Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XNxp-UVua5cAbWfRoQVelE-0qDo.roa
File: XNxp-UVua5cAbWfRoQVelE-0qDo.roa (raw, json)
Hash identifier: d6qpMkjCVPQjKGFbYkLoerOyWWIiXC8RBqLrT57taR4=
Subject key identifier: 5C:DC:69:F9:45:6E:6B:97:00:6D:67:D1:A1:05:5E:94:4F:B4:A8:3A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C9F58DE9B0309B26D78B4713F5D588A03
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XNxp-UVua5cAbWfRoQVelE-0qDo.roa
Signing time: Fri 27 Feb 2026 13:45:27 +0000
ROA not before: Fri 27 Feb 2026 13:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 89.125.37.0/24 maxlen: 24
89.125.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:58:de:9b:03:09:b2:6d:78:b4:71:3f:5d:58:8a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 27 13:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cdc69f9456e6b97006d67d1a1055e944fb4a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:50:ad:4c:47:b0:ba:e4:92:6a:f6:c3:df:
97:25:ef:62:eb:2f:2e:28:7c:65:70:b4:e8:b7:07:
66:ca:65:4a:00:c4:03:ad:66:96:f3:1b:e7:1b:cc:
c6:46:79:d2:43:cc:66:43:57:21:04:fb:b2:5e:60:
84:bb:2c:41:2a:af:59:0b:e7:cc:7f:a3:b6:38:54:
a1:d6:9f:ea:b0:3d:22:a7:bf:2b:c2:25:32:6c:93:
9e:e5:79:e7:39:fe:b2:d4:1d:c9:89:d1:09:15:18:
67:b6:d9:cb:34:45:46:92:1e:69:b5:f0:b6:ba:01:
b1:2f:8c:ea:3e:5f:fc:8a:f3:02:90:b3:19:06:e1:
8b:ab:02:f3:c6:b1:ee:80:d6:3c:76:da:21:31:7b:
18:29:f8:a0:8c:81:01:6c:ca:38:19:30:eb:44:07:
7a:82:70:84:a6:c0:2b:72:1b:35:9a:ab:29:94:a5:
c1:07:46:58:55:a0:d6:22:d0:a6:93:4d:04:aa:23:
34:98:6e:a9:4a:66:79:5a:04:d4:43:53:0b:9b:ff:
c3:03:4d:96:2f:a3:5b:18:d2:9e:74:23:be:55:bd:
31:09:36:f9:7b:c8:31:32:28:6a:db:b4:9a:12:6e:
62:51:be:28:83:64:ab:f7:6d:2a:b4:47:82:97:24:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:69:F9:45:6E:6B:97:00:6D:67:D1:A1:05:5E:94:4F:B4:A8:3A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XNxp-UVua5cAbWfRoQVelE-0qDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.37.0/24
89.125.48.0/24
Signature Algorithm: sha256WithRSAEncryption
66:00:31:3d:5c:7c:f7:c4:6b:95:c8:79:c8:34:3a:1a:3c:7d:
b9:16:04:8f:cb:c1:59:e8:c7:8a:dd:d1:d6:9b:94:9b:26:a1:
f7:c8:52:64:48:d5:4a:64:bd:d7:b8:5f:b1:eb:8f:f1:9a:ed:
a1:c8:c6:52:ba:88:5c:4d:82:73:e2:95:e4:16:96:4d:02:77:
2c:4a:9a:26:b7:1c:37:09:f2:e3:8b:2a:3a:96:b6:bb:5a:28:
70:66:30:d2:70:a5:1f:17:ef:9d:82:62:1f:44:e2:2d:85:fd:
e6:94:44:18:62:da:15:9d:51:60:2b:d6:51:cc:97:bc:a1:09:
b8:4f:9d:48:80:bf:ff:2b:48:3c:53:fe:0d:33:76:b0:1d:ee:
d2:0a:13:55:af:15:38:06:6d:a5:f7:88:d8:6f:b0:d7:bf:0a:
0f:24:9e:6a:9c:0f:e6:55:3b:cf:a3:a6:b9:1a:94:b9:82:be:
83:b8:66:ac:b3:c0:b2:b7:fb:02:72:7c:a7:ec:2e:d7:fa:80:
8a:2f:bc:04:61:f5:fd:0d:40:52:5c:0e:59:b0:7b:6e:c7:38:
7e:2b:57:a1:1f:5e:82:8e:73:f3:d7:f0:a7:b6:e5:0a:18:cd:
d4:7d:df:95:e0:df:fc:11:47:c3:5b:b5:40:76:d2:b0:bb:17:
ec:92:52:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyfWN6bAwmybXi0cT9dWIoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMjI3MTM0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RjNjlmOTQ1NmU2Yjk3MDA2ZDY3ZDFhMTA1NWU5NDRmYjRhODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+lQrUxHsLrkkmr2w9+XJe9i6y8u
KHxlcLTotwdmymVKAMQDrWaW8xvnG8zGRnnSQ8xmQ1chBPuyXmCEuyxBKq9ZC+fM
f6O2OFSh1p/qsD0ip78rwiUybJOe5XnnOf6y1B3JidEJFRhnttnLNEVGkh5ptfC2
ugGxL4zqPl/8ivMCkLMZBuGLqwLzxrHugNY8dtohMXsYKfigjIEBbMo4GTDrRAd6
gnCEpsArchs1mqsplKXBB0ZYVaDWItCmk00EqiM0mG6pSmZ5WgTUQ1MLm//DA02W
L6NbGNKedCO+Vb0xCTb5e8gxMihq27SaEm5iUb4og2Sr920qtEeClyQP9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFzcaflFbmuXAG1n0aEFXpRPtKg6MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWE54cC1VVnVhNWNBYldmUm9RVmVsRS0wcURvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWX0lAwQA
WX0wMA0GCSqGSIb3DQEBCwUAA4IBAQBmADE9XHz3xGuVyHnINDoaPH25FgSPy8FZ
6MeK3dHWm5SbJqH3yFJkSNVKZL3XuF+x64/xmu2hyMZSuohcTYJz4pXkFpZNAncs
Spomtxw3CfLjiyo6lra7WihwZjDScKUfF++dgmIfROIthf3mlEQYYtoVnVFgK9ZR
zJe8oQm4T51IgL//K0g8U/4NM3awHe7SChNVrxU4Bm2l94jYb7DXvwoPJJ5qnA/m
VTvPo6a5GpS5gr6DuGass8Cyt/sCcnyn7C7X+oCKL7wEYfX9DUBSXA5ZsHtuxzh+
K1ehH16CjnPz1/CntuUKGM3Ufd+V4N/8EUfDW7VAdtKwuxfsklLA
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:07 2026 by rpki-client