Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eKWL689sw_R0FH5aL_R_5f9osow.roa
File: eKWL689sw_R0FH5aL_R_5f9osow.roa (raw, json)
Hash identifier: zibehl1IYvX/R/Ss615EkOoLeUgXZ/hkQhyEjCoFM4k=
Subject key identifier: 78:A5:8B:EB:CF:6C:C3:F4:74:14:7E:5A:2F:F4:7F:E5:FF:68:B2:8C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0F7FD2C9539D4E99F90D15725F1B50E2D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eKWL689sw_R0FH5aL_R_5f9osow.roa
Signing time: Thu 01 Oct 2026 15:02:39 +0000
ROA not before: Thu 01 Oct 2026 15:02:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 89.35.130.0/24 maxlen: 24
89.125.125.0/24 maxlen: 24
104.143.222.0/24 maxlen: 24
153.76.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fd:2c:95:39:d4:e9:9f:90:d1:57:25:f1:b5:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 1 15:02:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a58bebcf6cc3f474147e5a2ff47fe5ff68b28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:87:49:40:b7:3a:2c:04:42:74:36:02:09:
fe:f3:c1:4b:c9:96:60:69:96:a5:63:58:dd:b5:d2:
f7:9c:b5:b2:80:aa:4d:ba:54:4e:0f:30:32:62:13:
45:0d:30:20:97:8d:c3:00:3d:f6:10:77:d3:b2:aa:
c8:39:4b:0c:50:46:cc:2c:0d:8c:92:b6:db:89:5a:
d7:06:f2:b6:7c:a1:e0:10:60:55:79:65:5e:f3:50:
1e:53:89:be:82:07:d2:75:f8:45:b0:c1:07:17:4a:
00:75:5e:e2:d0:e9:16:d0:10:94:c1:e5:f4:b3:8c:
80:77:e4:e4:2c:f2:00:2b:e8:9b:85:73:47:54:cc:
10:71:06:2c:d9:8b:c1:aa:c3:8c:0d:7f:75:a6:09:
cf:fa:71:5c:0f:18:c0:79:43:6a:2c:a7:21:60:53:
b1:01:23:12:20:6a:bf:86:35:50:a8:7e:19:07:1d:
56:06:35:66:d2:9b:bf:44:c7:f1:63:41:e8:de:45:
00:ce:01:da:d6:a5:d8:62:1d:39:5b:be:89:e2:fc:
6c:fd:a4:c0:f1:a5:34:3b:cd:ab:5e:4d:17:a2:90:
8b:9d:60:07:b0:2f:76:75:d0:b1:b4:62:0b:b3:12:
7f:af:0f:52:20:9f:8e:84:af:4f:de:d7:16:fa:84:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A5:8B:EB:CF:6C:C3:F4:74:14:7E:5A:2F:F4:7F:E5:FF:68:B2:8C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eKWL689sw_R0FH5aL_R_5f9osow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
89.125.125.0/24
104.143.222.0/24
153.76.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b7:dc:9e:32:eb:65:a8:4d:d7:d7:59:a7:a8:6c:8d:fe:5b:
52:35:43:e2:54:19:ce:4d:53:24:5b:de:13:60:c2:d2:d9:42:
4c:60:45:75:38:da:60:c9:4a:fe:7e:81:53:b0:9b:93:e7:7e:
1a:94:60:0d:5e:ff:42:22:f1:b2:4c:1f:15:2a:c8:48:a0:46:
e6:e3:0d:42:c6:9a:c8:6f:ce:f6:63:fc:5f:b8:e7:c8:d8:f6:
bc:a9:d1:6e:89:6c:73:74:68:42:c7:f2:ae:fd:17:ee:b1:3f:
45:45:97:26:3d:d1:36:5d:ce:58:8d:85:d7:b8:64:20:0e:46:
b6:76:f8:3e:83:24:52:78:54:d5:36:19:f5:94:19:f1:52:3a:
53:5b:ad:ef:9a:8c:bb:cb:05:c9:2f:cb:4f:09:63:e3:65:ff:
53:14:96:a0:db:3e:50:df:71:75:83:e9:d2:35:e6:bc:19:57:
41:dc:5a:63:26:bc:92:8b:53:79:b7:be:c9:2e:69:dc:3f:10:
96:ce:61:07:1a:b0:67:7f:90:18:43:43:19:9b:bc:43:85:c8:
66:c4:20:21:e2:af:b9:05:73:d5:14:7d:b2:26:1e:a7:c1:6c:
1c:ce:7d:5c:4e:76:d1:13:28:f6:72:e6:fd:65:b7:03:4d:95:
8c:07:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:15 2026 by rpki-client