Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T1ZnPh-qjKTUcY8DAPAR41y-1kY.roa
File: T1ZnPh-qjKTUcY8DAPAR41y-1kY.roa (raw, json)
Hash identifier: dY2lRTPjEuMVot+wPFenOcmdompNf0/uE8ykijeeL8k=
Subject key identifier: 4F:56:67:3E:1F:AA:8C:A4:D4:71:8F:03:00:F0:11:E3:5C:BE:D6:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C9E1A43D771B4C9C15CA5807DD8505458
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T1ZnPh-qjKTUcY8DAPAR41y-1kY.roa
Signing time: Fri 27 Feb 2026 07:57:27 +0000
ROA not before: Fri 27 Feb 2026 07:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 89.44.76.0/24 maxlen: 24
89.125.39.0/24 maxlen: 24
89.125.52.0/24 maxlen: 24
89.125.57.0/24 maxlen: 24
89.125.59.0/24 maxlen: 24
89.125.72.0/24 maxlen: 24
89.125.74.0/24 maxlen: 24
89.125.118.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:1a:43:d7:71:b4:c9:c1:5c:a5:80:7d:d8:50:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 27 07:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f56673e1faa8ca4d4718f0300f011e35cbed646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:10:b7:a1:29:63:92:e6:c1:83:dc:a8:7e:
a6:7a:c2:d9:d4:87:b8:5f:51:a9:63:0e:bc:fb:3c:
f8:e3:a0:10:55:62:43:d7:e6:5a:d6:06:7a:f4:78:
66:11:53:0e:df:72:e9:46:22:9d:25:2e:65:91:58:
ee:e6:61:d9:33:d6:90:35:f0:54:11:3d:a1:aa:73:
e9:a1:67:10:a2:4d:10:9d:3b:d4:58:43:b4:85:cd:
04:f3:34:f4:ab:92:6f:e3:7e:e4:83:9b:d7:f2:37:
f3:b6:2f:d5:88:5b:6f:2b:1f:82:2c:2a:4b:ce:e3:
0c:56:a1:c9:4b:df:0a:3e:7d:26:a8:98:f9:a7:af:
43:99:96:80:fa:48:b5:e7:80:b3:d5:65:27:ff:d4:
88:93:fc:0d:7f:ef:30:81:91:3a:ad:d0:28:85:7d:
91:38:fc:f3:dc:29:65:8f:f5:63:65:1c:c5:a9:74:
fe:5e:00:35:c5:3c:52:f2:04:64:80:78:dd:a8:09:
fb:1d:48:e0:f9:17:d6:9a:13:9c:e8:9d:7f:df:82:
32:05:da:e5:01:c4:b4:c6:54:ab:f2:41:bc:a4:0e:
d2:77:ee:05:59:e8:3d:62:e5:65:83:cd:c5:24:00:
1a:83:9d:4a:92:03:9f:ff:0c:fe:40:44:f3:37:a0:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:67:3E:1F:AA:8C:A4:D4:71:8F:03:00:F0:11:E3:5C:BE:D6:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T1ZnPh-qjKTUcY8DAPAR41y-1kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.76.0/24
89.125.39.0/24
89.125.52.0/24
89.125.57.0/24
89.125.59.0/24
89.125.72.0/24
89.125.74.0/24
89.125.118.0/24
103.245.229.0/24
185.141.217.0/24
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4b:f8:d8:08:b5:6f:a7:c5:5f:1f:06:6c:4b:00:4c:f3:d0:
b7:31:71:cc:da:16:ca:da:29:05:a0:39:ee:75:7f:8f:70:ac:
80:54:16:42:c3:55:1e:89:13:88:e6:b1:2e:08:6e:c8:87:ec:
17:16:e2:93:ec:af:5f:9b:7b:88:13:eb:90:a7:6a:f8:92:e2:
61:8f:63:2b:c7:c6:b4:9e:a9:45:ea:85:c4:ea:70:61:dc:74:
01:3c:3c:13:d9:0b:cb:9c:34:1e:b4:74:a5:6c:f2:2f:d7:ef:
f4:6d:d0:1e:50:07:80:63:cc:e5:37:12:8f:5c:fe:5c:8f:1f:
66:1e:d0:13:da:42:28:d1:b6:95:1e:9c:a3:64:24:c8:d2:57:
71:87:61:19:39:ba:2c:33:7e:fe:e5:b6:50:c8:32:ce:0b:9b:
7d:55:c4:60:3d:37:d5:e0:5d:fa:b7:90:30:cf:f0:05:95:db:
6e:d7:31:8d:44:dc:22:44:45:a9:b1:bb:df:85:bf:de:3e:5a:
06:18:79:4a:96:31:a2:2e:e0:58:0e:0d:08:5e:cf:3f:4c:3b:
50:a4:f8:0b:14:01:4a:03:7f:d5:1e:c9:86:d7:19:18:8d:03:
d9:4b:46:67:48:27:ac:26:aa:f6:c8:89:87:98:cc:2e:40:e8:
e8:fb:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:22 2026 by rpki-client