Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cdUvplnzKRZVFZ-oMZ8DsOPBhGw.roa
File: cdUvplnzKRZVFZ-oMZ8DsOPBhGw.roa (raw, json)
Hash identifier: kBroa1L1ASUsw2ppfOh58O2zyOkqqd/pwfPB/VziEtQ=
Subject key identifier: 71:D5:2F:A6:59:F3:29:16:55:15:9F:A8:31:9F:03:B0:E3:C1:84:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF72E417571D825F2FA271D6FECD5849E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cdUvplnzKRZVFZ-oMZ8DsOPBhGw.roa
Signing time: Wed 12 Aug 2026 18:13:51 +0000
ROA not before: Wed 12 Aug 2026 18:13:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 89.125.127.0/24 maxlen: 24
93.115.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:2e:41:75:71:d8:25:f2:fa:27:1d:6f:ec:d5:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 12 18:13:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71d52fa659f3291655159fa8319f03b0e3c1846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:f5:ff:5a:7e:8b:7e:58:7e:d9:32:66:35:
16:3b:bb:40:9b:b2:9d:5f:73:c7:d2:6b:24:da:b2:
3c:45:cb:cf:cf:ee:f9:56:70:65:02:ee:1c:d0:6b:
93:9e:83:c4:47:b1:3f:fa:fc:e9:23:87:cd:7d:05:
78:90:b9:83:4d:9b:7c:9f:46:74:fd:90:36:00:dc:
03:b8:ed:5d:d6:be:c8:76:30:93:83:fa:fa:e9:8d:
5a:df:df:74:93:b4:f7:33:20:9b:87:24:64:fa:46:
3b:e5:0d:dc:f0:3d:c7:a4:47:71:12:65:3c:5d:76:
79:b2:f8:28:e4:35:5c:86:9b:95:1c:a5:a4:e1:83:
df:14:dd:d1:86:22:da:3e:59:e0:6c:a9:a7:8c:c0:
b3:d6:69:86:63:5c:a3:5b:f0:bb:41:7f:aa:e8:a5:
2d:3a:8b:73:3d:e6:6e:c5:58:1f:df:9e:22:d6:2a:
13:5f:7d:36:89:8d:6e:7b:50:70:a5:1d:e3:35:97:
40:0b:fc:94:b0:8b:ff:9e:f0:1b:bb:d9:e9:0e:97:
2a:11:f5:7d:70:18:65:4d:5a:ed:cc:15:dc:bd:3e:
0b:d5:c3:93:66:4d:41:97:ab:33:06:09:01:fa:6b:
4f:d4:a2:67:9a:d0:11:e2:b2:04:87:1b:32:15:6d:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:2F:A6:59:F3:29:16:55:15:9F:A8:31:9F:03:B0:E3:C1:84:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cdUvplnzKRZVFZ-oMZ8DsOPBhGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.127.0/24
93.115.173.0/24
Signature Algorithm: sha256WithRSAEncryption
77:65:a6:79:ba:d9:87:60:8a:42:97:76:85:47:3e:2b:2c:0d:
55:a4:96:0d:1f:a7:4e:37:46:71:8c:eb:29:29:e5:d8:7e:10:
d9:e9:5b:89:26:2c:31:03:8b:a6:fc:69:03:29:31:36:ae:c4:
7c:a5:54:58:db:c6:51:85:93:6b:32:40:54:b3:73:82:84:1c:
41:24:01:a5:e4:6f:62:8c:bb:ba:33:b6:45:61:91:ca:a1:46:
4b:b9:1e:f0:40:2c:4a:46:d4:fb:94:bc:b6:0c:5f:1f:03:ae:
27:d4:87:90:83:3c:66:ec:d9:9a:b0:9f:2e:4c:d8:f9:5f:8c:
b2:21:48:77:c2:a7:f1:26:d5:6b:fe:b0:a4:49:e8:aa:8b:5e:
d9:ba:7c:ab:ce:aa:1e:06:50:7d:07:92:80:a2:73:df:ba:9d:
11:12:c2:7c:55:57:0b:fc:b5:f3:16:90:56:ff:1d:d5:2a:a4:
cd:3b:0c:af:55:6e:00:22:4f:43:d4:2e:96:43:d4:57:96:da:
35:e0:43:88:96:55:86:0d:18:81:ed:3c:9f:4b:77:99:4a:1a:
2c:f0:a1:37:6e:51:5a:d6:13:ec:4a:8f:62:84:ae:62:23:16:
42:50:1e:8a:9c:fa:f6:dd:b4:3c:4c:77:37:79:7f:f3:56:7c:
fc:8b:af:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/3LkF1cdgl8vonHW/s1YSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODEyMTgxMzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWQ1MmZhNjU5ZjMyOTE2NTUxNTlmYTgzMTlmMDNiMGUzYzE4NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIf1/1p+i35YftkyZjUWO7tAm7Kd
X3PH0msk2rI8RcvPz+75VnBlAu4c0GuTnoPER7E/+vzpI4fNfQV4kLmDTZt8n0Z0
/ZA2ANwDuO1d1r7IdjCTg/r66Y1a3990k7T3MyCbhyRk+kY75Q3c8D3HpEdxEmU8
XXZ5svgo5DVchpuVHKWk4YPfFN3RhiLaPlngbKmnjMCz1mmGY1yjW/C7QX+q6KUt
OotzPeZuxVgf354i1ioTX302iY1ue1BwpR3jNZdAC/yUsIv/nvAbu9npDpcqEfV9
cBhlTVrtzBXcvT4L1cOTZk1Bl6szBgkB+mtP1KJnmtAR4rIEhxsyFW1lgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHHVL6ZZ8ykWVRWfqDGfA7DjwYRsMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvY2RVdnBsbnpLUlpWRlotb01aOERzT1BCaEd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWX1/AwQA
XXOtMA0GCSqGSIb3DQEBCwUAA4IBAQB3ZaZ5utmHYIpCl3aFRz4rLA1VpJYNH6dO
N0ZxjOspKeXYfhDZ6VuJJiwxA4um/GkDKTE2rsR8pVRY28ZRhZNrMkBUs3OChBxB
JAGl5G9ijLu6M7ZFYZHKoUZLuR7wQCxKRtT7lLy2DF8fA64n1IeQgzxm7NmasJ8u
TNj5X4yyIUh3wqfxJtVr/rCkSeiqi17ZunyrzqoeBlB9B5KAonPfup0REsJ8VVcL
/LXzFpBW/x3VKqTNOwyvVW4AIk9D1C6WQ9RXlto14EOIllWGDRiB7TyfS3eZShos
8KE3blFa1hPsSo9ihK5iIxZCUB6KnPr23bQ8THc3eX/zVnz8i6/m
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:16 2026 by rpki-client