Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9cb_sjtMdzhXGi4xsutP62Ouf1U.roa
File: 9cb_sjtMdzhXGi4xsutP62Ouf1U.roa (raw, json)
Hash identifier: OpwXQBZVObaqMpH8nxcNaL6afOja+lRtlPBx7QD1ICc=
Subject key identifier: F5:C6:FF:B2:3B:4C:77:38:57:1A:2E:31:B2:EB:4F:EB:63:AE:7F:55
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EA72FD6D1995F4A57927753D3025FBDC2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9cb_sjtMdzhXGi4xsutP62Ouf1U.roa
Signing time: Mon 08 Jun 2026 12:23:10 +0000
ROA not before: Mon 08 Jun 2026 12:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 89.125.132.0/24 maxlen: 24
89.125.133.0/24 maxlen: 24
89.125.134.0/24 maxlen: 24
89.125.135.0/24 maxlen: 24
104.143.196.0/22 maxlen: 22
104.143.196.0/24 maxlen: 24
104.143.208.0/22 maxlen: 22
104.143.212.0/22 maxlen: 22
104.143.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:2f:d6:d1:99:5f:4a:57:92:77:53:d3:02:5f:bd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 8 12:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c6ffb23b4c7738571a2e31b2eb4feb63ae7f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:73:f0:0b:4c:43:95:a6:7f:71:38:7f:c5:b6:
a7:ff:bc:b9:18:f5:07:6b:26:36:b8:c4:92:8f:96:
c8:9b:8f:2a:29:fe:a9:5c:3b:86:7d:87:4a:bb:21:
3f:39:3f:69:f3:d0:a5:32:58:c3:b4:47:a7:63:67:
7f:28:10:b8:c7:3d:41:d3:66:0a:0e:d4:97:a4:f3:
00:e6:d9:24:51:22:e3:10:2c:e6:5b:62:1a:75:22:
57:b7:5a:35:70:61:2a:64:d3:de:69:58:36:32:51:
d8:01:d2:87:4e:00:6a:e0:59:06:4c:d9:d3:26:91:
53:0f:1f:66:fc:47:73:7c:d9:f5:2e:4b:cb:74:5d:
46:66:95:a3:d7:7e:5a:eb:7d:45:d4:f5:53:41:27:
33:f1:71:76:e8:55:f4:0a:0c:af:9c:c9:f9:f6:5f:
6a:00:ba:46:25:0a:aa:f1:ad:f1:47:ad:47:29:8b:
a6:b5:f2:04:9c:84:40:44:27:26:8e:76:aa:fa:b7:
75:2d:66:6d:34:e1:60:d7:d0:2e:ed:a7:4b:b8:0b:
da:89:c1:59:c1:3b:e7:e2:e4:29:d8:59:68:c2:09:
10:b9:eb:6c:f1:08:cf:38:40:8f:48:64:5f:40:a2:
18:68:db:dd:f1:f0:c2:00:37:d3:c1:7d:fa:7f:ef:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:FF:B2:3B:4C:77:38:57:1A:2E:31:B2:EB:4F:EB:63:AE:7F:55
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9cb_sjtMdzhXGi4xsutP62Ouf1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.132.0/22
104.143.196.0/22
104.143.208.0/21
104.143.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:06:21:f2:8b:62:58:96:d6:c4:29:8b:8a:00:f9:12:f7:ef:
57:61:91:63:22:f4:99:af:58:a2:85:d9:10:2b:9d:86:26:7a:
50:fe:0f:e0:ff:02:0c:a6:23:c0:d5:5a:99:76:c6:71:9a:3c:
d2:3c:79:1d:e1:2a:e5:e5:0b:5e:41:c3:7f:7d:64:9b:3e:7b:
8c:50:83:c5:5f:e5:d0:36:21:9b:d2:9b:b4:e5:b8:85:5a:e3:
95:65:10:85:bc:dc:7e:87:76:f2:23:40:07:60:7b:de:65:42:
55:35:57:fe:10:17:09:c6:af:79:90:b2:22:78:7b:fb:38:b8:
04:9f:0c:1a:b2:66:44:4c:7f:ce:cf:3d:bb:42:55:23:4d:ab:
5c:34:ab:cc:b8:cc:da:ca:db:a2:28:6b:33:07:4a:21:22:a7:
a7:c2:a9:c8:c3:ef:2b:9c:4e:aa:09:65:1a:9e:27:8c:52:e7:
e3:c9:6c:50:4f:d2:a5:df:07:10:5e:64:2c:4f:3a:62:fa:41:
32:99:9f:a3:18:bd:b9:4c:1e:89:46:1c:e8:d8:93:48:76:5e:
5f:f5:0d:07:f3:fc:68:c6:71:6a:a3:42:c1:9e:ee:09:96:98:
93:2e:9e:53:3c:eb:93:4b:24:95:d6:a0:5f:e9:c3:67:76:aa:
bb:8d:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:34 2026 by rpki-client