Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/thGrGxF6rar6ukw0CZ_5gIHjkCI.roa
File: thGrGxF6rar6ukw0CZ_5gIHjkCI.roa (raw, json)
Hash identifier: UYbZuJar2P12A2thGEO36ZYtVG/gQVmtoZVjH4xXQDI=
Subject key identifier: B6:11:AB:1B:11:7A:AD:AA:FA:BA:4C:34:09:9F:F9:80:81:E3:90:22
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A13987A64835323640B8A60A5C38DA06D3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/thGrGxF6rar6ukw0CZ_5gIHjkCI.roa
Signing time: Wed 14 Oct 2026 08:29:13 +0000
ROA not before: Wed 14 Oct 2026 08:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 89.125.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:87:a6:48:35:32:36:40:b8:a6:0a:5c:38:da:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 08:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b611ab1b117aadaafaba4c34099ff98081e39022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:40:7a:f8:fb:d0:d4:a2:62:cf:df:ca:8e:
f6:0b:54:2d:c3:71:c5:d7:41:7a:f1:e5:79:b1:92:
a8:43:35:d4:aa:98:96:bc:46:c1:8e:63:be:1a:8b:
87:8d:7a:26:53:38:b3:03:0b:69:df:f4:d1:fc:4c:
e8:c7:a9:f1:fb:8d:25:b8:e6:58:cd:d5:0c:f3:af:
1c:f5:7a:92:1c:a1:ee:60:cb:fa:0f:de:db:42:c3:
55:7b:9e:cf:1c:0e:0e:d2:bc:48:57:b5:64:06:c7:
be:22:ca:30:bb:49:73:cc:9f:50:80:c4:6b:d7:16:
1d:9d:a0:00:7f:e1:b9:aa:9c:dd:54:09:b7:70:73:
4d:a6:19:5b:17:4e:a7:b4:21:a0:fa:03:9a:c7:8e:
39:02:16:ce:0d:2e:8b:52:c5:bc:8a:15:c9:21:65:
c2:3c:ac:9a:f0:67:79:2d:34:5c:5e:0c:13:9e:22:
1a:8e:fa:6a:a9:2d:57:27:17:45:5b:4f:9b:d4:6d:
0c:ae:41:af:35:23:4c:25:b8:3a:c9:e6:72:69:bf:
08:d4:5b:d9:37:82:86:f3:ea:49:d0:64:ba:52:bd:
49:c6:99:f7:49:d6:7e:65:2b:05:02:d0:8a:e7:3a:
04:eb:2d:d7:f2:97:b3:3a:55:f7:05:ab:c3:cf:45:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:AB:1B:11:7A:AD:AA:FA:BA:4C:34:09:9F:F9:80:81:E3:90:22
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/thGrGxF6rar6ukw0CZ_5gIHjkCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.154.0/24
Signature Algorithm: sha256WithRSAEncryption
51:76:85:68:c9:25:61:8f:13:51:c9:7c:51:87:d6:46:c9:0e:
bb:bd:6f:3c:a8:f3:74:d4:00:a9:76:1f:a6:62:0a:d4:fc:05:
0b:bd:61:3e:c9:a9:6d:15:b7:3f:8a:23:0b:c9:fd:5a:d8:73:
55:d8:91:f7:c5:fa:49:58:aa:3a:86:52:23:b6:66:db:30:21:
e6:f7:a8:2c:c3:30:1c:74:f1:54:f1:68:5d:55:05:ee:b2:97:
b2:28:0f:e4:74:97:bc:64:b2:39:05:e0:c4:69:0e:24:fe:53:
fa:0a:9a:4f:e7:12:ea:88:93:e0:ad:51:0c:d4:20:1b:6e:ca:
dd:72:46:0b:b3:e9:e7:41:52:7e:f2:86:2d:37:f1:9e:9c:af:
25:be:e7:b4:4b:86:68:66:f5:d2:6c:6e:b5:0b:59:9a:39:fa:
96:ea:41:39:fd:4e:fb:f9:bd:13:f3:88:39:3a:1b:ea:2d:9e:
7b:59:96:cc:cf:85:dc:55:e5:aa:46:b6:21:36:34:04:aa:4a:
2e:2d:29:a5:ec:8e:db:f0:3a:2d:a4:28:98:55:6a:6b:ab:60:
1a:f2:95:03:33:4f:9f:8d:66:ed:41:19:e5:a7:38:33:f7:a9:
d4:ab:dd:a9:58:66:eb:9f:28:ce:ec:39:7b:2f:7a:e6:a7:57:
9d:9a:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:51 2026 by rpki-client