Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xD7rIPv4OJpvQrlO9TFg-W7BqzI.roa
File: xD7rIPv4OJpvQrlO9TFg-W7BqzI.roa (raw, json)
Hash identifier: 2keRrUhWGQc505eZ3nlBEn4KCifBup/z8x/5bwYbIYs=
Subject key identifier: C4:3E:EB:20:FB:F8:38:9A:6F:42:B9:4E:F5:31:60:F9:6E:C1:AB:32
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A06CD51CB6B80C2BD2096F13DC180CF3EE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xD7rIPv4OJpvQrlO9TFg-W7BqzI.roa
Signing time: Fri 04 Sep 2026 14:31:40 +0000
ROA not before: Fri 04 Sep 2026 14:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 89.125.239.0/24 maxlen: 24
89.125.249.0/24 maxlen: 24
89.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:d5:1c:b6:b8:0c:2b:d2:09:6f:13:dc:18:0c:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 4 14:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c43eeb20fbf8389a6f42b94ef53160f96ec1ab32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:38:b3:28:2b:12:78:3e:2b:c0:16:ec:80:
86:ad:e4:d7:16:62:32:ba:62:2b:52:f9:c3:53:f8:
37:ab:a7:b0:3f:c0:91:85:15:eb:47:e0:d1:4a:a4:
da:44:c3:db:46:24:11:a1:3b:ee:41:f8:3d:e1:b5:
d8:b6:74:2b:70:50:e4:b5:95:0e:b6:9d:92:21:7f:
ee:8e:51:e5:c9:15:4f:cd:e0:a1:ea:52:c4:db:23:
34:c5:c9:f3:f8:df:54:ab:59:85:45:1f:8f:04:e2:
ec:aa:93:ab:a6:81:75:f5:70:d4:42:f7:21:90:d3:
37:f2:8f:48:e2:46:dd:57:ed:f1:77:35:72:0e:dc:
0c:32:fa:5f:2b:a6:d9:1a:97:55:21:2f:42:7c:96:
38:00:ee:1e:34:3d:c4:30:94:f3:55:42:ce:ae:3c:
81:b7:c1:4c:19:98:f7:cb:7c:0b:b1:67:73:4c:5b:
8e:f9:c4:f1:3e:dd:58:0d:92:dc:ef:26:5a:0b:42:
ae:d9:1c:e9:0f:6e:46:a6:7e:2a:d7:10:c3:0a:f2:
f1:d1:0f:bd:02:7b:27:f2:ec:9e:0e:8b:22:55:84:
36:60:bd:a8:75:70:0b:19:34:14:b9:12:d4:03:cc:
b3:3a:e6:c4:87:ae:a0:42:65:a5:d2:f4:09:02:60:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:EB:20:FB:F8:38:9A:6F:42:B9:4E:F5:31:60:F9:6E:C1:AB:32
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xD7rIPv4OJpvQrlO9TFg-W7BqzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.239.0/24
89.125.249.0/24
89.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2a:fa:82:89:b6:22:58:83:d3:35:f4:68:42:95:07:14:e3:
64:2e:cd:e4:bb:29:b6:00:99:e4:dc:98:5a:48:20:0e:81:9b:
50:0b:fd:3d:12:67:a5:3c:b0:d1:92:8e:45:e8:bf:94:d6:4f:
7c:2c:d8:a7:b6:ab:c9:20:66:c2:2d:a8:65:95:04:9a:56:cc:
55:d1:79:64:1c:0e:e5:49:51:78:d2:39:f6:28:07:19:e6:9a:
e7:d3:9a:4a:12:cc:28:a4:eb:b4:3c:ba:b6:56:29:a5:57:41:
d8:e0:1c:f0:36:1a:9c:6a:ea:db:67:b3:15:79:8c:23:b4:c1:
5f:0c:8c:b5:32:a2:ed:d3:ef:1b:cd:22:14:a3:81:36:63:0a:
5d:92:36:6c:35:f4:77:ac:e9:d3:87:13:08:85:49:ec:f8:26:
a6:2c:f5:99:d2:be:49:0b:51:c9:46:5f:9a:b1:ff:56:7b:06:
1b:58:75:57:9a:fc:c5:31:ed:ce:72:26:b6:aa:c1:1e:42:9a:
23:a2:15:68:c2:cb:e7:1e:2d:38:34:78:60:d2:ee:31:3f:cd:
07:85:ce:9f:6b:03:7e:95:d8:bb:39:8a:0c:0e:f4:3b:bd:97:
a7:91:a2:19:de:21:24:10:b2:cf:b5:e4:8c:4e:64:4f:ab:b5:
8f:54:89:a2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBs1Ry2uAwr0glvE9wYDPPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTA0MTQzMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDNlZWIyMGZiZjgzODlhNmY0MmI5NGVmNTMxNjBmOTZlYzFhYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZw4sygrEng+K8AW7ICGreTXFmIy
umIrUvnDU/g3q6ewP8CRhRXrR+DRSqTaRMPbRiQRoTvuQfg94bXYtnQrcFDktZUO
tp2SIX/ujlHlyRVPzeCh6lLE2yM0xcnz+N9Uq1mFRR+PBOLsqpOrpoF19XDUQvch
kNM38o9I4kbdV+3xdzVyDtwMMvpfK6bZGpdVIS9CfJY4AO4eND3EMJTzVULOrjyB
t8FMGZj3y3wLsWdzTFuO+cTxPt1YDZLc7yZaC0Ku2RzpD25Gpn4q1xDDCvLx0Q+9
Ansn8uyeDosiVYQ2YL2odXALGTQUuRLUA8yzOubEh66gQmWl0vQJAmCyCQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMQ+6yD7+Diab0K5TvUxYPluwasyMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveEQ3cklQdjRPSnB2UXJsTzlURmctVzdCcXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWX3vAwQA
WX35AwQAWX37MA0GCSqGSIb3DQEBCwUAA4IBAQAUKvqCibYiWIPTNfRoQpUHFONk
Ls3kuym2AJnk3JhaSCAOgZtQC/09EmelPLDRko5F6L+U1k98LNintqvJIGbCLahl
lQSaVsxV0XlkHA7lSVF40jn2KAcZ5prn05pKEswopOu0PLq2VimlV0HY4BzwNhqc
aurbZ7MVeYwjtMFfDIy1MqLt0+8bzSIUo4E2YwpdkjZsNfR3rOnThxMIhUns+Cam
LPWZ0r5JC1HJRl+asf9WewYbWHVXmvzFMe3Ocia2qsEeQpojohVowsvnHi04NHhg
0u4xP80Hhc6fawN+ldi7OYoMDvQ7vZenkaIZ3iEkELLPteSMTmRPq7WPVImi
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:53 2026 by rpki-client