Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/byVT_U9qWMXxwKMPAEAisgLew58.roa
File: byVT_U9qWMXxwKMPAEAisgLew58.roa (raw, json)
Hash identifier: yZB9qksKNpwHC02qB/QcH5SejDPtZM1mW3ShKCh49e0=
Subject key identifier: 6F:25:53:FD:4F:6A:58:C5:F1:C0:A3:0F:00:40:22:B2:02:DE:C3:9F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0AFB96EA65A4464C5344388970660438D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/byVT_U9qWMXxwKMPAEAisgLew58.roa
Signing time: Thu 17 Sep 2026 14:16:00 +0000
ROA not before: Thu 17 Sep 2026 14:16:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 89.125.9.0/24 maxlen: 24
89.125.11.0/24 maxlen: 24
89.125.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b9:6e:a6:5a:44:64:c5:34:43:88:97:06:60:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 17 14:16:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f2553fd4f6a58c5f1c0a30f004022b202dec39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:67:ac:f0:ca:18:4c:77:64:23:ca:6b:f4:
78:39:fa:9b:05:ca:5b:b6:1e:7a:33:7b:0d:52:93:
74:1e:32:f9:c0:75:71:5f:be:53:28:a0:41:de:5c:
a2:9d:29:f6:c2:57:8b:76:f7:2c:69:11:ef:8c:7f:
42:1d:75:c2:a3:6e:83:58:55:4a:49:66:14:c1:4f:
cb:e8:5c:9c:45:7f:0c:04:2a:0f:7c:63:26:b5:4e:
cb:b4:6c:c4:13:37:b9:e1:b5:5d:aa:04:ff:e1:36:
f9:58:26:b9:7b:fc:d8:5f:a6:4d:93:77:74:55:96:
8c:6f:e2:19:2b:dd:d6:f0:76:b9:09:f9:60:9e:4f:
18:3e:d2:54:a1:40:e4:a8:71:e7:4d:04:b9:b0:3c:
02:37:bc:f0:6d:20:f3:c0:fe:c4:d3:b0:e4:75:f2:
ff:b3:ba:20:a0:82:ab:5c:fe:de:a6:28:ef:77:43:
ca:ff:c3:36:90:cb:cc:84:53:05:c3:c7:47:97:f9:
59:e2:e3:86:4a:b5:de:98:be:e5:08:87:59:fc:19:
4e:e1:49:7c:fe:8f:75:89:49:fe:f7:4a:43:66:39:
2b:97:96:b9:23:e6:ed:f5:5e:b1:f3:2c:47:2d:1d:
0d:48:ce:24:09:ef:0c:e5:1a:89:cc:f6:45:24:55:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:25:53:FD:4F:6A:58:C5:F1:C0:A3:0F:00:40:22:B2:02:DE:C3:9F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/byVT_U9qWMXxwKMPAEAisgLew58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.9.0/24
89.125.11.0/24
89.125.175.0/24
Signature Algorithm: sha256WithRSAEncryption
73:19:a0:c4:df:d9:e4:63:42:0f:ba:2f:b0:19:53:e6:16:30:
ec:37:ea:86:fa:9a:fb:1e:ef:b4:34:32:06:f6:52:67:df:70:
29:7d:02:9f:e1:7f:7f:37:f9:fe:05:f4:36:ad:ab:51:6c:1b:
40:e3:70:25:52:ef:14:ba:bc:1f:5b:59:5b:b8:d0:c7:ce:d8:
d1:cd:88:58:6f:87:18:17:06:4a:ec:61:7b:e8:32:b5:33:93:
13:6b:41:3b:7d:05:4a:15:58:1e:a6:ed:4e:ac:41:5b:e6:8c:
38:13:73:11:44:ee:fb:ad:80:11:13:30:54:f9:9d:63:df:81:
36:48:35:17:36:1b:fa:1e:23:4d:fe:ad:50:86:26:b9:8d:41:
94:87:74:3b:14:85:bf:94:c1:b4:e6:90:e5:4f:cc:49:5c:d5:
75:a7:7b:9c:a3:05:37:37:99:25:b4:29:60:33:58:bc:d2:84:
39:28:ed:b4:a4:1c:3b:76:d9:4b:02:95:9e:c2:26:ca:0e:e8:
ab:a5:f1:26:e7:e8:c7:e5:9e:dd:d2:8e:10:45:c9:ed:34:8f:
bb:71:e3:b0:3f:e0:0a:cd:45:7c:0d:6d:50:70:b7:97:e8:42:
78:b4:a7:b4:3c:bb:3d:d8:1f:40:6a:41:28:15:60:e9:f7:b8:
c4:6c:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:45 2026 by rpki-client