Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_x57oQ9K6cftbSwPLHWraP8CHNQ.roa
File: _x57oQ9K6cftbSwPLHWraP8CHNQ.roa (raw, json)
Hash identifier: dQMAci9U7lB63dOlOKClpliFs/mnzI1NC3pwfEJZkH8=
Subject key identifier: FF:1E:7B:A1:0F:4A:E9:C7:ED:6D:2C:0F:2C:75:AB:68:FF:02:1C:D4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D4F78BDD7A65337809C57446B0B760FDE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_x57oQ9K6cftbSwPLHWraP8CHNQ.roa
Signing time: Thu 02 Apr 2026 18:33:26 +0000
ROA not before: Thu 02 Apr 2026 18:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40950
IP address blocks: 89.125.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:78:bd:d7:a6:53:37:80:9c:57:44:6b:0b:76:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 2 18:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff1e7ba10f4ae9c7ed6d2c0f2c75ab68ff021cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:5f:17:1d:ac:77:cd:28:ea:d2:38:2f:17:
da:4b:f8:03:0b:08:73:07:02:68:fd:bc:cf:c7:56:
00:8f:37:e9:ec:3b:77:f8:29:61:01:67:03:74:52:
a7:d2:54:3f:fd:c1:44:ba:cb:17:f7:2f:66:60:8b:
01:61:d6:b5:11:2f:18:89:df:8f:af:d7:8c:25:cc:
9d:e8:ad:eb:dd:74:db:ff:4b:99:47:95:70:be:ef:
ff:76:d6:91:16:ca:c8:6e:3f:9d:b7:26:7f:04:1b:
cf:d8:02:93:c4:a6:82:da:7e:e3:f7:c5:45:a1:e8:
a9:22:44:56:5e:50:49:26:de:1c:79:33:f3:ea:8a:
e7:4c:11:dd:1a:85:78:ba:42:0f:90:ed:0e:cb:8b:
6b:ba:36:0c:49:7a:35:7a:8d:40:ae:fb:79:20:38:
ee:01:d6:03:55:54:45:55:d0:89:7c:f6:39:20:a6:
b2:4b:cc:6e:04:c0:8b:cf:c5:f2:0e:04:76:c1:63:
9a:82:23:64:05:52:73:66:69:d1:82:d9:d0:a2:e0:
98:fd:74:6f:c1:2c:81:eb:98:3e:d0:3b:34:f8:a8:
ec:bb:83:9b:f6:ff:43:38:b7:72:23:2c:21:87:f0:
fb:0f:fc:b0:c0:65:df:71:02:94:3d:0f:9d:3f:a7:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:7B:A1:0F:4A:E9:C7:ED:6D:2C:0F:2C:75:AB:68:FF:02:1C:D4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_x57oQ9K6cftbSwPLHWraP8CHNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7e:73:1a:44:39:27:f4:d6:e2:ad:db:15:61:d8:96:f8:e0:
85:d8:aa:35:a2:f4:80:63:7b:fa:9d:60:dc:f7:39:4d:18:c5:
2f:24:b9:ea:f5:d3:bb:72:36:55:41:55:39:df:5f:e8:6f:96:
65:f1:08:49:1c:15:05:33:59:81:53:40:ac:76:2b:2f:05:6d:
30:e5:00:3f:61:8e:57:43:58:88:57:d2:20:22:74:ad:4c:93:
d1:6f:ae:88:4d:f0:37:32:7b:dd:c6:3b:b4:c4:9f:12:2a:72:
7e:d1:78:ac:47:30:e4:22:90:51:a2:e9:82:df:7f:9f:e7:34:
b1:72:04:35:b3:42:77:4e:3b:a9:f1:ff:3c:eb:96:69:78:ce:
f8:ac:ad:1a:ca:cb:ab:43:a2:7c:ea:d0:50:be:13:92:7f:3b:
51:36:4d:b3:56:8b:00:86:1b:0f:3a:b7:95:2d:62:c1:e5:b3:
22:12:4f:2a:a1:1a:8e:94:40:37:a2:8c:35:ea:2a:3f:c2:d4:
9f:03:73:73:71:b5:17:7e:cc:6d:4a:03:db:18:4d:a9:1e:66:
e6:06:c1:49:93:a5:24:fa:fb:ce:77:71:c4:94:16:c9:74:e4:
a9:e6:0a:87:c8:93:05:08:dc:9f:36:e0:7b:6c:4f:be:a4:2d:
31:76:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:38 2026 by rpki-client