Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kZ-s0PyewBbGFC6azfUdZWK8CoY.roa
File: kZ-s0PyewBbGFC6azfUdZWK8CoY.roa (raw, json)
Hash identifier: 8s4MtAY3TD6/no63xt/D4Oim3ePTCVbApoj+QUmn14M=
Subject key identifier: 91:9F:AC:D0:FC:9E:C0:16:C6:14:2E:9A:CD:F5:1D:65:62:BC:0A:86
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0761BFDEF9DC6293A8EB077C6CADFEF8F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kZ-s0PyewBbGFC6azfUdZWK8CoY.roa
Signing time: Sun 06 Sep 2026 09:45:40 +0000
ROA not before: Sun 06 Sep 2026 09:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 89.125.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:1b:fd:ef:9d:c6:29:3a:8e:b0:77:c6:ca:df:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 6 09:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=919facd0fc9ec016c6142e9acdf51d6562bc0a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:c3:7d:de:fc:61:b9:f9:fa:cf:7a:94:14:
49:33:1d:52:54:fc:59:a1:3b:c9:b6:20:59:7e:1d:
a8:2d:25:10:0b:99:ef:34:bd:50:34:ef:04:34:df:
0c:44:f6:dc:eb:ee:af:0f:81:a6:69:a5:d0:50:1a:
e8:98:b5:4b:fb:e2:bd:65:5a:6d:b8:1a:cb:a5:b1:
67:a3:72:fa:44:d8:c4:c2:70:41:46:09:d6:bc:c2:
82:c0:d8:55:c7:59:72:50:fe:0f:84:b2:3a:d0:41:
2e:77:c2:cb:84:7f:ad:82:5b:41:c2:74:16:85:2b:
fc:ef:d9:cb:5a:11:f3:71:b7:c1:e0:07:93:ad:7a:
29:0f:05:b8:7c:12:56:1e:b8:2d:52:3e:02:da:55:
71:e5:66:4f:70:b0:e6:a4:2c:17:ba:dd:8f:a5:cd:
f5:0f:e9:b1:f4:6c:36:45:2e:e0:62:83:37:2d:a0:
15:6f:c8:74:6d:81:57:83:2b:44:c3:18:b3:5d:b7:
4e:ab:07:85:3b:bd:ca:80:aa:4e:3c:9a:ca:39:44:
b0:a2:ec:28:50:f0:3d:7d:dc:32:5b:c1:5c:7d:e2:
2f:db:eb:23:96:51:61:12:4c:e7:0d:66:c6:7b:d1:
69:e6:e8:e5:2b:56:6d:ad:e0:21:00:9c:f4:00:2c:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:AC:D0:FC:9E:C0:16:C6:14:2E:9A:CD:F5:1D:65:62:BC:0A:86
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kZ-s0PyewBbGFC6azfUdZWK8CoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2a:ea:5c:6b:7e:10:4f:e6:aa:73:1d:b3:dd:fa:b3:bb:14:
4e:3c:34:d4:ab:2b:5a:6d:b8:e6:22:9c:bb:d3:33:4e:5f:91:
22:66:fc:7f:6b:ff:ab:32:3f:8c:8a:1c:2a:36:e9:6e:61:0f:
70:de:22:98:0e:17:1a:78:7a:fe:5a:37:56:65:2e:6f:fd:ca:
3e:cd:6d:db:83:5b:72:85:f4:cf:26:43:f3:84:01:bd:27:2a:
b0:7b:93:37:88:8a:a4:c4:15:f7:0f:57:18:a6:86:f8:91:6d:
c5:05:e1:8a:54:e3:2b:c6:11:c2:76:f3:d0:3e:60:4f:c7:3e:
13:fb:56:77:90:c9:b1:2b:f0:04:6e:f2:59:01:cf:3f:ba:a9:
1c:ab:f9:21:42:2d:f3:12:44:36:a1:fa:32:17:e9:d5:8a:ae:
89:ff:7f:15:a9:2e:e5:48:f3:b6:f0:59:31:cc:48:ca:a9:14:
47:c7:5b:6c:82:a6:d2:15:77:f0:8e:da:43:25:84:dc:c8:6e:
9f:3d:87:53:92:11:7e:22:e0:4a:45:d7:76:f7:9e:b3:19:e0:
24:ba:9c:3c:0d:11:41:61:b9:18:1d:88:71:0d:5b:0c:c9:b1:
3e:18:e3:e9:34:aa:41:89:ae:1a:14:e0:36:b4:fb:55:d0:bd:
4c:b6:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:58 2026 by rpki-client