Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YNXpsu2INwfVgLrn8bBP45ox0SM.roa
File: YNXpsu2INwfVgLrn8bBP45ox0SM.roa (raw, json)
Hash identifier: c6gcvBuWF/OC9PqhMmtFVd5txrUl8uXaViDh6ImCroE=
Subject key identifier: 60:D5:E9:B2:ED:88:37:07:D5:80:BA:E7:F1:B0:4F:E3:9A:31:D1:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A11F79EDC90937E6B6CD04D8AE0061EF20
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YNXpsu2INwfVgLrn8bBP45ox0SM.roa
Signing time: Fri 09 Oct 2026 07:04:06 +0000
ROA not before: Fri 09 Oct 2026 07:04:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30893
IP address blocks: 89.125.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:79:ed:c9:09:37:e6:b6:cd:04:d8:ae:00:61:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 07:04:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60d5e9b2ed883707d580bae7f1b04fe39a31d123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:9f:1a:3f:7a:73:bc:18:c9:b5:f4:cc:40:
85:5c:29:c4:19:8d:01:d2:3f:63:11:29:cb:c1:b6:
b5:14:b4:0b:47:18:21:6c:4d:47:15:c7:d5:82:2b:
8d:d1:60:25:3c:63:92:22:e6:e1:76:cd:96:57:96:
53:5a:b8:1e:ac:5f:47:61:d9:7c:7e:37:75:5d:d2:
e8:e3:cd:08:0e:df:3b:1d:ca:ab:f0:ce:9b:68:4e:
e3:e0:9d:99:a3:3e:41:6b:41:b9:a1:e4:d6:b2:f3:
a7:13:b1:ba:e4:55:2d:e2:2a:7f:8e:09:16:9f:8e:
f7:e1:0f:6e:f2:ec:1c:c6:9f:e6:a5:af:70:8f:31:
5e:f9:83:70:02:9c:52:1e:92:ca:80:88:41:91:50:
c3:58:81:f3:a2:df:83:45:03:9d:df:3c:bf:7d:00:
27:14:91:bc:6a:ec:4d:92:12:89:e6:93:e2:d7:66:
a9:d1:e6:f2:05:7a:c8:5e:1a:34:00:fd:a1:24:05:
7d:e3:de:69:1c:3e:6e:30:4a:3f:c1:b0:39:cf:8c:
cd:e7:7a:b0:78:66:37:a3:82:95:5e:1d:25:98:79:
e0:9b:00:0b:c2:bc:f4:a8:1b:46:9c:c4:e5:6c:c4:
31:1d:0f:e0:f6:af:6e:dc:ab:34:67:79:38:50:a5:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D5:E9:B2:ED:88:37:07:D5:80:BA:E7:F1:B0:4F:E3:9A:31:D1:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YNXpsu2INwfVgLrn8bBP45ox0SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ca:b9:e6:b4:29:b1:bc:19:a2:bf:19:14:8a:82:4b:48:15:
86:b0:af:c9:23:e7:39:82:a3:21:1f:38:0a:39:8e:3d:ec:03:
6c:a7:91:ed:09:c0:ab:20:95:f9:d1:94:59:c4:cc:5a:df:15:
fd:3e:0b:92:d9:3a:59:50:cd:5c:7e:68:90:6b:ad:ba:4c:20:
ce:60:5f:54:f4:31:26:f1:2c:38:f1:fb:cc:e3:74:c8:7b:5a:
42:87:10:6d:ab:5e:77:bf:fc:b0:0c:1c:f8:06:89:74:71:e6:
08:a1:be:69:f2:b1:ae:ac:c2:8f:fb:1b:fd:54:9a:e3:45:ff:
76:31:e7:1c:c3:e9:76:a8:dc:e1:a0:c1:14:3b:1a:57:92:b6:
da:b4:b3:5e:3b:02:0b:46:6a:2d:d0:e7:96:8f:45:bd:38:00:
17:08:81:e9:5f:ff:2d:b4:c7:26:ed:e1:3f:6f:5f:a3:26:36:
ad:dd:70:19:52:eb:76:17:4f:cc:d5:b0:33:c6:fb:d4:88:1a:
e9:44:ee:93:35:76:23:b7:f7:2c:bf:22:16:39:bb:60:d7:54:
0e:fb:79:b8:15:22:61:f8:c2:17:2d:0e:40:94:95:d5:a2:34:
7e:c9:ea:7f:83:77:de:34:4f:2d:2f:7c:c1:00:36:f0:8a:b6:
d5:47:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:22 2026 by rpki-client