Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xF4dm-e1QOgkH_-wbzwhMQEg-iU.roa
File: xF4dm-e1QOgkH_-wbzwhMQEg-iU.roa (raw, json)
Hash identifier: KZBUKN1OX3cvs9xCMDx4N21Xc4owboKp00//UAyzOI0=
Subject key identifier: C4:5E:1D:9B:E7:B5:40:E8:24:1F:FF:B0:6F:3C:21:31:01:20:FA:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A05CE6ECD8CD381A62CC75368D78904F88
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xF4dm-e1QOgkH_-wbzwhMQEg-iU.roa
Signing time: Tue 01 Sep 2026 12:17:12 +0000
ROA not before: Tue 01 Sep 2026 12:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216150
IP address blocks: 89.125.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:e6:ec:d8:cd:38:1a:62:cc:75:36:8d:78:90:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 1 12:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c45e1d9be7b540e8241fffb06f3c21310120fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:20:c9:bc:c8:d1:e8:d0:60:10:ff:87:59:
8d:b0:7c:3d:6c:dd:3b:5b:c6:1d:a6:f7:75:76:8e:
6f:1b:c3:72:f6:48:42:63:9d:c4:6c:54:23:ce:a0:
d6:3d:78:72:ec:b0:03:e7:fd:6d:98:b1:45:e5:7e:
76:cc:6c:b2:35:1d:23:ca:f8:43:58:94:e7:ab:5d:
55:84:7c:66:79:2c:f1:8b:1b:ea:4c:2f:32:59:70:
8e:08:40:4d:0f:7b:88:6c:8f:95:87:b4:3b:15:d9:
d9:ad:65:7b:ff:c0:c2:b1:2d:45:71:42:f5:8f:2e:
b1:01:3a:dd:1b:b4:e4:ff:be:0e:93:79:fb:2f:8a:
07:4a:59:d0:08:d8:5f:9f:d8:c2:d4:89:bf:f2:d4:
dc:fc:cf:9b:d6:74:b1:2c:ea:53:a2:6a:b0:57:2b:
2f:26:a9:f0:f4:3a:97:32:98:d7:9c:33:70:26:45:
31:c0:87:2c:1b:0b:90:0f:11:53:9b:c5:2b:d6:10:
b7:90:d4:af:63:eb:d1:54:e8:25:aa:c6:a5:ee:74:
68:f3:76:a8:15:ef:27:d5:68:b6:45:43:67:fa:ba:
a3:66:19:2d:71:22:7b:b9:56:84:d5:64:fb:aa:a9:
99:c5:ba:b2:a7:99:51:dc:59:70:35:81:d4:9e:1e:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:1D:9B:E7:B5:40:E8:24:1F:FF:B0:6F:3C:21:31:01:20:FA:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xF4dm-e1QOgkH_-wbzwhMQEg-iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ab:09:9c:f6:23:b6:37:74:b8:5a:dc:17:82:61:22:a0:60:
16:01:30:48:7c:a6:b8:5e:b9:b4:d1:9d:ff:73:6e:07:6c:04:
15:fd:73:f1:84:c3:f9:c6:17:a6:bd:c9:93:6d:dc:19:e3:86:
7f:d8:2f:d1:7b:34:2c:5a:b0:99:4c:a4:29:75:d1:2f:a4:95:
0f:4a:18:fa:11:56:99:c7:a1:14:b6:26:18:dc:70:8e:6a:50:
45:c9:8a:22:d0:d2:32:23:f0:c8:2b:dc:35:e0:62:90:fe:e4:
d1:14:81:e0:d7:68:a0:a3:ef:4c:7e:3c:ef:0c:d2:69:ff:10:
71:79:f0:17:66:18:dd:d0:99:0f:b0:1d:a5:48:23:51:82:93:
47:5b:a2:b5:79:d4:0e:8b:fe:19:f6:a5:7e:87:cc:2b:2d:14:
06:d8:42:4b:17:cb:d0:e6:6e:b5:a0:ee:48:8a:0f:3d:b5:05:
ae:71:ef:91:40:44:6a:bc:99:66:4e:a6:20:36:08:a3:c9:34:
02:72:76:e5:7a:bc:16:84:d3:f7:98:7a:7a:ed:68:d9:7d:7f:
94:6d:27:ce:ac:e9:a5:6c:aa:24:5c:e7:dc:29:10:f7:8b:a4:
74:1d:8e:f0:b7:82:24:83:61:37:81:80:3c:33:3d:d6:8a:16:
ec:86:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:51 2026 by rpki-client