Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iJMTetMvrXUkxo--A3opvBn_r5I.roa
File: iJMTetMvrXUkxo--A3opvBn_r5I.roa (raw, json)
Hash identifier: rP4vLjg5VifxSjOJYBTvOUrUvMvidLv0ZNQFGGljDm0=
Subject key identifier: 88:93:13:7A:D3:2F:AD:75:24:C6:8F:BE:03:7A:29:BC:19:FF:AF:92
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D70CB8A6782795BCBDF9B2D6F893A6A8B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iJMTetMvrXUkxo--A3opvBn_r5I.roa
Signing time: Thu 09 Apr 2026 05:51:20 +0000
ROA not before: Thu 09 Apr 2026 05:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 89.125.40.0/21 maxlen: 21
89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
89.125.224.0/20 maxlen: 20
167.17.44.0/23 maxlen: 23
206.245.136.0/21 maxlen: 21
206.245.144.0/21 maxlen: 21
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:cb:8a:67:82:79:5b:cb:df:9b:2d:6f:89:3a:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 9 05:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8893137ad32fad7524c68fbe037a29bc19ffaf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:17:0f:74:19:d7:00:5d:b7:90:65:71:79:
4b:1c:41:65:90:ee:ed:cd:11:df:0b:f7:98:ee:07:
c1:47:e2:38:17:34:95:ac:f2:62:a9:b7:44:7e:4f:
48:f9:65:47:e4:37:1b:16:12:80:44:33:6b:aa:67:
a7:54:83:a1:c2:1e:0d:9d:9b:b1:14:f3:6c:78:48:
95:80:a9:0d:5e:fa:db:cb:d4:90:13:13:3a:19:fa:
f1:2f:fc:ce:5f:16:9c:a9:b1:f8:5b:ac:38:ca:49:
a2:67:e9:95:62:76:ff:6d:1c:dc:0e:23:e6:bc:c8:
8e:ff:5e:77:13:a3:d4:ef:0f:2c:00:7e:6f:9b:56:
2e:3e:82:6a:32:ef:4b:fe:83:dc:32:eb:93:ef:b0:
06:45:81:1d:61:48:9b:00:11:5c:b5:52:94:20:11:
40:fc:f5:1a:8d:ec:48:5c:4b:c0:cf:13:72:50:5a:
1d:54:5d:80:49:68:45:b8:24:14:3a:86:49:9c:ad:
ae:01:85:1e:a1:b3:cd:3d:74:26:46:51:c9:31:e6:
95:7c:af:67:bf:f9:5a:30:a2:3d:31:c7:b5:ce:fe:
81:e7:1e:42:a6:75:d1:92:d4:ac:32:f7:68:a5:19:
5f:2f:b3:8d:9a:f1:46:51:0c:a0:93:bc:bc:e9:40:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:13:7A:D3:2F:AD:75:24:C6:8F:BE:03:7A:29:BC:19:FF:AF:92
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iJMTetMvrXUkxo--A3opvBn_r5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.40.0/21
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
89.125.224.0/20
167.17.44.0/23
206.245.136.0-206.245.151.255
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
64:aa:23:4f:09:c8:88:cc:04:c7:9b:60:a2:8d:f1:e0:38:bd:
3c:fe:73:d2:2e:51:c5:92:26:21:c3:06:f4:bd:7c:7a:9a:0f:
b5:f2:23:33:01:8c:ba:23:8d:85:87:18:f6:42:82:18:89:fd:
e8:7c:e7:27:f4:5f:3f:ea:33:48:a8:11:7e:ba:c9:2c:fa:f9:
2e:23:78:48:5f:08:39:87:05:37:95:69:76:20:d6:60:97:ca:
18:7c:dc:a6:c9:43:5c:01:b0:3d:3c:23:25:8e:64:c7:84:c7:
80:11:8c:75:4e:51:40:29:94:fe:7d:fd:c2:c2:af:a7:62:6f:
2c:d1:cf:47:cd:f4:9a:ae:e3:8b:76:42:fe:51:9e:c7:f6:fd:
f2:45:ab:c3:44:23:16:2f:4b:f7:76:c2:73:cd:99:97:dc:7a:
b0:4b:39:92:36:d7:3b:79:72:d8:9b:22:69:0d:45:0b:f5:81:
18:5e:27:b6:d3:b1:8f:87:12:2c:84:ff:c5:27:a3:2a:29:46:
e0:a1:04:c2:1b:a1:b1:8e:33:8e:a5:2f:8d:6b:66:be:28:be:
32:f6:c0:01:1e:6c:b6:cc:57:5c:48:71:84:8c:21:0b:24:93:
01:46:fd:00:f9:d1:80:7b:1f:9f:ff:9d:d7:9d:2a:07:84:01:
8f:b8:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:49 2026 by rpki-client