Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/x1sjI8VeDwV6RuLMg1ottANIp0I.roa
File: x1sjI8VeDwV6RuLMg1ottANIp0I.roa (raw, json)
Hash identifier: DkbVRGn3LF9qwcWOo5pqN21AOEOgazKvfkPSap+uV0k=
Subject key identifier: C7:5B:23:23:C5:5E:0F:05:7A:46:E2:CC:83:5A:2D:B4:03:48:A7:42
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A120259225308C234FB5684784107435DD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/x1sjI8VeDwV6RuLMg1ottANIp0I.roa
Signing time: Fri 09 Oct 2026 10:11:35 +0000
ROA not before: Fri 09 Oct 2026 10:11:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203493
IP address blocks: 89.37.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:25:92:25:30:8c:23:4f:b5:68:47:84:10:74:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 10:11:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c75b2323c55e0f057a46e2cc835a2db40348a742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:26:22:0d:5c:57:e7:2d:ad:b0:86:28:bd:
8a:a2:1f:67:ba:00:87:cb:85:69:63:c8:52:cb:00:
57:95:19:f3:2d:d1:b0:f1:24:f7:92:fc:85:2a:69:
b0:18:8c:c3:8d:25:d1:db:93:c7:7c:af:b6:6a:f9:
97:c7:6c:25:d3:43:ac:1b:81:1b:67:af:86:75:bd:
be:b8:72:ec:2d:a0:72:60:72:03:a7:2f:dc:2f:58:
f1:a1:b9:8d:e0:d0:9e:93:94:58:93:69:7a:61:38:
57:82:38:bc:8f:d7:43:2c:5e:44:19:66:b5:6f:c4:
5e:6c:f0:db:00:96:59:79:6a:bc:a7:e5:d5:c3:38:
cf:96:f5:1f:65:05:e9:af:c2:35:35:ba:e1:99:fb:
2d:1d:42:7b:af:80:a9:c9:ac:94:63:c9:28:e9:46:
00:0c:1c:61:68:0c:b2:02:01:3b:af:10:fe:28:bf:
3d:45:af:bc:15:ca:c7:d8:61:eb:2d:f7:39:ce:85:
0e:95:be:0e:df:6b:57:73:17:93:d2:1c:cd:c7:ff:
41:5b:ed:9c:fd:1e:66:19:0a:3c:89:95:da:cb:3f:
97:33:0f:a2:3e:d4:62:94:a5:c9:20:d0:fc:ba:d1:
7e:ab:28:3d:bd:ef:ef:72:a7:b5:da:0e:6c:61:d5:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5B:23:23:C5:5E:0F:05:7A:46:E2:CC:83:5A:2D:B4:03:48:A7:42
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/x1sjI8VeDwV6RuLMg1ottANIp0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.193.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bc:61:4a:06:68:79:1f:42:8a:cc:8a:8d:26:1c:01:f2:1b:
91:43:09:e7:26:0b:de:fd:b3:7f:7f:f0:17:78:bb:29:22:58:
85:b5:44:a6:01:f4:f0:6e:1f:55:f0:d0:af:7f:6e:4c:0b:25:
68:6a:2a:80:9d:e2:a4:f6:7c:a5:e7:d3:95:41:c0:4b:ae:53:
77:ac:e8:13:9e:a3:e6:3b:92:9d:0a:90:85:75:9c:e5:f7:a1:
46:3f:94:96:0d:85:42:8d:0c:3b:45:5c:32:2f:41:06:02:21:
b8:db:27:0c:80:4b:af:8e:85:a7:b7:01:4f:fc:8d:c7:e5:82:
b6:9e:b8:19:a9:fa:9f:51:d5:3b:42:cb:85:05:0a:74:41:c9:
37:48:33:75:df:cd:b3:04:5c:36:20:a7:15:dc:37:49:2e:dd:
23:7b:7e:3b:ad:1f:a7:58:73:88:a6:73:e2:59:c4:cb:b8:49:
36:4f:31:c4:6d:0f:88:3e:fa:bb:7a:a2:99:b9:57:ab:c8:69:
25:27:c2:24:b0:2f:9e:94:41:d0:43:1a:ce:ea:a6:a7:49:86:
c1:85:9d:d9:1b:06:5d:38:12:68:21:9b:9e:ac:19:9d:19:da:
a8:41:4d:b1:ba:2f:79:fe:5f:84:c8:de:e1:8c:1a:4c:83:a8:
6f:d3:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 11:27:16 2026 by rpki-client