Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r-jZ3Y-KcSX4khvigpxglNwfZ1w.roa
File: r-jZ3Y-KcSX4khvigpxglNwfZ1w.roa (raw, json)
Hash identifier: sS7+YEQo3u0NIbECv4H1srRM67/syJqJAGW69NuzLZg=
Subject key identifier: AF:E8:D9:DD:8F:8A:71:25:F8:92:1B:E2:82:9C:60:94:DC:1F:67:5C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EAE16D2FE676131527D985900514661FC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r-jZ3Y-KcSX4khvigpxglNwfZ1w.roa
Signing time: Tue 09 Jun 2026 20:33:11 +0000
ROA not before: Tue 09 Jun 2026 20:33:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 31.207.7.0/24 maxlen: 24
89.125.13.0/24 maxlen: 24
89.125.37.0/24 maxlen: 24
89.125.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:16:d2:fe:67:61:31:52:7d:98:59:00:51:46:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 9 20:33:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afe8d9dd8f8a7125f8921be2829c6094dc1f675c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:33:a4:d2:26:f9:2b:bd:3c:c4:94:25:c5:
9a:43:46:e0:9d:e9:ec:71:1b:f2:40:83:74:fd:fc:
b6:6a:3b:ca:37:72:6d:06:51:9a:87:cf:cc:ca:33:
2b:c4:9b:25:f7:1a:40:38:e8:d2:7b:1f:a4:1e:9e:
73:4a:00:66:57:6e:d5:28:27:31:4f:32:b1:a5:0a:
e8:4f:97:77:e1:2f:33:eb:06:ae:d7:38:ae:3d:b3:
9d:bc:9e:23:75:50:54:4a:3e:70:79:10:7e:8c:66:
05:5e:c9:b2:2e:f9:13:da:82:3e:be:41:76:1b:b6:
61:e4:dc:99:dd:b0:1b:98:d2:26:92:f2:88:29:6d:
50:de:d5:33:f3:4a:15:af:09:3d:dc:27:73:8a:5c:
df:91:f2:eb:ce:d6:f3:36:6e:ca:6f:a5:20:84:cc:
b2:80:ce:0a:c7:24:5d:16:4d:65:2d:fb:40:5c:b1:
9d:d8:44:5c:04:8d:a6:40:3b:ed:dd:f8:11:06:96:
05:24:51:98:28:73:c0:c3:a5:82:40:81:6f:98:00:
9b:0f:db:89:3b:1e:64:27:c6:f0:3c:db:de:0d:b1:
ac:6a:af:7e:07:de:b9:28:ae:fd:24:57:cb:9c:d7:
61:54:ba:da:ca:20:b7:59:be:ef:e0:36:c4:48:26:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:D9:DD:8F:8A:71:25:F8:92:1B:E2:82:9C:60:94:DC:1F:67:5C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r-jZ3Y-KcSX4khvigpxglNwfZ1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.7.0/24
89.125.13.0/24
89.125.37.0/24
89.125.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:49:94:d7:09:a4:f3:46:2d:99:88:92:24:7a:99:8e:35:ab:
fd:8c:48:6d:73:40:96:3e:e5:84:2a:44:a1:6b:57:dc:44:d8:
e3:fa:2d:c2:e4:0b:6d:4d:61:e3:bf:3e:5e:2b:7f:07:ec:13:
db:f9:bd:83:66:01:70:46:04:2f:40:c2:57:f2:13:c1:a4:c2:
4f:92:5f:20:09:33:18:44:2b:a7:df:69:c1:20:0b:fc:c9:d5:
16:88:a0:d8:12:34:7e:52:17:d1:e5:b3:84:c9:47:86:f6:7a:
0a:ad:c4:eb:a6:fb:80:b1:e1:6e:ac:e7:a7:b4:5a:b8:e3:ac:
d3:50:c3:0b:92:bd:08:7d:0b:90:41:f7:a1:27:00:b7:71:f4:
66:de:af:92:ef:ed:db:5f:8b:e1:c7:6b:33:68:75:4c:bb:1f:
54:51:58:f9:7e:4d:eb:b6:6c:4f:61:67:17:21:c0:8a:28:b0:
0b:ea:49:af:28:b6:63:76:f1:8b:b6:b1:1b:6e:7d:65:9b:08:
ca:35:17:0e:bd:13:91:7f:0d:0e:c4:9d:b8:68:0f:d8:02:21:
e0:38:fe:4e:b7:2b:c8:72:e2:17:0f:95:32:3e:07:51:94:77:
1b:0b:b5:84:3b:9e:c1:a5:3e:a8:ae:7d:25:2f:08:57:2a:a0:
d5:c2:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:24 2026 by rpki-client