Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZhVun04pMU2b1cc-QIbdUqD5CNw.roa
File: ZhVun04pMU2b1cc-QIbdUqD5CNw.roa (raw, json)
Hash identifier: PfBFnvyP43T5Fy7DxQe0V8uPOHwHGUG50Dx5kUdXxcQ=
Subject key identifier: 66:15:6E:9F:4E:29:31:4D:9B:D5:C7:3E:40:86:DD:52:A0:F9:08:DC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0F22A1A21974AAE51DC9A4B1E52409291
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZhVun04pMU2b1cc-QIbdUqD5CNw.roa
Signing time: Wed 30 Sep 2026 11:54:00 +0000
ROA not before: Wed 30 Sep 2026 11:54:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 89.125.21.0/24 maxlen: 24
89.125.22.0/24 maxlen: 24
89.125.23.0/24 maxlen: 24
89.125.215.0/24 maxlen: 24
89.125.216.0/24 maxlen: 24
89.125.217.0/24 maxlen: 24
89.125.218.0/24 maxlen: 24
89.125.219.0/24 maxlen: 24
89.125.220.0/24 maxlen: 24
89.125.221.0/24 maxlen: 24
89.125.222.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
2a13:4980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:2a:1a:21:97:4a:ae:51:dc:9a:4b:1e:52:40:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 30 11:54:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66156e9f4e29314d9bd5c73e4086dd52a0f908dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:df:79:45:59:54:97:9d:b5:a4:1c:91:17:
a5:cb:5c:29:fa:93:51:cd:9d:76:08:1c:4c:f2:2c:
8b:7a:70:fc:7e:92:c8:e1:40:a7:2e:c6:8f:12:21:
55:81:43:0c:3c:57:65:6a:11:f7:b5:68:47:c1:a1:
cd:39:ab:a4:cf:65:86:0f:ce:c0:ba:92:bc:88:74:
8b:39:2f:2e:4f:e2:30:f1:37:65:92:d8:a8:f8:29:
19:d8:30:4f:9b:69:95:64:f7:e2:38:a2:cc:b1:ed:
d9:2d:d3:87:a6:35:f3:57:9f:0d:92:a6:d0:fe:8a:
f3:d8:96:34:0c:f9:e4:44:45:60:09:ee:b5:1d:15:
72:9b:4c:c9:6b:cc:d7:ad:3e:a0:bb:e0:d4:d4:28:
91:dc:93:fb:e5:00:2d:a1:30:5a:7e:b6:0b:7d:22:
02:b1:e1:7e:65:3b:96:0c:33:3b:da:24:b1:96:67:
ad:8d:a0:87:1e:13:1c:12:7c:6a:b5:31:9a:30:51:
a5:ba:38:48:62:41:a1:35:95:de:23:0a:7b:99:17:
c7:5c:ea:03:72:71:b2:4d:28:33:50:64:f7:ef:af:
1a:2c:35:36:41:3c:b3:16:4d:dd:05:77:f6:34:96:
23:59:e0:fe:f0:c1:fb:88:14:b8:be:b4:51:d1:18:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:6E:9F:4E:29:31:4D:9B:D5:C7:3E:40:86:DD:52:A0:F9:08:DC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZhVun04pMU2b1cc-QIbdUqD5CNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.21.0-89.125.23.255
89.125.215.0-89.125.222.255
176.126.174.0/24
IPv6:
2a13:4980::/29
Signature Algorithm: sha256WithRSAEncryption
12:1c:6e:dc:c6:08:79:e4:64:bc:53:55:db:7f:84:01:59:5e:
d2:99:e1:a9:0e:c3:a1:05:5e:ab:9f:1c:ee:55:44:a6:63:c8:
21:f0:70:7e:ab:d0:96:41:c5:01:1d:ec:76:5f:cf:15:50:8b:
d5:11:99:91:9e:a7:e6:80:b0:a8:71:09:8d:c2:0e:74:b3:ec:
6c:8e:48:c4:8f:5d:4b:f5:8c:94:ba:18:5c:34:94:7e:a0:53:
2f:ba:7b:f2:cd:c1:00:78:38:1a:f0:da:15:e3:9b:e8:bc:e5:
80:58:53:e8:9b:02:57:ed:3c:b5:37:96:8b:c4:be:bd:45:bc:
56:22:dc:07:de:6d:e5:e7:15:d3:a7:cc:2a:6c:8b:f1:85:1f:
46:2b:28:fe:63:6a:f5:82:d0:d8:22:ba:1a:b9:d5:9b:b6:a5:
5b:4b:ac:bf:26:c7:5a:16:87:88:7b:d9:1a:0c:aa:40:cd:86:
b1:66:87:90:00:e7:b1:a8:2a:68:38:c2:b9:f7:d7:2c:b3:2d:
31:cf:0d:8a:8b:bc:3e:2d:99:15:82:a7:f1:9f:dc:7b:ef:47:
8a:b0:bf:a1:89:09:6e:4d:bf:a1:06:a0:bb:6a:0c:1e:5a:48:
6d:68:9f:7c:ff:11:6a:aa:6f:d7:9d:ce:80:61:63:89:b3:7c:
2b:28:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:19 2026 by rpki-client