Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hbURJUu4_yxgbGU8JO_nip33W5o.roa
File: hbURJUu4_yxgbGU8JO_nip33W5o.roa (raw, json)
Hash identifier: LmDh5eWIXEkLP1WqnQzqarb75/Ey31gelB3Y20imyzo=
Subject key identifier: 85:B5:11:25:4B:B8:FF:2C:60:6C:65:3C:24:EF:E7:8A:9D:F7:5B:9A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0A3E45F24A78185E95CCE2F3609E87297
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hbURJUu4_yxgbGU8JO_nip33W5o.roa
Signing time: Tue 15 Sep 2026 07:07:27 +0000
ROA not before: Tue 15 Sep 2026 07:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 89.125.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:e4:5f:24:a7:81:85:e9:5c:ce:2f:36:09:e8:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 15 07:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85b511254bb8ff2c606c653c24efe78a9df75b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:a3:f6:7c:3f:10:d0:3e:4e:ae:ad:d5:99:
1e:e6:b8:ea:c7:ee:49:c3:d4:4a:ae:1c:38:1f:72:
3a:02:9d:12:d3:90:20:ea:15:e5:84:59:ad:b0:04:
da:02:b3:16:3a:27:a1:5d:e1:64:f7:cc:f7:b4:89:
5e:b1:de:37:a7:3a:06:d2:e4:11:72:34:1e:a8:7a:
fa:82:c9:8f:bc:6d:89:ae:e0:3f:6e:3a:27:45:44:
73:e9:30:b6:c1:6b:e2:a9:2f:e1:9f:3b:9b:2f:db:
e9:56:a0:7f:8f:6e:76:8b:9a:26:fc:c9:0a:89:66:
f6:b1:b8:9d:6d:ce:3d:32:d8:01:75:10:54:4d:a7:
86:e1:69:9b:34:1f:55:26:26:27:0c:46:24:27:3f:
58:7d:5b:2f:c2:d8:1c:6f:73:0b:77:00:ae:40:c3:
19:69:b5:f5:47:c9:c6:3f:8a:db:3c:06:16:3a:c9:
cf:38:96:bd:8a:02:0e:bc:07:9c:7a:1e:38:a7:64:
ba:09:6c:72:eb:4f:aa:5b:e8:db:65:ad:98:7e:a3:
fe:6c:42:a6:62:a6:39:c8:a6:3e:d1:7a:bc:89:25:
4c:26:b1:6b:26:80:88:f0:cd:be:b8:97:61:26:85:
7c:f7:d2:59:f7:ea:33:07:9e:10:a0:19:10:03:09:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:11:25:4B:B8:FF:2C:60:6C:65:3C:24:EF:E7:8A:9D:F7:5B:9A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hbURJUu4_yxgbGU8JO_nip33W5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.43.0/24
Signature Algorithm: sha256WithRSAEncryption
52:14:4d:a2:a1:72:b5:95:5b:bf:ae:02:f8:82:40:c0:76:62:
fe:90:c5:d5:1b:b3:97:1a:51:23:ae:12:98:68:8b:e8:54:f6:
a1:45:e1:2c:44:4b:45:61:38:33:e6:80:fa:72:83:5d:a2:ce:
2b:ce:b0:63:8c:20:75:4b:d7:4d:7f:4e:36:c9:1d:13:a7:a3:
ca:30:0b:63:a3:97:64:d2:a4:6d:99:6e:39:c0:c6:11:1a:4e:
58:b7:e7:47:ed:b2:d9:80:5d:75:2a:79:7a:70:b3:44:01:b8:
c3:c9:00:2c:2f:03:4d:ce:64:67:d8:f2:9b:d1:15:25:97:cb:
e4:34:86:83:a1:ad:48:77:c9:ec:ba:ea:b1:f5:db:cd:cf:d9:
55:08:4d:bf:7f:c8:a9:cd:f5:e5:2a:33:a5:e0:ad:07:20:b5:
5c:ed:7a:2f:f4:c0:97:ef:4d:b3:96:f6:e1:ca:80:88:0d:5d:
97:8e:ae:ee:f0:27:ec:a4:f7:be:10:5f:5d:93:10:4f:3c:7a:
af:fd:a9:ab:d5:64:a4:80:fa:df:d2:b0:6b:dd:c8:90:9a:f2:
42:dc:29:2d:30:e9:75:a9:92:4a:9c:26:d4:ec:b2:81:b9:04:
8f:ce:79:22:26:28:c6:3e:96:e8:3d:fd:5c:e9:a8:f2:10:07:
84:d3:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:39 2026 by rpki-client