Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hs7-WcpFSHYNR_ANRZ_i5rcnaWo.roa
File: hs7-WcpFSHYNR_ANRZ_i5rcnaWo.roa (raw, json)
Hash identifier: ef0CEJyhjclj/9lQIO0aIn29Pux97iHx3XV6WnXH+l0=
Subject key identifier: 86:CE:FE:59:CA:45:48:76:0D:47:F0:0D:45:9F:E2:E6:B7:27:69:6A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019ED1D327A96714BD2E75A33D22154EA8E1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hs7-WcpFSHYNR_ANRZ_i5rcnaWo.roa
Signing time: Tue 16 Jun 2026 19:05:36 +0000
ROA not before: Tue 16 Jun 2026 19:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 89.125.28.0/24 maxlen: 24
89.125.29.0/24 maxlen: 24
89.125.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:d3:27:a9:67:14:bd:2e:75:a3:3d:22:15:4e:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 19:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86cefe59ca4548760d47f00d459fe2e6b727696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:54:68:05:bf:43:db:3a:44:ee:41:79:7b:
70:d9:1c:59:71:b5:80:3c:bc:83:c8:61:dc:45:43:
fd:aa:9b:17:9b:01:21:82:e4:a2:3d:db:17:b0:c5:
ab:64:b5:9c:f5:a2:a6:e2:81:2c:ed:b0:fc:c9:8e:
42:ca:59:51:69:88:71:5f:3c:b3:fa:67:c5:59:f8:
55:5f:64:01:a4:31:60:a9:78:a3:82:52:bd:19:57:
ba:ea:65:b9:6c:21:70:43:ef:d8:0b:9c:a0:ad:85:
45:2e:ea:c7:6d:c7:a4:42:53:13:87:a5:66:6a:97:
cc:59:b7:fa:a8:7e:16:a8:09:1d:c6:b5:3f:0c:a4:
47:f0:58:32:56:74:55:f7:70:9b:4d:1e:f1:d0:f2:
2e:0f:78:ce:5f:ae:3d:ca:0a:67:2d:fc:b3:70:a9:
82:8d:52:c4:76:05:b3:8d:7a:fd:86:f1:47:c6:fb:
2e:20:19:06:96:1d:ed:3c:1f:aa:28:17:01:d6:77:
78:64:53:96:bd:a5:fd:c4:9c:bd:5d:76:dc:f0:3e:
ac:e2:05:3d:51:0b:74:05:4b:a0:28:ba:15:44:a5:
2d:2a:dd:41:b1:fc:2b:90:b3:f3:a5:19:4f:15:0e:
a7:23:55:61:f7:33:72:92:d1:d9:d8:22:75:25:6e:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:FE:59:CA:45:48:76:0D:47:F0:0D:45:9F:E2:E6:B7:27:69:6A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hs7-WcpFSHYNR_ANRZ_i5rcnaWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.28.0/23
89.125.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:13:99:23:9b:8e:1b:c9:6c:f3:8d:52:b0:3e:cd:76:f3:a2:
0b:b4:19:10:b0:ae:15:90:b4:e3:c7:34:ac:e2:df:5e:93:7f:
67:e1:fd:f8:91:e3:a2:1e:f4:58:72:b7:d1:1d:78:00:d3:77:
a7:a2:59:d3:52:3d:ab:0b:39:99:f9:fd:66:d1:6a:c2:78:e9:
f2:a0:79:ba:9f:5f:6d:de:7b:3b:e6:57:d2:55:91:99:27:b2:
49:f3:bd:55:3d:b0:72:f6:52:36:9e:6d:f7:f0:a2:14:64:42:
9e:a7:54:ac:fe:b6:a3:c3:76:1d:0c:23:96:d9:71:bc:7b:8d:
1f:e1:d5:a1:f8:54:72:1c:76:02:da:0b:4e:1a:17:48:f1:6f:
09:0a:96:3a:00:c7:c5:e8:99:3d:72:db:05:fc:26:e7:6a:f0:
2b:b5:8f:12:18:0c:84:c3:46:50:59:fe:76:9e:47:a6:55:ee:
ee:6e:bf:90:e6:7f:47:3b:78:86:0d:9d:78:9d:9e:5b:f4:7f:
52:86:4e:d3:a9:1a:4c:21:48:a9:2d:08:50:b9:62:f4:a3:60:
46:28:62:87:3e:55:56:e7:9a:18:d6:75:d4:8d:2d:f0:ba:e1:
6f:e3:46:f4:e7:cf:d6:d0:84:25:99:27:24:39:fa:5a:2a:d9:
6a:27:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:31:28 2026 by rpki-client