Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tPq_ibdbcFwuGPsgGrsqvRy5_Qo.roa
File: tPq_ibdbcFwuGPsgGrsqvRy5_Qo.roa (raw, json)
Hash identifier: J7O7fm5OhaBSiRYyXWTlBW0xjQ66Rc/qL3RZ1IUI6M4=
Subject key identifier: B4:FA:BF:89:B7:5B:70:5C:2E:18:FB:20:1A:BB:2A:BD:1C:B9:FD:0A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A176C29535A0533B3BD69DF482E96B92B1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tPq_ibdbcFwuGPsgGrsqvRy5_Qo.roa
Signing time: Mon 26 Oct 2026 05:50:25 +0000
ROA not before: Mon 26 Oct 2026 05:50:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 9.247.54.0/24 maxlen: 24
89.125.96.0/24 maxlen: 24
89.125.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:c2:95:35:a0:53:3b:3b:d6:9d:f4:82:e9:6b:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 05:50:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4fabf89b75b705c2e18fb201abb2abd1cb9fd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:2c:2d:42:45:10:51:53:dd:55:39:0c:1d:
c8:6b:f6:87:93:8d:01:38:08:b0:9b:9a:3b:cd:e4:
b9:83:98:9c:fa:1b:9c:ad:1d:33:58:28:37:fa:f8:
59:8c:3d:1c:f3:11:08:18:27:ee:41:48:1e:92:25:
41:93:e7:84:5f:32:32:3c:7b:74:d4:12:3d:f0:9a:
c3:3d:0d:30:6a:d4:b6:7b:ff:ca:63:1c:96:f4:59:
53:5a:13:3f:b1:95:0d:b4:f1:1e:08:bf:fd:8b:a6:
0f:97:c5:db:0a:3c:d4:df:68:ef:56:bb:82:9b:5a:
68:af:31:57:da:45:72:d4:b6:63:ef:29:b4:1b:ba:
90:95:67:70:9d:80:2c:a6:77:85:09:ba:2c:d5:64:
39:09:13:af:da:2e:ca:21:c5:27:5f:07:4d:fb:b6:
5f:b9:ad:81:77:d8:7a:e3:9f:5a:b3:bf:f8:ae:67:
6a:5e:73:f7:fc:82:18:a7:90:f7:ca:a1:f8:e7:00:
39:72:e4:d4:fa:fd:2f:dd:8d:61:84:54:c8:3f:56:
5e:c3:be:64:54:c3:43:f1:96:c2:ec:f9:f6:7e:12:
bf:da:fe:61:98:f7:35:41:a0:d7:16:ba:53:e7:f6:
cb:dc:ba:0c:35:c1:8b:a7:a2:38:2f:fb:99:ea:e3:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:BF:89:B7:5B:70:5C:2E:18:FB:20:1A:BB:2A:BD:1C:B9:FD:0A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tPq_ibdbcFwuGPsgGrsqvRy5_Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.54.0/24
89.125.96.0/24
89.125.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a1:58:fb:85:3f:8b:d5:2e:37:3b:5e:0c:42:6c:00:45:64:
1a:1e:d8:d2:3b:a7:0b:ab:cb:7b:8a:00:2d:35:93:da:5f:e3:
4c:20:2e:42:0f:90:e1:be:6a:62:ac:f2:73:d5:08:24:9d:50:
39:79:88:f0:dd:c5:82:52:5c:13:3d:b5:25:d0:76:59:4d:a4:
39:1e:4e:91:55:8e:c0:f2:a7:cd:dc:50:c8:45:0b:82:ba:8c:
af:14:54:5a:43:5c:82:23:d8:79:a7:2e:0d:39:b1:b4:b2:97:
0a:04:b4:58:0a:c9:42:02:89:52:1c:14:d5:2c:7c:ac:a7:a6:
54:e1:5e:75:0b:8c:da:26:04:ef:0b:4b:e1:eb:34:51:ee:d2:
66:8d:da:67:0a:f7:a4:8a:27:a4:59:b7:97:11:e8:dc:57:bc:
9b:12:b4:da:40:e2:2c:8e:7a:f2:a3:38:63:f7:43:48:99:29:
18:a3:97:7a:e1:ad:e2:45:00:c0:24:5e:eb:71:eb:5e:9c:c3:
9d:f6:47:a9:df:c8:77:33:42:22:73:c8:52:c7:3e:bd:b2:b7:
00:8d:9e:9c:f7:21:99:e1:15:9d:11:d1:aa:c4:0b:a9:81:2c:
e8:24:d3:23:79:f7:7c:40:7a:d2:7b:18:a5:1f:3d:79:f0:a2:
ff:c4:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:44:30 2026 by rpki-client