Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fNAHnFlWuhHjbHXiK7It3FPol8E.roa
File: fNAHnFlWuhHjbHXiK7It3FPol8E.roa (raw, json)
Hash identifier: hjGwzGuazrFtRw71e12eLvDzmyMsuuDYPKDxOY3Q7q0=
Subject key identifier: 7C:D0:07:9C:59:56:BA:11:E3:6C:75:E2:2B:B2:2D:DC:53:E8:97:C1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CF237BC20FAC742BDC1C310839FE1452
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fNAHnFlWuhHjbHXiK7It3FPol8E.roa
Signing time: Wed 23 Sep 2026 16:40:04 +0000
ROA not before: Wed 23 Sep 2026 16:40:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 89.125.108.0/22 maxlen: 22
89.125.204.0/22 maxlen: 22
153.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:23:7b:c2:0f:ac:74:2b:dc:1c:31:08:39:fe:14:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 16:40:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd0079c5956ba11e36c75e22bb22ddc53e897c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:af:d9:65:e7:4e:9d:94:64:7e:6c:ac:a4:
b1:e4:6f:35:95:d6:a0:94:c0:6e:b2:6d:2b:c9:29:
b4:b0:27:4b:3c:96:28:a3:11:15:95:b5:47:5b:a3:
37:0a:7d:8e:bc:86:87:5e:ec:ac:9e:00:31:e1:4e:
08:c2:81:c3:ef:3e:42:15:38:81:13:fc:9b:da:4a:
d0:8f:9d:50:e7:21:50:45:12:61:70:71:eb:9a:93:
df:9d:41:73:62:e0:f4:4b:50:9f:9c:f2:7d:d0:b2:
53:4a:28:74:2c:2c:11:4e:f6:81:ad:a7:f9:bb:d8:
12:58:ce:fa:b4:4c:34:15:85:60:cf:aa:fa:03:71:
de:5c:24:4d:b4:1e:25:c5:af:39:9f:4e:db:47:78:
09:be:5e:16:0b:e8:e7:5e:8d:4b:96:4d:0a:41:fc:
4a:c0:9b:d5:04:8b:91:6a:72:cb:ca:91:1d:3f:c3:
83:e8:05:a3:2d:fa:76:a5:31:76:6f:b9:fb:40:80:
1c:bf:dc:bf:6f:d6:dd:f4:6e:c2:94:48:29:b5:4b:
07:72:8a:bb:1b:aa:7c:3d:3b:55:36:86:a9:e1:05:
a9:46:69:01:86:70:c0:bc:74:11:58:17:94:be:c2:
dd:0f:ae:45:80:a1:48:fe:35:e4:49:05:bc:ec:db:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D0:07:9C:59:56:BA:11:E3:6C:75:E2:2B:B2:2D:DC:53:E8:97:C1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fNAHnFlWuhHjbHXiK7It3FPol8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.108.0/22
89.125.204.0/22
153.76.202.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d5:ab:45:ac:f5:13:7f:c7:14:92:10:7b:d0:fb:39:8b:b8:
02:a1:ca:f9:af:20:18:67:23:77:b8:18:f9:cd:ef:8e:d3:b3:
88:99:9b:1a:b2:1e:4c:b9:76:49:12:23:de:18:06:1e:31:27:
99:f4:58:3f:20:d5:df:1b:d6:7d:b9:78:a9:9d:f4:f8:fc:a0:
74:22:bc:9c:4e:4e:28:92:76:0d:28:db:ac:7c:5e:4a:15:0d:
d9:30:b3:69:68:f6:2c:ca:83:e2:2d:3d:04:e6:e2:ee:b5:28:
f9:4a:8c:db:74:60:8f:8c:a6:3f:bd:f7:1a:4e:bb:cf:ee:24:
86:3a:bd:e6:6c:b1:56:9f:3e:be:dd:05:7d:02:59:f7:ea:15:
ba:e7:55:68:98:31:78:66:1f:e0:75:76:cf:87:43:09:23:86:
30:9c:15:05:c0:ac:e0:78:6a:72:0a:72:ca:25:cc:f0:7e:53:
1e:42:a4:1a:86:02:16:5c:31:ea:f8:69:54:74:37:51:89:86:
f7:3c:b5:f3:b7:0b:e4:45:6d:24:c8:65:10:e7:dc:f1:ec:8b:
40:29:63:14:f7:62:a2:40:a3:4a:0d:af:75:cc:6e:71:ed:9f:
24:95:8a:c7:5f:90:3f:0b:1e:57:4a:f6:78:1a:a9:72:8f:5b:
f4:c5:85:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDPI3vCD6x0K9wcMQg5/hRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTIzMTY0MDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2QwMDc5YzU5NTZiYTExZTM2Yzc1ZTIyYmIyMmRkYzUzZTg5N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuOv2WXnTp2UZH5srKSx5G81ldag
lMBusm0rySm0sCdLPJYooxEVlbVHW6M3Cn2OvIaHXuysngAx4U4IwoHD7z5CFTiB
E/yb2krQj51Q5yFQRRJhcHHrmpPfnUFzYuD0S1CfnPJ90LJTSih0LCwRTvaBraf5
u9gSWM76tEw0FYVgz6r6A3HeXCRNtB4lxa85n07bR3gJvl4WC+jnXo1Llk0KQfxK
wJvVBIuRanLLypEdP8OD6AWjLfp2pTF2b7n7QIAcv9y/b9bd9G7ClEgptUsHcoq7
G6p8PTtVNoap4QWpRmkBhnDAvHQRWBeUvsLdD65FgKFI/jXkSQW87NvI2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHzQB5xZVroR42x14iuyLdxT6JfBMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZk5BSG5GbFd1aEhqYkhYaUs3SXQzRlBvbDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX1sAwQC
WX3MAwQAmUzKMA0GCSqGSIb3DQEBCwUAA4IBAQAR1atFrPUTf8cUkhB70Ps5i7gC
ocr5ryAYZyN3uBj5ze+O07OImZsash5MuXZJEiPeGAYeMSeZ9Fg/INXfG9Z9uXip
nfT4/KB0IrycTk4oknYNKNusfF5KFQ3ZMLNpaPYsyoPiLT0E5uLutSj5SozbdGCP
jKY/vfcaTrvP7iSGOr3mbLFWnz6+3QV9Aln36hW651VomDF4Zh/gdXbPh0MJI4Yw
nBUFwKzgeGpyCnLKJczwflMeQqQahgIWXDHq+GlUdDdRiYb3PLXztwvkRW0kyGUQ
59zx7ItAKWMU92KiQKNKDa91zG5x7Z8klYrHX5A/Cx5XSvZ4Gqlyj1v0xYUF
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:24 2026 by rpki-client