Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/leQqoBFYjK28ZlA9FMHpO1W46KI.roa
File: leQqoBFYjK28ZlA9FMHpO1W46KI.roa (raw, json)
Hash identifier: sdTTxL2i22HWi3XY5LuFeJf+t/o0EkzmBInNuyckmb8=
Subject key identifier: 95:E4:2A:A0:11:58:8C:AD:BC:66:50:3D:14:C1:E9:3B:55:B8:E8:A2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019CB96FF8AFF245673A1DFCD28D00738DCD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/leQqoBFYjK28ZlA9FMHpO1W46KI.roa
Signing time: Wed 04 Mar 2026 15:20:48 +0000
ROA not before: Wed 04 Mar 2026 15:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 89.125.78.0/24 maxlen: 24
89.125.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:6f:f8:af:f2:45:67:3a:1d:fc:d2:8d:00:73:8d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 4 15:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95e42aa011588cadbc66503d14c1e93b55b8e8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:e1:25:34:d3:9f:d5:cf:04:63:da:18:3e:
b7:1d:8b:4c:74:56:dc:5d:21:aa:6e:d8:4f:7c:e2:
58:72:6b:c6:3a:73:8e:ec:36:fa:14:ec:ee:5c:7a:
2c:44:8c:37:bb:95:b8:e1:aa:79:7d:0f:d2:e1:f0:
de:e7:b7:7e:2c:c9:55:cf:5a:e2:d8:1f:1c:e7:de:
74:66:24:c4:7e:c7:5d:8f:b7:4b:c2:7a:32:a6:69:
6b:a5:b3:ab:13:88:6f:82:f9:c6:5b:10:a1:0e:ff:
db:4c:14:4c:fe:b4:c2:71:ee:61:21:42:00:6a:04:
d0:25:32:be:c7:3e:bb:45:3a:18:c4:1f:28:c2:bc:
74:b0:32:cb:5d:4f:5f:39:bb:d0:e6:83:b6:ce:26:
4d:d8:1d:c6:36:35:86:ff:b9:71:ab:0d:ea:e3:1d:
ca:b8:0e:b7:6d:c1:41:63:bb:9d:19:34:02:91:e5:
de:98:64:a6:70:82:a6:86:5d:f4:59:d4:98:60:d5:
27:1d:6d:42:37:d8:1f:d9:61:d3:89:5c:c1:98:f5:
bd:7d:84:18:36:42:fa:58:7d:82:d4:7c:2b:8c:b7:
39:78:24:88:bd:8f:b3:f3:8f:75:0a:38:cf:0d:2c:
be:59:e6:93:4f:91:51:97:c6:fe:e2:45:1f:c4:56:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:2A:A0:11:58:8C:AD:BC:66:50:3D:14:C1:E9:3B:55:B8:E8:A2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/leQqoBFYjK28ZlA9FMHpO1W46KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.78.0/23
Signature Algorithm: sha256WithRSAEncryption
41:b4:01:4b:5c:27:e1:dd:a8:20:7a:d6:52:35:e2:63:1a:a5:
99:6b:4c:cb:61:51:49:18:e4:56:80:47:22:9d:13:e7:be:16:
24:6d:59:a1:56:f5:46:dc:aa:4c:9f:aa:0d:cc:a3:49:2c:cb:
e4:3a:74:8c:dd:f8:18:c1:cd:97:e9:d2:6e:7a:4e:e7:14:13:
78:b0:35:23:3a:3b:f2:80:de:af:d9:51:f5:52:13:11:12:f2:
51:3a:3c:0f:ae:97:c9:79:13:fa:8d:af:01:ce:2d:49:b6:48:
6c:d0:22:65:0c:c2:fc:3a:34:05:12:1e:0b:7d:08:89:1a:c7:
1d:0f:23:75:84:43:34:b9:48:2c:79:1e:f3:44:e3:24:32:a1:
b0:bd:fa:fb:0c:a0:04:73:6a:2a:2a:42:43:72:a5:ca:26:88:
f7:4c:3b:72:5c:4e:52:91:94:99:58:b2:2e:19:d2:26:f0:b1:
a8:81:93:ce:96:d0:43:77:b2:fd:39:0a:a4:4f:16:07:db:1f:
df:7e:51:92:89:32:ff:48:d8:8c:a3:6f:76:56:b8:0e:43:48:
27:45:4c:13:fa:b1:3f:8c:70:93:05:f2:9e:2f:47:98:02:a7:
ae:85:3e:7a:b1:d2:3e:a1:77:4d:51:78:5b:f5:21:69:73:23:
0a:19:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:24 2026 by rpki-client