Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z74ZNP0OOdSJfwwhqP82Cv-jyy8.roa
File: z74ZNP0OOdSJfwwhqP82Cv-jyy8.roa (raw, json)
Hash identifier: JDqzvbNMX+zR46dPF0pJKy9w2umMp+BAi2wz25qvQIs=
Subject key identifier: CF:BE:19:34:FD:0E:39:D4:89:7F:0C:21:A8:FF:36:0A:FF:A3:CB:2F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FFB9D2717C7DA2683BDB84BAEABC1B2E5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z74ZNP0OOdSJfwwhqP82Cv-jyy8.roa
Signing time: Thu 13 Aug 2026 14:53:28 +0000
ROA not before: Thu 13 Aug 2026 14:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 89.125.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:9d:27:17:c7:da:26:83:bd:b8:4b:ae:ab:c1:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 13 14:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfbe1934fd0e39d4897f0c21a8ff360affa3cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a8:ea:eb:94:a3:6c:f5:58:32:b9:34:fd:77:
9a:29:a6:7e:e7:b6:7f:08:06:1f:5f:4d:19:a9:fd:
15:4c:5a:7f:6d:3d:e0:41:67:19:e1:7f:fa:88:09:
a7:27:2f:35:c9:b6:64:6a:48:b7:55:6c:cb:f2:a2:
85:00:20:76:dd:3b:b5:44:58:6b:91:87:40:0d:61:
36:e0:7b:9c:9d:f4:3b:58:3c:5e:d3:fb:cb:32:0c:
8c:ce:b1:ab:0c:79:92:4f:94:d6:db:f5:ab:01:6c:
96:c6:e7:c5:52:66:c9:c5:c3:9c:4b:5a:bd:43:af:
b3:dc:6b:8e:60:13:86:99:d8:c8:2e:0c:6b:db:06:
4a:ab:ba:b4:76:eb:ed:3a:36:ba:b8:fa:d6:d9:48:
1e:29:04:f8:20:e6:60:ff:48:1c:2d:90:99:53:cb:
0e:8b:fd:e7:37:7c:cf:81:57:74:9a:e2:fa:c7:bc:
e6:ca:c0:f8:7a:3c:2d:d8:b6:25:5e:24:16:5e:cd:
4b:77:91:1f:d5:96:01:ad:42:d7:4a:88:bc:ba:9c:
e3:a2:95:c4:f7:fa:cb:85:01:0e:c3:28:fb:4d:12:
44:51:dd:42:ca:e3:03:e1:44:54:5b:2d:23:54:4e:
60:a0:2f:5c:be:0e:65:a9:5a:79:9b:74:e3:a9:0d:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:19:34:FD:0E:39:D4:89:7F:0C:21:A8:FF:36:0A:FF:A3:CB:2F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z74ZNP0OOdSJfwwhqP82Cv-jyy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.125.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6e:cf:e0:e3:26:d3:74:d7:17:f4:6e:ab:6f:e2:9a:47:6f:
46:c2:21:76:52:e8:41:41:b3:c5:42:75:c5:72:93:42:c8:72:
a1:df:a0:d0:af:28:c5:2c:81:f6:9f:06:0e:ff:51:27:cd:5c:
ce:4b:64:33:52:4f:ec:2c:0f:02:4b:3a:7f:f7:d0:a7:1a:0b:
88:25:97:28:49:ce:a3:80:07:7d:6e:51:d7:1d:0b:6b:01:a1:
de:f5:44:39:70:ea:02:31:78:ae:14:8f:21:74:b6:e7:e7:ce:
30:d2:c2:e8:4d:5d:e5:c9:60:7d:40:88:ba:a2:f9:c2:a1:65:
c7:77:75:a1:b1:f3:3b:e5:28:2d:8a:43:7f:a9:a8:2f:df:b9:
c0:59:52:34:64:e0:fa:89:ed:91:46:78:04:b2:6e:8d:7c:db:
9b:ef:57:18:17:44:73:4a:f6:b7:aa:2a:19:c5:00:d2:bf:2e:
b6:3e:6c:68:09:c0:77:9b:c6:57:c7:40:67:dd:ab:d6:f3:f0:
7c:f5:29:e4:dc:2c:58:0b:ef:f6:d1:b5:fa:50:15:70:15:77:
cd:71:83:df:4e:c9:69:00:d4:42:5b:48:36:f4:fa:71:3f:bc:
5b:d2:ee:9e:0f:11:1a:fd:11:9c:06:5d:c6:cb:2e:07:8c:97:
57:f8:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:43 2026 by rpki-client