dAp0fT7Wg=
Subject key identifier: 5D:7C:B3:5F:78:22:F6:25:A1:54:71:66:E7:DF:D0:28:B8:30:49:2B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1211919D99EA0CF61F05FA1BC564ACFFE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XXyzX3gi9iWhVHFm59_QKLgwSSs.roa
Signing time: Fri 09 Oct 2026 14:37:35 +0000
ROA not before: Fri 09 Oct 2026 14:37:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 31.207.7.0/24 maxlen: 24
89.125.13.0/24 maxlen: 24
89.125.37.0/24 maxlen: 24
89.125.43.0/24 maxlen: 24
89.125.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:19:19:d9:9e:a0:cf:61:f0:5f:a1:bc:56:4a:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 14:37:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d7cb35f7822f625a1547166e7dfd028b830492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:96:56:ce:2e:f5:32:9a:3d:13:81:90:e9:
b2:1b:02:25:fa:3c:b8:6a:d7:94:de:4e:48:a2:9f:
40:1c:0c:e5:24:1c:fb:af:33:f3:62:db:75:05:54:
56:85:e8:b2:cc:a3:7b:d8:42:a2:8e:9d:ea:0e:df:
f9:b9:15:74:e3:45:c2:5d:9c:d2:95:a1:ff:00:64:
f2:c3:d8:9e:48:50:35:9b:af:77:05:7c:fb:da:62:
71:26:65:bf:97:71:41:00:57:a5:82:e4:10:34:bf:
03:77:89:49:f1:e4:91:a2:c3:81:8f:b8:cf:3f:e8:
4a:f3:61:50:fb:ed:4d:85:dd:a3:59:90:85:3d:f1:
dd:5e:0e:be:36:ac:54:51:8e:10:1c:19:78:f4:97:
83:38:24:d8:8e:87:ae:2c:6f:14:33:1d:d3:9f:e3:
f1:10:76:5e:8a:1c:75:c4:41:16:4e:d1:b1:d9:3c:
92:07:7f:e6:97:47:de:ec:7f:17:14:92:db:5a:d2:
9a:0c:b9:0c:f2:4a:74:2a:ed:ea:65:c3:ab:73:05:
ca:59:4f:4e:ba:cc:d1:52:63:8c:ee:18:a4:f6:73:
7e:39:60:55:b2:41:8c:ec:3a:aa:d2:95:29:56:6b:
57:69:37:3e:0e:3e:ee:21:34:f8:06:ca:49:b9:f3:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7C:B3:5F:78:22:F6:25:A1:54:71:66:E7:DF:D0:28:B8:30:49:2B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XXyzX3gi9iWhVHFm59_QKLgwSSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.7.0/24
89.125.13.0/24
89.125.37.0/24
89.125.43.0/24
89.125.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7c:23:76:7d:ec:25:90:65:07:ab:d8:67:55:5a:ed:4b:ae:
7b:13:67:da:e9:57:f4:3e:52:56:fb:4a:44:29:0e:f8:5a:44:
51:66:15:a8:46:6d:ff:57:24:a1:33:68:13:b6:48:19:18:b7:
0d:38:71:3a:37:7d:0e:74:15:2a:69:09:dd:95:1b:22:33:df:
2d:4c:ef:a4:cd:88:b8:86:78:1f:3f:65:c1:7e:32:b2:f3:1b:
d9:ce:27:a2:8e:c5:7a:7f:75:be:1b:8b:7a:14:6a:d6:57:71:
9e:bf:dd:f1:17:1d:1b:cc:10:34:58:a8:1b:0f:ee:9c:4f:98:
87:78:cc:07:b1:a3:48:03:e4:68:01:e1:79:6d:4f:a7:64:64:
a8:5e:03:1d:6c:2a:ef:d9:e0:bc:e4:24:d7:55:10:5e:da:12:
03:32:5c:b8:0c:ef:21:a5:3f:97:f8:42:b6:1c:ab:0b:44:a4:
b4:91:13:0f:b7:a5:c1:53:d0:d1:df:34:b6:ab:0c:2c:50:46:
72:6c:e1:be:44:53:41:8d:5e:87:d8:02:cc:8e:fa:54:2b:14:
60:4f:85:58:e8:f2:36:18:25:94:b7:16:e2:72:4b:79:e2:f4:
d8:e8:35:4e:d5:94:21:d5:3d:53:f9:9c:27:6f:90:a5:94:dd:
bb:5d:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:50:11 2026 by rpki-client