Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ke7rKdTZ7_0aIhNewUdnkDI52AY.roa
File: ke7rKdTZ7_0aIhNewUdnkDI52AY.roa (raw, json)
Hash identifier: 8Ws6KjmaSSOel0XFYEh+JZEcRDk5sPlid37uB5jP0vo=
Subject key identifier: 91:EE:EB:29:D4:D9:EF:FD:1A:22:13:5E:C1:47:67:90:32:39:D8:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A04BBA903C359528B372FD5C2ADF8EBCE7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ke7rKdTZ7_0aIhNewUdnkDI52AY.roa
Signing time: Sat 29 Aug 2026 04:15:12 +0000
ROA not before: Sat 29 Aug 2026 04:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 89.125.127.0/24 maxlen: 24
93.115.173.0/24 maxlen: 24
140.225.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:ba:90:3c:35:95:28:b3:72:fd:5c:2a:df:8e:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 29 04:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91eeeb29d4d9effd1a22135ec14767903239d806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:8b:3a:59:4a:d6:17:24:3c:23:c1:db:02:
ef:86:03:e4:d7:97:ca:5d:a2:2b:22:b9:63:05:d4:
e0:a1:86:ef:66:be:69:70:8b:eb:f0:d0:82:eb:cc:
02:a1:12:03:a9:1e:02:01:66:1d:b6:ec:e8:e1:8e:
93:de:77:b7:e6:f7:07:d6:9f:1f:bf:51:47:d1:66:
1d:d4:b8:1f:79:1b:4e:55:82:b4:e2:5f:90:65:80:
b0:27:11:a2:64:65:b2:14:10:68:20:0d:cf:d2:06:
42:72:5f:20:6a:11:fd:0f:b0:a9:b1:c8:26:70:9e:
28:b6:1d:65:bb:3c:f1:a2:b6:77:a9:3a:cd:44:f5:
53:9b:2f:6c:dd:bf:94:ee:b7:a8:9c:3b:8f:f4:e3:
e8:c9:81:35:2b:58:c3:ee:44:06:1d:2f:36:92:7e:
b9:2b:af:1b:24:0a:92:bd:48:24:e2:29:ba:95:5d:
7a:23:e2:be:25:3c:50:67:79:18:d7:16:07:1e:0c:
74:b5:ee:b5:cb:c5:62:34:35:d5:e8:0c:b0:c4:a4:
a6:b8:0a:f1:98:ba:27:7f:cd:09:86:a7:db:ed:60:
54:76:2c:1d:34:f7:c6:17:38:fa:91:07:61:c9:19:
92:38:60:b6:67:42:ef:07:20:e0:88:b8:98:bb:9d:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:EB:29:D4:D9:EF:FD:1A:22:13:5E:C1:47:67:90:32:39:D8:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ke7rKdTZ7_0aIhNewUdnkDI52AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.127.0/24
93.115.173.0/24
140.225.215.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cc:a3:df:17:2b:ce:e7:8f:b3:d8:76:32:9b:b8:8a:a9:00:
b4:4d:75:5c:bc:75:0e:a4:63:1d:ec:42:68:68:23:6a:45:df:
02:2f:d1:67:87:26:03:8d:a2:e3:7f:c0:2a:79:bf:af:2d:4b:
26:c1:98:21:34:f3:c5:cf:07:b4:7c:c0:02:46:20:1f:6c:21:
82:e2:52:9a:4c:47:da:c9:e1:e5:88:45:d4:3c:b4:58:b8:ee:
d8:70:35:4c:d9:3f:cf:99:ae:9e:19:46:55:aa:67:a5:d9:1a:
61:1e:01:a5:77:17:5c:92:28:19:b6:ce:bf:e0:43:b9:e1:b8:
c1:4e:bd:1d:e8:db:55:95:1a:5f:bd:d7:e0:60:78:10:a1:03:
d2:c5:96:6e:8f:73:50:c7:e9:54:de:95:44:7b:0f:a1:db:75:
4f:df:58:8d:49:56:35:9e:3f:62:bb:f0:b2:4b:ad:3a:a8:ad:
30:82:3a:e1:4f:51:77:66:76:ea:53:45:f0:c9:08:a6:c9:a6:
a2:b5:95:13:bf:da:3e:62:ce:c4:aa:60:a8:58:b1:7a:29:d0:
1d:f3:fc:8a:04:a6:f3:9b:a7:c1:62:01:0b:82:ee:00:f6:ce:
2e:b2:6b:c5:3d:49:e9:31:ce:8a:be:f0:ca:61:51:7c:91:78:
e5:e6:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:38 2026 by rpki-client