Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l6qornvEKtJ29M2vIIbwiPt-8f4.roa
File: l6qornvEKtJ29M2vIIbwiPt-8f4.roa (raw, json)
Hash identifier: Pn8TtrkFHcZcms2Xf5Yta1EcQAIP2al9/hzV3U24aig=
Subject key identifier: 97:AA:A8:AE:7B:C4:2A:D2:76:F4:CD:AF:20:86:F0:88:FB:7E:F1:FE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0BE5021AEC43592BB0E72D9BF6E73F73B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l6qornvEKtJ29M2vIIbwiPt-8f4.roa
Signing time: Sun 20 Sep 2026 10:15:17 +0000
ROA not before: Sun 20 Sep 2026 10:15:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 89.125.96.0/24 maxlen: 24
167.17.34.0/24 maxlen: 24
167.17.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:50:21:ae:c4:35:92:bb:0e:72:d9:bf:6e:73:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 20 10:15:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97aaa8ae7bc42ad276f4cdaf2086f088fb7ef1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:a2:ae:48:5e:7b:56:8c:f8:5c:7b:0f:3b:
d9:92:b6:f7:2e:72:a0:a3:55:f6:6f:27:ae:d2:44:
83:a2:7b:41:b4:56:f9:3a:fb:c8:e7:86:63:23:85:
7d:88:80:f9:d0:a5:62:9c:51:31:ec:90:36:ee:0e:
a8:c4:8a:3a:89:03:1e:af:82:02:d1:6b:69:d8:fd:
c6:63:9b:8b:89:2f:83:02:63:fa:2a:ad:47:1c:73:
09:2f:5c:ce:e8:24:27:5b:f3:15:31:60:c6:42:fd:
5c:58:fd:93:e4:91:e9:d9:f5:04:df:06:64:a8:fb:
29:f5:89:88:c1:05:a4:56:e4:76:5a:7b:fe:c4:b3:
77:6b:ff:82:6d:02:e2:93:c4:cf:bf:7c:4b:e3:f2:
c4:a9:06:5b:5c:35:0f:4c:62:73:97:67:09:f6:89:
0d:a1:09:51:f1:38:c4:80:c4:93:c0:34:29:a7:af:
6c:1d:22:66:c3:43:7f:d9:18:b5:f5:69:37:7d:49:
86:78:cd:40:e8:de:85:12:07:ef:6f:da:20:df:dc:
d3:c2:05:eb:52:3c:a8:46:17:ca:23:80:e3:11:de:
63:04:20:ee:88:1c:78:d9:4f:c0:cb:b0:09:6f:e2:
79:03:85:59:52:71:60:41:fc:ab:88:9b:33:91:08:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:A8:AE:7B:C4:2A:D2:76:F4:CD:AF:20:86:F0:88:FB:7E:F1:FE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l6qornvEKtJ29M2vIIbwiPt-8f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.96.0/24
167.17.34.0/24
167.17.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:93:ca:59:7c:8c:6c:19:91:f9:81:7f:af:89:67:f9:33:6b:
7a:40:9e:ee:45:ab:f6:30:a3:37:e8:20:4d:9c:0e:46:a1:3b:
26:36:39:38:c9:d6:d1:d6:33:a3:22:36:28:81:41:61:da:a7:
a5:5f:5b:3a:d1:e2:bb:73:3e:fc:fb:2e:bb:b5:f4:1c:4b:ad:
f0:a3:6a:d5:20:1f:ea:a7:b1:0e:b4:69:02:30:df:12:a9:4f:
18:b9:c4:8f:f9:a3:a7:ee:6b:ab:bd:11:79:ce:88:95:7c:19:
5d:2b:a5:a3:96:1b:33:8b:b9:db:99:c3:1e:57:a3:3c:09:42:
53:66:49:7f:0a:39:93:45:2b:48:cf:13:c8:9f:13:66:27:2c:
28:58:b0:f2:5c:fe:ed:68:f1:56:15:41:37:4b:18:86:da:09:
5d:c7:56:a9:6e:d8:8d:10:09:6d:2d:f2:01:9d:5b:47:a7:1d:
8e:fb:6e:d4:07:e9:86:fd:cd:ce:dd:26:e9:fd:0d:cd:3a:b7:
20:68:5d:cf:29:b8:d6:5c:41:14:af:cd:38:5f:5d:3b:89:08:
3b:4c:0d:2f:96:40:a9:70:01:33:85:0a:c5:60:73:7b:dd:65:
16:d9:b4:42:bf:b4:d4:81:45:36:fa:3f:9b:14:37:b2:cb:cd:
80:55:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:29 2026 by rpki-client