Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rw1ZRDIa7mYq2evXmlQ9dAcK3nE.roa
File: rw1ZRDIa7mYq2evXmlQ9dAcK3nE.roa (raw, json)
Hash identifier: PpgU+R2RAiPdiAslCkUT7mpZPKRNSxt2+2CCOe7I2m8=
Subject key identifier: AF:0D:59:44:32:1A:EE:66:2A:D9:EB:D7:9A:54:3D:74:07:0A:DE:71
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1179904889A6AD3CED7E45B378572B967
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rw1ZRDIa7mYq2evXmlQ9dAcK3nE.roa
Signing time: Wed 07 Oct 2026 18:21:06 +0000
ROA not before: Wed 07 Oct 2026 18:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51248
IP address blocks: 89.125.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:99:04:88:9a:6a:d3:ce:d7:e4:5b:37:85:72:b9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 7 18:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af0d5944321aee662ad9ebd79a543d74070ade71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:78:42:1e:71:18:86:ee:ca:31:21:49:49:
a9:a8:fb:3a:ca:b2:f9:61:6b:16:51:9c:20:9e:24:
1d:30:62:53:73:85:45:cf:b6:e9:20:8f:d8:93:4d:
be:69:dd:5a:fa:81:15:22:de:66:ae:78:be:dd:17:
fb:77:9c:fd:25:3f:c8:40:36:ef:88:35:3f:a0:1e:
d2:ca:09:b7:2d:02:a4:22:d5:b5:ef:0d:34:69:c3:
38:33:75:f6:7a:5d:b6:7c:7b:4b:e8:e0:7a:07:0c:
bf:de:39:a8:60:f7:30:04:5c:2a:4c:f8:ff:b8:34:
e6:a9:1f:09:bb:12:50:8c:71:41:e8:77:61:20:5b:
7e:e7:83:b1:19:cf:8b:f7:77:95:c0:1a:3a:95:02:
a1:99:d3:f7:d8:18:56:64:53:7c:85:45:c0:1d:a4:
c2:16:63:f8:ef:ad:3a:92:f4:a0:c4:56:cc:3f:25:
57:cc:33:25:82:0d:0f:c4:f2:fb:ef:02:21:62:f3:
d6:f4:7d:1c:b9:dc:e7:94:fd:2a:26:4d:60:c4:a8:
9d:c8:19:56:d1:1e:9d:30:6d:72:4a:0a:18:a5:3b:
ff:47:eb:43:e9:3d:f7:bb:79:cd:ce:14:3c:14:16:
fb:db:f8:40:e2:1b:f6:98:5f:51:f5:d5:f9:20:78:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:59:44:32:1A:EE:66:2A:D9:EB:D7:9A:54:3D:74:07:0A:DE:71
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rw1ZRDIa7mYq2evXmlQ9dAcK3nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.237.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ca:44:69:75:c3:9f:cd:da:e4:a9:29:29:18:e4:47:08:66:
38:a6:91:71:35:30:7d:ab:cd:0c:da:7a:38:6f:1f:a0:87:fe:
98:e8:e3:e1:a6:50:44:c2:2a:c4:de:8a:ef:ba:be:20:48:32:
f2:1a:dc:d8:ab:4d:db:a6:b5:e0:c3:a1:28:46:27:6b:9d:e2:
c5:58:87:88:72:2a:73:7d:66:38:49:9c:54:6d:a9:65:05:95:
5d:e0:26:82:c7:26:f7:c6:0d:5a:5d:fa:d3:07:fb:3d:e0:c0:
a1:fd:ae:2d:c7:66:fb:b8:ff:59:27:03:96:41:3f:59:c3:91:
7f:f1:ac:73:0c:6a:d5:bf:27:bc:83:19:64:bc:2e:25:30:89:
b9:8f:6a:6c:81:be:52:fa:ec:f6:28:b5:84:2b:25:ea:37:fb:
4d:7f:98:d2:62:86:a5:7b:4f:1b:db:c0:d7:d0:4f:76:bf:80:
ad:39:0e:fb:16:2f:5d:9e:53:98:06:53:11:90:7c:ed:3a:f1:
49:ec:64:22:a3:bb:01:11:2b:df:bb:03:7c:b6:79:3a:b1:13:
1b:25:07:c5:2a:bc:28:56:5b:2b:c0:3b:08:d9:d6:5f:0c:d6:
77:07:1d:3b:05:71:07:c5:d1:2c:e6:d4:2d:c1:fb:ca:af:f7:
e9:81:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:16 2026 by rpki-client