Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nn9ZLoDrYb__icmI7pCsxI55sLY.roa
File: nn9ZLoDrYb__icmI7pCsxI55sLY.roa (raw, json)
Hash identifier: 3acl5Ejy7bvVb2H/Pq0ZIabJTkALk+4f7dsdB3y4oXI=
Subject key identifier: 9E:7F:59:2E:80:EB:61:BF:FF:89:C9:88:EE:90:AC:C4:8E:79:B0:B6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EBC24D956F856A0EC57DDC0E107835CCD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nn9ZLoDrYb__icmI7pCsxI55sLY.roa
Signing time: Fri 12 Jun 2026 14:03:11 +0000
ROA not before: Fri 12 Jun 2026 14:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219486
IP address blocks: 89.125.35.0/24 maxlen: 24
89.125.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:24:d9:56:f8:56:a0:ec:57:dd:c0:e1:07:83:5c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 14:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e7f592e80eb61bfff89c988ee90acc48e79b0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:a1:c9:93:b9:45:e8:17:74:80:47:ab:42:
c3:e1:33:96:13:fd:1a:f1:11:68:ff:fb:a1:74:12:
1f:d0:7d:79:b9:f4:e8:c1:ea:40:e8:28:ba:8d:fe:
0c:88:a8:da:65:49:fa:28:39:a3:89:01:ef:c3:b7:
1a:a8:e9:a0:71:e8:ee:48:29:4d:b9:bb:9c:78:ae:
e7:58:2c:f0:1b:ac:e4:80:1b:08:07:84:8b:56:93:
b0:e6:22:c1:8b:de:3c:0f:28:aa:29:4d:89:d0:6a:
3a:5f:dc:fa:c3:5b:b1:49:9f:49:4a:34:14:b2:84:
f4:9b:55:40:81:36:c2:b3:d8:8b:65:b6:89:28:9e:
c5:c6:e1:2b:60:2c:4b:b6:00:39:37:c2:61:6f:eb:
02:bd:6c:bc:f4:2a:84:1d:a6:0f:36:ab:b5:6b:4a:
a8:b8:f0:53:ca:41:57:4e:45:89:48:a4:a1:e3:64:
72:6c:90:4f:a5:e7:4b:e1:0e:9d:f8:b5:c1:43:dc:
1b:97:96:a6:f5:16:3c:2d:e7:8d:20:8f:a4:92:c4:
4c:95:bd:ed:91:f0:dd:85:cc:cd:ba:89:48:47:dc:
79:72:54:d2:4c:8a:5d:ec:ce:9c:4f:15:0c:36:ab:
70:0b:92:e3:f8:d2:a0:d2:2b:37:2b:d6:47:02:e1:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:59:2E:80:EB:61:BF:FF:89:C9:88:EE:90:AC:C4:8E:79:B0:B6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nn9ZLoDrYb__icmI7pCsxI55sLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.35.0/24
89.125.153.0/24
Signature Algorithm: sha256WithRSAEncryption
92:dd:67:fc:c1:ce:b0:bf:90:15:fd:a5:d8:cb:57:6e:13:99:
7b:b0:59:83:2f:9f:40:6f:a4:1b:c5:4e:c1:79:35:05:2d:c3:
87:68:43:be:68:12:5e:1b:53:54:2c:12:06:8a:bb:d6:7d:03:
d0:e1:ee:d1:a2:d8:1e:da:c9:5b:e5:0d:96:fc:14:4f:45:d7:
d0:49:75:c8:83:ec:46:99:93:10:b4:a8:06:72:93:3a:98:92:
95:75:9a:5d:01:ef:89:a6:39:18:99:d2:e4:e4:c8:4c:8e:d2:
48:e4:99:e0:2d:41:4c:4b:b6:e2:5e:52:db:29:e3:42:ee:cb:
c9:be:dc:94:fe:19:6e:04:03:a2:59:4c:b7:7d:c9:73:cb:1c:
f2:85:00:b3:8b:04:b3:43:40:20:19:35:95:f1:51:fe:f9:4c:
5f:4a:78:a4:fb:cf:7d:80:ba:e5:0d:cc:36:6e:3c:be:20:b8:
b0:2e:85:42:8c:44:ad:44:c1:26:da:32:ea:6e:e2:cf:4a:c4:
54:b2:8c:e5:79:a3:3d:51:04:c8:8c:71:f7:87:c2:d2:bf:91:
fe:4c:fd:d4:3a:6f:e6:be:83:d1:07:d6:0a:34:3a:a3:91:a6:
7f:c5:8b:77:b1:18:fa:ec:ad:4d:66:3f:5e:d7:ea:ee:19:a9:
61:ef:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:36 2026 by rpki-client