Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/fxXc8wbPjKGD4puVQjlJ2BJLkBM.roa
File: fxXc8wbPjKGD4puVQjlJ2BJLkBM.roa (raw, json)
Hash identifier: EEXGCWxUBBoXL23a53HiVBgcrVJh78DOonzUJ1eNahc=
Subject key identifier: 7F:15:DC:F3:06:CF:8C:A1:83:E2:9B:95:42:39:49:D8:12:4B:90:13
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 01A0119BA313622263AC89EF2C6E95F9FC15
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/fxXc8wbPjKGD4puVQjlJ2BJLkBM.roa
Signing time: Mon 17 Aug 2026 21:23:27 +0000
ROA not before: Mon 17 Aug 2026 21:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 89.124.224.0/20 maxlen: 24
185.11.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:9b:a3:13:62:22:63:ac:89:ef:2c:6e:95:f9:fc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Aug 17 21:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f15dcf306cf8ca183e29b95423949d8124b9013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:8c:da:b7:23:e0:58:70:d0:34:72:cb:24:
a8:37:fc:ca:0d:e5:90:98:06:bb:8d:51:5f:72:d3:
cf:0d:dc:ac:01:44:c5:5a:c8:df:86:57:fd:01:9a:
5a:fe:9c:47:9a:46:3c:4b:7f:03:a8:d2:a0:8d:b4:
de:9a:23:e2:7c:7b:4c:dd:e9:49:ca:f7:99:7b:64:
82:53:2e:7b:0c:4a:3d:78:8a:b8:b8:c2:80:ec:90:
21:37:f8:f4:d0:16:30:fa:ad:66:77:c9:a2:89:ca:
bd:f4:f2:fb:7a:35:c3:8c:99:46:71:38:13:55:fe:
ad:f5:52:28:ec:e5:5d:8e:95:ac:b8:07:01:f5:50:
de:d7:b2:3b:b5:b7:05:36:5c:c2:6f:a3:38:26:a5:
c4:21:3d:b2:49:f4:26:b0:12:de:d4:54:ae:b2:13:
f8:5d:fa:8c:80:12:13:5a:38:ad:e9:30:3c:13:ee:
8f:b0:3e:c5:67:b6:59:91:c3:1d:4f:70:13:bf:85:
c8:5c:cd:9d:81:13:80:ec:9a:25:2a:5e:38:72:f1:
c6:e5:b8:89:aa:0c:de:1e:f3:28:07:56:af:6f:0a:
b7:e0:c0:a4:b2:31:2f:16:c8:38:3f:41:51:8a:e6:
17:4d:0a:76:2d:f8:4f:b5:06:94:a0:39:b9:06:3c:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:DC:F3:06:CF:8C:A1:83:E2:9B:95:42:39:49:D8:12:4B:90:13
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/fxXc8wbPjKGD4puVQjlJ2BJLkBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.124.224.0/20
185.11.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:72:1d:95:c9:65:3d:3e:74:54:70:2f:ee:90:9c:0e:fe:64:
11:26:5e:3c:2b:7d:11:cf:f9:4c:32:0d:29:32:d5:96:b6:ec:
ee:91:9d:10:34:3d:55:78:d2:3a:1a:91:6c:12:fa:99:24:e3:
e8:7e:f6:e3:ca:70:7b:30:5a:cd:00:92:0f:ea:8b:f7:1d:0d:
32:f7:65:c0:c2:2c:15:9f:b2:72:8e:4a:11:22:17:33:f3:86:
3a:73:52:d9:2a:fb:91:83:91:80:85:87:a8:d9:8c:69:7f:17:
b2:54:2f:de:ca:c6:de:4f:5f:4e:e7:e1:54:ed:79:55:a7:a5:
99:35:6d:00:40:6f:f3:a0:5e:2c:e6:26:ab:43:1f:38:b0:77:
3c:b7:8e:27:59:41:90:71:c9:31:0f:9b:be:8c:4b:4b:8d:03:
86:a9:73:e8:65:c7:f9:31:ac:a6:53:5b:ff:ce:df:c1:bc:69:
2a:fb:c6:20:b6:00:9c:12:b4:27:63:05:c8:f5:a7:cd:93:c7:
5c:01:4b:06:f0:d5:53:97:99:b7:1a:a8:c0:e1:a4:d4:d7:33:
b6:64:e4:99:4f:24:11:b2:a2:33:b0:84:c0:3c:88:ca:34:9f:
66:1b:c7:f3:14:79:40:63:46:f9:f6:a2:7c:53:63:bd:bc:8a:
0d:23:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 04:22:56 2026 by rpki-client