Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xgvvw3QeImkgqI9ZTsZd1_B5jGI.roa
File: Xgvvw3QeImkgqI9ZTsZd1_B5jGI.roa (raw, json)
Hash identifier: OGW6j/CUI+Nj9eHFGE2AqnBdXijM7XHRE6RJ8MR+m+Y=
Subject key identifier: 5E:0B:EF:C3:74:1E:22:69:20:A8:8F:59:4E:C6:5D:D7:F0:79:8C:62
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0196119ED228A4CCEA84121B2870CA8F8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xgvvw3QeImkgqI9ZTsZd1_B5jGI.roa
Signing time: Wed 19 Aug 2026 09:36:29 +0000
ROA not before: Wed 19 Aug 2026 09:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 89.125.67.0/24 maxlen: 24
89.125.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 18:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:61:19:ed:22:8a:4c:ce:a8:41:21:b2:87:0c:a8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 19 09:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e0befc3741e226920a88f594ec65dd7f0798c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:88:0f:fd:51:93:14:f6:6d:da:0f:b3:e9:27:
1a:05:55:96:9d:d6:d7:f3:75:af:50:0a:0c:c6:bd:
8f:bb:f2:35:28:ed:0c:49:06:ff:56:e9:a0:98:c2:
0b:b0:21:b7:5e:ce:67:ab:66:9a:d7:55:48:6a:e3:
35:3f:4f:4b:5a:a8:b9:19:de:f1:7d:f5:f8:93:38:
2c:1d:d0:a3:af:6d:5b:f6:72:e0:63:dd:18:d6:09:
46:41:df:b5:e1:79:a1:3c:ef:e3:b1:cb:c7:f9:51:
d4:34:3e:1c:a8:8f:8a:01:ab:36:30:1c:45:36:3e:
f4:69:0d:8d:3e:40:47:19:db:28:55:8d:79:9c:0f:
38:bd:ee:1a:93:b9:19:dd:8b:89:47:37:cf:56:81:
7f:bd:91:32:f6:81:2f:4b:ee:7d:fb:dc:1a:d0:ad:
80:a3:5c:b3:9a:af:c1:c7:d6:d9:9b:fa:9f:dc:1e:
90:17:47:c0:33:5c:a1:e1:22:a7:0f:24:80:dc:d5:
1e:5e:99:7f:b1:2f:f5:db:42:03:e9:22:e4:15:45:
f5:2b:57:de:3c:6b:91:0f:59:e9:ef:95:f8:fd:07:
c3:e6:62:eb:28:2a:8e:17:60:db:49:e0:d9:03:e9:
c5:f5:04:b0:3d:85:6c:21:02:a9:8d:94:3d:93:de:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:EF:C3:74:1E:22:69:20:A8:8F:59:4E:C6:5D:D7:F0:79:8C:62
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xgvvw3QeImkgqI9ZTsZd1_B5jGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.67.0/24
89.125.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:dc:07:0d:ae:a8:01:4d:1b:09:9f:7e:6f:cb:9f:0b:f8:0e:
c7:2d:7e:eb:26:4b:33:04:1f:cf:02:3c:2a:5f:7e:04:7b:72:
d0:07:1f:ce:fa:a0:8b:86:0c:91:de:69:60:c4:c7:a9:9e:ad:
c1:5e:be:74:df:78:7f:ab:89:b4:b9:c0:8b:91:6d:83:09:21:
02:b4:bd:2f:6c:44:a3:72:91:57:be:b9:66:e8:b6:ce:ab:f5:
e1:31:b2:4c:71:24:1c:85:4a:08:7d:df:3e:e1:7c:12:89:19:
39:2a:75:ad:6e:7a:03:99:0c:d2:ae:38:a4:09:34:96:46:b6:
f4:6c:ab:f6:56:63:2c:58:1b:17:e7:6a:0a:c6:c8:f6:76:0c:
36:88:f0:1c:9e:cc:63:93:34:c8:9d:da:b7:8c:a5:ab:3b:79:
8a:c0:40:79:82:58:75:81:bb:86:0f:1f:a1:ad:4e:42:ce:e2:
25:f2:74:e0:ef:f0:ed:16:72:0d:5e:e6:ea:d3:63:d1:f9:36:
10:cc:b1:9d:05:62:25:1a:82:e4:1b:b1:35:c2:45:5c:c7:dc:
9d:20:15:9d:b9:76:8c:41:0e:25:06:53:0d:60:57:e0:84:2f:
82:b6:89:25:c1:da:a3:0a:8c:68:bd:be:99:95:a9:a8:ef:28:
77:59:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 03:50:23 2026 by rpki-client