Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/76dMAtWEXEsJTCFV7xMqKnz0AKM.roa
File: 76dMAtWEXEsJTCFV7xMqKnz0AKM.roa (raw, json)
Hash identifier: fI3KVF5Zm0mmLksIYQ9Ss49M+EG3cxmLv0vNXuq6UXc=
Subject key identifier: EF:A7:4C:02:D5:84:5C:4B:09:4C:21:55:EF:13:2A:2A:7C:F4:00:A3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1CA7756840C1F3A689A6581BE0AA709E6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/76dMAtWEXEsJTCFV7xMqKnz0AKM.roa
Signing time: Wed 11 Nov 2026 11:56:20 +0000
ROA not before: Wed 11 Nov 2026 11:56:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211673
IP address blocks: 89.125.10.0/24 maxlen: 24
89.125.35.0/24 maxlen: 24
89.125.153.0/24 maxlen: 24
89.125.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:77:56:84:0c:1f:3a:68:9a:65:81:be:0a:a7:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 11 11:56:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efa74c02d5845c4b094c2155ef132a2a7cf400a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:a6:a7:2d:4c:6d:7a:75:98:1a:89:dd:9a:
c6:b2:9e:cc:f8:45:2a:82:31:50:d5:1d:3d:1f:a9:
a8:25:79:ca:73:8e:d8:35:04:35:51:c3:de:00:ce:
06:29:9c:d4:d6:23:5b:6d:8d:e6:e2:3c:a4:d9:fb:
50:fd:73:31:d9:a3:06:b4:c1:68:56:7d:92:cc:5e:
9a:aa:14:66:44:ca:01:47:23:d2:7b:7f:e7:0f:bc:
cc:92:3c:b6:e4:d2:f6:03:38:ce:62:e6:61:e1:e6:
1b:2e:2b:f2:6f:61:9f:13:fe:1c:8f:1e:85:d5:f7:
4a:67:1a:ac:3e:b2:3f:31:ed:5c:93:b5:21:2d:22:
36:12:99:9a:21:eb:38:90:07:1b:ce:86:9b:28:8c:
27:b4:46:3c:95:0c:42:1b:d4:75:97:77:98:91:cc:
2f:c4:03:8f:c2:bb:19:96:96:f1:9d:dd:5a:cb:d4:
7c:ed:30:9e:2d:b0:83:5c:5e:41:8b:45:e1:cd:e9:
35:66:3a:69:f3:23:b5:0e:d8:53:9d:d0:8a:ef:d9:
15:7f:f6:2e:08:a4:cf:21:7e:bf:c6:9e:08:ec:0b:
12:38:9c:89:76:43:38:1a:bb:e6:c9:aa:3a:95:4d:
30:c8:eb:a7:62:ba:58:d9:b8:81:d6:29:71:96:2b:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:4C:02:D5:84:5C:4B:09:4C:21:55:EF:13:2A:2A:7C:F4:00:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/76dMAtWEXEsJTCFV7xMqKnz0AKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.10.0/24
89.125.35.0/24
89.125.153.0/24
89.125.246.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f2:2b:77:27:17:5e:d0:f3:ec:a1:bf:e4:b5:b2:4e:ff:20:
74:35:c1:a2:ba:8f:e3:b0:97:4a:3b:e1:26:5f:52:e0:ab:fa:
8a:03:ef:d3:8b:6e:46:df:c8:88:0f:ac:e6:78:4d:9a:36:03:
94:36:79:31:54:56:eb:fa:c1:79:41:bc:c6:62:2d:df:a4:aa:
52:6e:8d:89:e9:fb:45:2c:19:6c:d1:15:cc:3d:3d:c9:0a:f2:
78:5e:eb:4f:89:65:24:d1:70:0a:92:6c:a7:fb:42:d1:9e:a9:
aa:f0:bc:3f:0e:5d:15:19:7e:28:9e:c1:d6:a0:4b:55:e0:2b:
20:47:e4:56:61:ae:79:d2:2e:97:bd:b0:6b:0c:dd:56:6f:30:
3f:fc:f7:54:34:37:56:e9:32:ec:e6:9e:50:93:12:6b:3b:3a:
86:cb:60:81:9b:c8:7e:6b:0b:fa:fe:18:be:32:56:12:a9:fa:
ba:86:59:bd:70:b8:85:26:e3:04:ca:9b:c2:c3:f7:1c:9e:11:
f6:3f:66:5f:43:c4:70:85:96:34:02:5d:fd:74:46:c2:74:7a:
f6:a3:ff:68:f3:03:43:c7:ac:91:fb:00:36:71:4a:4a:17:ef:
76:c0:11:10:16:a2:47:bf:6d:0c:6c:c6:47:b9:b8:68:75:03:
a7:d8:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:55:59 2026 by rpki-client