Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/A233dI5Nn8PwWLnKMdfhmOwV_n0.roa
File: A233dI5Nn8PwWLnKMdfhmOwV_n0.roa (raw, json)
Hash identifier: Duz9z7TkaAtKB55HH982nxGzkqK3XMnSZIVHRqsbe7s=
Subject key identifier: 03:6D:F7:74:8E:4D:9F:C3:F0:58:B9:CA:31:D7:E1:98:EC:15:FE:7D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D72FDABB5D1BD6D5FE665EDA70EAA9418
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/A233dI5Nn8PwWLnKMdfhmOwV_n0.roa
Signing time: Thu 09 Apr 2026 16:05:20 +0000
ROA not before: Thu 09 Apr 2026 16:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 89.125.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:fd:ab:b5:d1:bd:6d:5f:e6:65:ed:a7:0e:aa:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 9 16:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=036df7748e4d9fc3f058b9ca31d7e198ec15fe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:09:16:09:4a:ed:3e:2c:84:f0:39:ba:52:
5a:97:f9:26:d5:02:76:60:6b:48:4b:13:8f:7e:3c:
e1:c2:45:15:ec:ad:7d:f3:fa:6c:f6:aa:1a:7f:cd:
00:67:11:b1:42:3b:f3:da:13:05:c3:33:76:5c:ae:
8c:33:cb:0a:0a:49:84:cf:dd:64:94:af:12:bb:59:
f0:5c:1a:d7:40:60:49:a1:04:81:cc:9d:2d:0d:13:
5d:45:c4:67:89:98:8a:f6:f7:fa:d2:28:3a:77:23:
ef:cd:43:a5:ae:3b:50:d5:35:1f:84:e6:26:25:4c:
84:06:49:5b:51:ae:a4:20:72:53:ce:49:6c:8e:24:
4f:52:b7:f7:80:77:a7:00:2a:06:26:9e:ec:a0:cb:
30:14:e0:76:e1:7c:6d:a6:ea:44:02:28:2a:95:10:
dd:26:3c:90:1e:69:76:2b:d2:31:ba:4f:e8:c3:31:
b8:80:1f:4c:5d:f0:01:3a:7c:2c:00:67:8f:99:3c:
34:84:3e:12:f3:6a:f1:47:62:42:c4:21:e8:a1:73:
48:60:9c:62:09:c9:65:81:bc:27:ac:ce:24:bf:23:
23:1f:1f:4d:7a:57:0f:e4:ce:ec:f7:a7:29:0a:d7:
cf:cc:c4:c7:9b:9c:6e:cd:83:26:bb:86:61:eb:4a:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:F7:74:8E:4D:9F:C3:F0:58:B9:CA:31:D7:E1:98:EC:15:FE:7D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/A233dI5Nn8PwWLnKMdfhmOwV_n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.160.0/22
Signature Algorithm: sha256WithRSAEncryption
99:af:72:45:3d:22:fa:c3:ae:1b:75:ab:36:44:b7:05:70:fb:
04:03:cf:20:22:b8:44:61:76:c5:86:35:fa:e0:6a:fe:ab:ae:
a0:32:1d:f9:f7:5c:e7:ac:ea:fc:84:93:06:bc:32:5a:6d:f9:
5b:3c:f4:80:e3:1f:9a:0b:d5:b4:0f:97:51:f1:9c:5e:a6:cd:
47:2e:ee:1c:71:06:8b:80:56:2c:af:2b:cf:92:ac:aa:35:ad:
1c:d7:08:b1:b0:17:2f:2b:25:df:3a:e6:a9:6b:c6:99:4c:f0:
0a:66:4d:a8:cc:18:4c:6f:44:47:cf:d5:10:7b:bb:db:a7:b0:
ed:1c:06:3b:88:13:b2:d6:0e:df:a6:bc:e8:dd:84:f7:eb:0c:
a0:a9:75:21:51:a4:04:cc:28:a6:01:56:13:ee:1b:1e:09:ef:
c9:ec:6f:2b:4a:64:5e:91:08:2a:e4:8e:a6:78:a9:22:65:74:
49:05:25:29:cb:bc:2d:17:5d:33:89:1b:51:ae:da:be:6b:29:
8c:06:a5:8c:6f:bb:37:04:47:3c:f3:90:18:7e:7f:a4:c7:7a:
08:d2:05:95:4b:cd:47:b6:79:ba:af:e0:58:e1:41:cb:8a:49:
a4:27:16:91:62:3c:4e:8c:2f:21:3c:80:3a:45:54:e2:35:b0:
6f:e1:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:16 2026 by rpki-client