Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FMiQc2NAwfZSx6THRWnI_xZKJJ8.roa
File: FMiQc2NAwfZSx6THRWnI_xZKJJ8.roa (raw, json)
Hash identifier: WIDnFkZx4s9RT/niAApZoPb0uDxzdtG7fTYwTLlQxa4=
Subject key identifier: 14:C8:90:73:63:40:C1:F6:52:C7:A4:C7:45:69:C8:FF:16:4A:24:9F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C312103B613D2204E3E23F49A988B91C4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FMiQc2NAwfZSx6THRWnI_xZKJJ8.roa
Signing time: Fri 06 Feb 2026 04:06:13 +0000
ROA not before: Fri 06 Feb 2026 04:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206097
IP address blocks: 89.125.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:21:03:b6:13:d2:20:4e:3e:23:f4:9a:98:8b:91:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 6 04:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14c890736340c1f652c7a4c74569c8ff164a249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:d1:cc:64:d2:5e:b3:c5:1f:fc:2a:1e:9d:
d8:b1:ad:df:e2:92:1a:08:c5:2c:bf:1f:6a:07:ad:
d1:cd:00:34:22:12:d5:f8:40:f5:9b:70:f2:3c:76:
fd:c3:24:f3:3e:85:15:01:f6:38:e6:ed:e7:42:67:
36:c0:ec:2d:e2:11:d8:06:5c:b7:7a:6c:0d:9e:23:
24:9e:01:9f:f7:50:24:a8:f9:35:de:2f:53:ea:15:
c4:ce:5b:9a:17:4a:5c:34:33:d0:34:a9:00:d2:a8:
ee:53:3d:c0:08:30:94:3c:05:6d:b5:e3:de:3c:7a:
1e:1f:be:80:b3:48:20:19:5d:6d:44:f3:d0:19:2b:
65:11:9e:6f:af:68:9a:e8:32:f9:d7:68:08:3c:93:
63:18:c8:bb:c2:08:e1:bd:8d:f8:83:7e:7c:7e:15:
a9:a7:35:e3:0e:25:34:d5:0c:4c:31:0b:75:d6:2f:
c1:aa:0d:13:2b:68:cb:bd:e1:d3:2a:73:1c:8a:43:
90:12:aa:ca:d3:9b:d2:af:df:2b:b8:92:24:40:3a:
18:c7:35:bc:d2:88:98:9f:0b:38:b0:eb:c0:99:24:
ca:91:bd:fa:d4:b7:76:c8:ce:bb:9e:72:e5:76:48:
85:6c:e3:67:5d:78:25:7f:0c:a8:29:3f:f3:92:01:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:90:73:63:40:C1:F6:52:C7:A4:C7:45:69:C8:FF:16:4A:24:9F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FMiQc2NAwfZSx6THRWnI_xZKJJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0c:23:43:96:57:49:ab:e9:c0:26:82:a7:b3:8b:b9:91:c4:
ac:9e:74:ad:bb:08:01:e6:3d:1c:cd:16:d9:64:85:66:4f:b8:
56:ec:89:15:98:66:13:78:1e:88:82:62:49:04:4b:4b:0f:61:
38:b5:6d:91:49:f0:5d:c8:c4:31:72:46:0a:21:77:b9:13:29:
85:b0:1f:35:5d:55:9a:69:01:7e:39:aa:31:b5:58:f9:67:11:
62:27:57:ca:ac:6a:80:e8:78:c7:ba:9a:68:ac:43:d3:aa:13:
ec:72:d5:9b:a3:cb:10:c6:68:c8:f1:52:4d:ac:df:90:d2:32:
c3:0e:a0:e0:5c:e6:9a:4e:9e:8c:e9:a4:10:19:53:00:1a:b0:
b8:78:8b:d1:f7:d8:30:b8:bd:fc:a9:71:4d:a5:3c:1c:37:66:
f5:c6:c4:40:4e:f5:3d:e8:68:01:12:5d:80:da:76:12:ed:f6:
89:46:20:b3:af:a3:14:35:fc:49:41:15:56:e0:6c:2e:99:30:
e0:2b:01:73:c6:34:44:7c:bd:2a:36:d4:da:a8:33:4c:12:d0:
6a:1f:20:9c:65:83:20:a2:32:3e:f0:bf:b9:9d:cd:d4:65:10:
e8:ab:09:46:70:2c:34:eb:59:28:4d:07:86:ac:55:9e:d5:01:
0e:90:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:32 2026 by rpki-client