Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7Xpj0ydgV6llNW0klwuiRlgveqQ.roa
File: 7Xpj0ydgV6llNW0klwuiRlgveqQ.roa (raw, json)
Hash identifier: 0TNIjlB1jkZ4zBBUy++r6BacAaIs/briBF2nhxC9Te8=
Subject key identifier: ED:7A:63:D3:27:60:57:A9:65:35:6D:24:97:0B:A2:46:58:2F:7A:A4
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A12EFDF9CBC8A0D6C62053CF03A3C537AD
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7Xpj0ydgV6llNW0klwuiRlgveqQ.roa
Signing time: Mon 12 Oct 2026 07:22:38 +0000
ROA not before: Mon 12 Oct 2026 07:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218499
IP address blocks: 89.167.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:fd:f9:cb:c8:a0:d6:c6:20:53:cf:03:a3:c5:37:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Oct 12 07:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed7a63d3276057a965356d24970ba246582f7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:bd:b4:25:fd:c5:75:34:25:de:55:8e:a4:
17:21:7c:23:43:d0:1f:02:3b:34:8c:59:74:0a:fa:
60:3d:88:b5:77:44:f5:08:81:4f:53:13:60:92:fd:
59:1c:b6:a6:5b:98:13:ff:6c:9d:5e:f5:41:7e:61:
60:0c:f5:2f:a1:e3:ce:0c:92:69:8b:d2:b3:40:27:
e6:be:d3:0f:f7:0d:5b:75:ee:93:c9:66:11:84:b5:
a0:e2:9c:b8:e9:80:c5:71:21:f9:bb:94:9b:29:af:
ec:4d:03:65:e1:f0:82:71:1c:d9:94:99:0e:13:8c:
a6:24:6d:46:9d:9e:d1:17:c0:d3:eb:a5:f3:e5:9e:
c1:40:68:29:03:cb:7a:0a:c4:ab:95:d2:cf:5f:95:
a6:79:31:bd:07:49:95:c1:9c:65:13:77:38:62:59:
83:bd:0e:17:32:dc:b3:e7:6b:ae:b4:64:21:03:83:
75:30:86:0c:d5:cd:d5:d3:06:a6:b8:24:36:d7:b4:
c5:ce:e8:71:ca:c0:ca:52:df:81:f3:1f:6e:bb:79:
ca:54:63:97:0e:9f:58:85:f1:de:e4:2b:9e:58:bb:
f7:b8:4d:ab:c6:de:aa:4e:58:00:11:5e:79:ea:ba:
3c:53:78:85:3a:0f:f2:9a:22:17:70:68:d4:4a:ed:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:63:D3:27:60:57:A9:65:35:6D:24:97:0B:A2:46:58:2F:7A:A4
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7Xpj0ydgV6llNW0klwuiRlgveqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:75:17:b1:b5:29:3f:ab:8c:c9:e2:c6:f1:57:72:81:6b:b1:
a6:c4:6a:dd:35:75:ad:8a:7e:ba:f4:52:07:cc:7e:98:40:e5:
12:b5:0c:56:8a:e4:89:1d:f5:64:43:0b:c9:ad:15:b2:26:03:
78:2a:6c:42:d6:5b:59:50:06:38:41:f9:be:73:38:dd:2a:93:
59:f3:0c:57:ba:46:87:0f:2c:88:81:2e:aa:61:52:01:df:c5:
c2:6d:0e:92:e8:8e:44:02:a8:a1:24:30:8f:cb:2d:a1:a8:49:
44:45:8f:46:d9:02:7d:de:50:2f:3c:f2:8c:93:5b:85:67:32:
5c:09:4b:34:bc:2c:61:83:36:41:e4:03:ae:a4:4f:e8:bf:98:
4e:f0:41:90:b9:21:85:bf:e4:99:d1:52:05:e3:6f:80:c8:6d:
11:36:f9:c7:21:51:9a:0b:84:bb:83:96:6f:8f:5c:c2:81:33:
c3:fe:0d:11:4e:d1:6b:a2:18:14:13:77:af:ce:ed:de:2f:d8:
2c:9b:c0:15:b1:92:d7:7f:a8:7a:10:af:67:d3:7d:b9:56:a4:
ed:9d:44:95:3c:12:50:87:cc:d6:de:81:c4:ad:c5:02:2e:1a:
04:d4:f8:4a:88:d1:49:73:ae:bc:43:c4:ea:df:8a:39:61:2f:
c2:19:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:40 2026 by rpki-client