Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MIPoCfVf7otmDtGe80-0muiAs-I.roa
File: MIPoCfVf7otmDtGe80-0muiAs-I.roa (raw, json)
Hash identifier: WKtZo9rgys9tz2PL4Hu1ofZs5k2xzQGM7TCdI/89vZg=
Subject key identifier: 30:83:E8:09:F5:5F:EE:8B:66:0E:D1:9E:F3:4F:B4:9A:E8:80:B3:E2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A15FFB8D7FDDAB3C6BEBACB7B5DBD7B364
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MIPoCfVf7otmDtGe80-0muiAs-I.roa
Signing time: Wed 21 Oct 2026 19:41:23 +0000
ROA not before: Wed 21 Oct 2026 19:41:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 89.125.108.0/22 maxlen: 22
89.125.204.0/22 maxlen: 22
140.225.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:fb:8d:7f:dd:ab:3c:6b:eb:ac:b7:b5:db:d7:b3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 21 19:41:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3083e809f55fee8b660ed19ef34fb49ae880b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:31:07:fb:de:5a:43:1a:c1:66:bf:d3:b8:
06:f8:34:aa:0d:9d:8e:d0:0f:a8:60:2f:72:9c:4f:
f3:50:62:47:a6:d8:7d:57:b1:3b:a0:b3:78:72:b1:
17:3e:0e:73:da:59:ce:b5:f4:70:d2:3f:91:05:1b:
a6:2e:8c:c1:85:68:a7:01:4d:98:da:ba:05:36:d6:
0d:88:48:e6:2b:f8:83:06:ec:89:a7:03:94:3d:98:
8b:2b:5a:ff:8d:97:2f:3a:4e:b2:64:da:d4:d4:a2:
33:1b:13:c4:ad:b1:07:ac:26:eb:e8:a5:7d:59:b9:
1a:7c:e1:4a:02:53:15:90:a2:20:11:a5:3a:2a:57:
36:0c:58:98:2d:9f:e0:ea:ef:46:79:08:f6:1b:96:
09:8a:c0:90:8b:8b:b0:2c:76:11:54:f0:cf:00:ff:
a3:b2:75:c9:c4:a0:63:33:b2:3f:0a:ea:fd:04:de:
82:8d:6d:bf:fd:75:fb:9d:c4:c7:c3:37:c6:c8:b0:
e2:06:b0:bb:b7:8e:db:9d:92:48:ca:2a:56:db:14:
bb:ce:4e:5c:7e:90:ab:40:86:9b:53:55:03:25:cc:
15:fe:18:64:5a:42:60:bb:54:e4:cf:68:21:09:38:
b5:a3:49:b5:96:32:12:90:15:b3:cf:40:25:33:3c:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:E8:09:F5:5F:EE:8B:66:0E:D1:9E:F3:4F:B4:9A:E8:80:B3:E2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MIPoCfVf7otmDtGe80-0muiAs-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.108.0/22
89.125.204.0/22
140.225.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c1:e7:ab:b4:b1:e8:b6:24:a5:50:2a:35:ee:41:e9:ad:2f:
15:7f:5a:3b:ef:9f:f5:4e:89:9f:8f:84:fb:e5:13:2e:89:77:
3c:07:b1:25:0b:b5:71:9a:e6:84:9a:3d:1c:a6:46:2b:b2:19:
9a:a4:f7:79:e1:b2:d3:a1:f3:3f:25:d0:21:7b:16:59:d3:32:
fd:73:56:85:a6:30:86:ed:d9:03:8c:b8:73:a3:07:20:f4:74:
b7:d3:28:b8:a9:0b:87:2b:74:58:ff:5c:c8:03:43:06:ee:38:
66:da:2a:38:b5:4b:c8:37:a4:f6:a5:bf:90:f7:c9:57:f6:43:
35:9c:0c:3b:fb:56:95:ad:54:be:2a:9a:19:0e:87:fb:d9:1d:
e5:55:f3:89:49:8a:23:f1:37:bb:a5:48:f6:c1:f7:85:e8:84:
5f:af:ee:b0:be:a2:b5:37:15:a0:44:de:ae:11:c7:ad:07:07:
97:db:84:8c:59:2c:6f:96:8b:bc:eb:d8:f9:14:88:6b:c3:df:
cf:52:3d:db:63:f7:4e:68:bb:66:2b:cd:8f:fa:93:e7:c2:d2:
a5:72:6a:14:48:3c:bc:da:d3:ac:59:16:e3:0c:e3:2b:03:b0:
d4:4f:3a:78:1d:89:2e:0f:b2:22:3b:36:1d:06:d2:1d:04:ea:
05:40:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:49:58 2026 by rpki-client