Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cR2RzaqmEMwyp-f3dttaAamP-Ds.roa
File: cR2RzaqmEMwyp-f3dttaAamP-Ds.roa (raw, json)
Hash identifier: hQOpYPbFRc/s02OWJOZ2RZEsg3ETuec8Cpq1pqjP0hA=
Subject key identifier: 71:1D:91:CD:AA:A6:10:CC:32:A7:E7:F7:76:DB:5A:01:A9:8F:F8:3B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D6348C3E3A27ECC27EA514F2A30897FF6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cR2RzaqmEMwyp-f3dttaAamP-Ds.roa
Signing time: Mon 06 Apr 2026 14:53:26 +0000
ROA not before: Mon 06 Apr 2026 14:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33185
IP address blocks: 89.125.4.0/22 maxlen: 22
89.125.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:48:c3:e3:a2:7e:cc:27:ea:51:4f:2a:30:89:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 6 14:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=711d91cdaaa610cc32a7e7f776db5a01a98ff83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:b1:f8:51:66:bb:3f:d6:d7:43:cf:60:91:
35:9b:75:a1:18:16:cd:df:f8:3f:f3:57:66:26:23:
2b:8a:55:ed:36:86:2f:52:33:a5:48:54:58:07:4a:
5e:61:b5:35:62:cf:61:ee:ae:e2:cb:8f:6a:d6:49:
cb:65:2e:38:c8:be:15:de:fc:f0:6a:02:78:f4:36:
4b:a1:46:4d:e0:24:9f:c1:04:0a:ff:e3:17:11:86:
9f:df:bc:eb:be:f6:db:83:6b:61:00:bd:54:ff:e5:
d4:54:a4:a9:a1:8f:dc:07:2f:30:d9:5d:7d:6e:c4:
9d:bf:26:20:93:85:70:6c:0d:fe:32:3f:62:9b:bd:
2a:a1:50:8e:38:d7:00:d7:ab:b3:f8:05:87:67:f4:
78:28:f6:f4:91:e8:81:af:74:f9:7a:18:ce:5b:07:
a0:f5:a1:8d:c6:94:b1:85:ae:61:03:ba:70:e5:9b:
ec:03:11:4f:57:7f:4a:d5:56:8c:49:45:15:15:94:
47:b3:c0:e0:f4:35:14:a4:2e:7d:a7:97:8a:a1:8a:
50:fb:71:21:9f:62:2c:1f:07:9c:e8:c8:a3:37:27:
82:35:46:fa:a3:6c:00:87:96:02:88:71:31:b3:87:
0f:17:95:96:0c:b9:99:a7:54:f0:cd:4e:3d:b8:89:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1D:91:CD:AA:A6:10:CC:32:A7:E7:F7:76:DB:5A:01:A9:8F:F8:3B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cR2RzaqmEMwyp-f3dttaAamP-Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.4.0/22
89.125.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:bb:a2:c1:7d:a5:9c:2e:1f:24:20:97:3f:aa:fb:f6:43:67:
5a:60:6b:c0:dd:d6:bc:ec:d8:bb:93:fa:f9:5e:44:00:6f:28:
4a:25:d1:e8:d2:53:1c:96:44:fa:0c:48:f1:e7:2a:e5:f0:21:
01:0e:92:b6:8e:06:f9:c9:b2:36:ec:cf:4b:50:16:1e:0c:46:
e9:c0:42:ba:d3:5f:36:52:ed:c9:4d:fc:f0:2b:40:04:24:93:
e1:bb:21:6d:9b:4f:8f:eb:d3:9e:ee:f0:ad:41:55:41:56:39:
98:6e:fd:e6:ed:05:c6:49:47:92:ac:ad:1f:9f:3e:4b:02:52:
ce:fe:a1:41:21:88:a5:6b:09:64:f1:30:57:08:cc:9c:46:da:
b4:d5:e9:cf:86:4a:6d:fa:f8:a2:94:6f:94:62:c8:d9:fa:bf:
c9:c9:b5:88:11:86:e3:c8:16:51:e8:62:80:ce:c4:c7:1a:98:
98:5a:6e:51:64:70:3d:38:e0:c4:11:ac:25:57:f1:fb:ed:2e:
2c:c4:d4:fb:4e:15:22:c3:1e:5c:a0:ad:85:60:94:cd:f2:3e:
5b:15:59:de:9a:c0:c1:ba:65:e8:1b:28:f6:88:7f:eb:05:6a:
e2:f0:9e:8a:e4:f0:4e:31:71:22:78:39:2a:a1:ee:1a:4f:d4:
84:fd:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:32:32 2026 by rpki-client