Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ps_wevs9ndVCE2VY5zHkEdWHsuE.roa
File: ps_wevs9ndVCE2VY5zHkEdWHsuE.roa (raw, json)
Hash identifier: dwpw2pVecuGQ0ZnS713MFSFOrY5ZOqtzmbsn910aXD4=
Subject key identifier: A6:CF:F0:7A:FB:3D:9D:D5:42:13:65:58:E7:31:E4:11:D5:87:B2:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A12215C870121F07B692FBE02A6C504F87
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ps_wevs9ndVCE2VY5zHkEdWHsuE.roa
Signing time: Fri 09 Oct 2026 19:13:35 +0000
ROA not before: Fri 09 Oct 2026 19:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218687
IP address blocks: 89.125.238.0/24 maxlen: 24
104.143.219.0/24 maxlen: 24
206.245.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:15:c8:70:12:1f:07:b6:92:fb:e0:2a:6c:50:4f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 19:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6cff07afb3d9dd542136558e731e411d587b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:3f:4c:e4:f3:c3:9e:c5:5e:63:7a:13:82:
ba:1a:a1:b5:bc:a9:77:44:03:77:27:02:c7:28:2c:
b8:c1:30:64:85:2f:86:1e:df:a9:48:c9:7e:29:49:
04:1c:1a:fc:d7:db:56:18:93:e4:25:fc:54:6a:61:
a2:93:1d:f0:37:9a:1a:3f:3a:d4:74:19:9c:39:d7:
a3:8a:d2:63:e2:3f:31:af:c1:b1:f9:37:ea:c0:77:
cf:f9:ea:6a:0f:ad:91:8e:d2:9f:58:35:24:cb:c1:
c4:fa:15:a8:1b:64:e8:6c:64:31:c3:a8:be:9a:87:
86:df:f0:5f:e1:36:a8:4e:76:fd:df:e4:de:c0:3e:
a7:0b:d7:ba:bf:0e:a0:49:53:76:c7:b1:c5:7e:36:
7c:26:f4:71:65:17:e1:cc:21:c4:f8:c7:25:d7:21:
f3:cc:1e:1f:61:32:ab:ac:42:92:80:36:cc:16:5b:
32:9c:04:21:4c:2d:c8:04:aa:7c:4d:bc:79:27:67:
f1:94:16:70:71:29:3e:98:92:3d:68:98:90:74:76:
c1:ce:47:8d:e8:37:1d:51:d2:cd:ab:3d:08:a3:22:
b8:d9:3b:f5:8c:df:b6:37:20:12:7c:5d:26:f8:69:
c9:7b:59:4a:97:32:2c:2d:33:7d:89:13:14:9a:ea:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:F0:7A:FB:3D:9D:D5:42:13:65:58:E7:31:E4:11:D5:87:B2:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ps_wevs9ndVCE2VY5zHkEdWHsuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.238.0/24
104.143.219.0/24
206.245.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:24:fd:62:a7:30:9d:15:39:4c:89:85:23:7a:0c:c0:df:7b:
d1:15:40:71:a0:b9:52:83:59:4b:cc:23:d9:00:1e:b4:6e:1b:
5c:eb:3b:6b:fd:58:2c:9b:c5:04:52:ff:db:ee:d1:5f:40:ab:
59:1c:f9:ae:35:a2:27:b6:46:a2:d9:28:33:de:67:af:0b:fe:
3b:e9:8b:35:b4:e8:d0:ee:52:11:0c:8b:d6:3f:6b:92:14:77:
80:6a:c7:35:26:f5:f7:ca:d8:5a:f7:e4:27:a2:9c:2b:ea:29:
b3:b9:ee:bf:1e:21:4b:39:92:99:a7:42:84:2b:57:c0:c3:b3:
41:cb:69:21:08:49:28:55:5c:71:5a:ac:db:9e:b2:b0:f8:38:
29:f6:fd:c7:37:0b:ba:4b:49:90:34:25:d9:e5:5f:95:a9:16:
24:94:12:b6:95:d4:45:6f:ab:53:60:57:04:b9:37:2f:9c:0c:
42:aa:75:ba:a8:20:b1:fe:65:79:7c:99:3f:89:ce:5e:33:4c:
99:1a:9b:de:97:73:5e:86:33:7f:e3:f9:04:76:96:38:d5:6a:
05:02:d8:29:59:c5:f0:4c:e6:18:3d:b7:60:43:27:86:1b:93:
b0:b2:5d:13:11:60:b5:4e:2f:a6:83:e9:5a:ac:84:09:7c:20:
d5:b6:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:20 2026 by rpki-client