Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aajH6BNEWzsviLg00bJDKv5vhuY.roa
File: aajH6BNEWzsviLg00bJDKv5vhuY.roa (raw, json)
Hash identifier: Dq0xcxyq9JFEcw5XqP90BsZn4j0+3SeFV+lq/+T9vZc=
Subject key identifier: 69:A8:C7:E8:13:44:5B:3B:2F:88:B8:34:D1:B2:43:2A:FE:6F:86:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C02D1343052B6777BD2308D854C2E0655
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aajH6BNEWzsviLg00bJDKv5vhuY.roa
Signing time: Wed 28 Jan 2026 04:16:30 +0000
ROA not before: Wed 28 Jan 2026 04:16:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
140.225.192.0/21 maxlen: 21
140.225.200.0/21 maxlen: 21
140.225.208.0/21 maxlen: 21
140.225.216.0/21 maxlen: 21
206.245.136.0/21 maxlen: 21
206.245.144.0/21 maxlen: 21
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:02:d1:34:30:52:b6:77:7b:d2:30:8d:85:4c:2e:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 04:16:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a8c7e813445b3b2f88b834d1b2432afe6f86e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:8e:06:41:a6:6e:a9:8a:7c:fb:65:7f:d9:
52:56:96:a4:c8:76:ba:b7:6e:c4:57:c2:61:5e:79:
2e:8f:81:3b:9f:1c:70:b4:e9:90:1a:fe:82:4a:63:
36:11:ca:f0:74:38:2b:a7:23:0c:07:cf:c4:ae:d9:
80:e1:46:ae:aa:17:6f:a1:6e:40:1a:8f:18:06:41:
ce:20:fa:b8:11:1a:26:a2:84:fb:fd:15:73:b4:7f:
6a:f0:79:f3:82:64:ef:fe:e4:81:6f:cc:6e:74:68:
46:3e:4e:12:df:72:fd:f9:54:13:06:24:3b:0a:d9:
c5:de:1a:0e:f4:a6:b7:7b:b2:1d:f4:a3:59:7e:9b:
03:c6:1e:26:a3:fc:32:8e:ea:a9:ba:8f:15:f1:c6:
ef:5c:14:04:ac:a1:ac:0c:34:4a:75:f8:68:6d:a6:
48:3e:81:ed:b9:08:fa:5c:51:47:94:5c:b4:53:33:
bf:2f:a0:53:87:56:02:77:3c:2b:ca:c3:51:98:39:
84:5a:ae:96:98:06:d0:ab:cd:c9:fc:d3:66:87:76:
2e:19:01:cd:92:3b:11:ce:9a:96:03:73:7c:9f:d1:
1a:bb:bb:08:b5:4f:7e:93:f0:78:a9:7c:6d:8e:8b:
04:e6:03:65:5d:2d:fd:e6:71:52:0a:ab:26:61:c7:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:C7:E8:13:44:5B:3B:2F:88:B8:34:D1:B2:43:2A:FE:6F:86:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aajH6BNEWzsviLg00bJDKv5vhuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
140.225.192.0/19
206.245.136.0-206.245.151.255
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0a:e3:6c:cf:7d:3b:75:ce:37:19:ab:ca:9a:ba:d2:5c:34:
b9:b9:75:e1:86:8f:a0:09:b5:9d:c2:4a:9f:db:e5:8c:75:8a:
3e:34:2a:f1:91:87:90:8d:de:43:7d:44:43:29:83:f7:24:23:
da:59:ae:73:9f:3d:bc:f0:55:46:f7:97:3e:fc:81:bc:23:16:
6b:3c:83:8c:44:d3:c1:4f:1a:0e:c9:b9:25:94:0f:72:37:7d:
fd:e2:83:af:b9:8c:7e:e1:1e:01:37:c7:9f:fa:c2:99:11:a4:
ae:33:44:ba:24:3a:72:7a:b8:9f:4a:1f:c9:59:cb:b4:c0:f3:
10:52:0a:eb:76:76:61:2c:fd:ff:39:db:57:e8:2f:c9:06:45:
47:e6:b6:e4:23:ac:0e:1e:e8:6e:bd:71:84:b6:c3:e1:aa:f3:
fb:b2:d2:c2:7e:bb:2f:74:a8:21:72:05:6b:34:70:0d:9e:78:
87:d7:89:7a:9c:7a:bc:a1:a1:c6:44:77:8d:29:75:e1:70:cc:
85:14:c1:91:37:a3:f8:4e:e3:15:60:56:1f:cc:94:83:ff:04:
8d:64:a8:7f:ac:96:d6:c9:1c:e8:7a:bf:e5:f2:48:9b:5c:0f:
36:7d:d9:a3:f4:4c:11:10:38:8f:ac:b5:35:c5:33:55:09:e9:
01:f6:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:33 2026 by rpki-client