Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/icEE_zFOYEQ7RaMot4Ocoiv3JVM.roa
File: icEE_zFOYEQ7RaMot4Ocoiv3JVM.roa (raw, json)
Hash identifier: SIfyftp1x0HwtcNREqtT58t1sYWUAjIciN5UNKHE/+8=
Subject key identifier: 89:C1:04:FF:31:4E:60:44:3B:45:A3:28:B7:83:9C:A2:2B:F7:25:53
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DD777DCF90ECD091D19D41E269F0FB072
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/icEE_zFOYEQ7RaMot4Ocoiv3JVM.roa
Signing time: Wed 29 Apr 2026 04:20:49 +0000
ROA not before: Wed 29 Apr 2026 04:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
167.17.32.0/21 maxlen: 21
167.17.41.0/24 maxlen: 24
167.17.42.0/23 maxlen: 23
167.17.46.0/24 maxlen: 24
206.245.136.0/21 maxlen: 21
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:77:dc:f9:0e:cd:09:1d:19:d4:1e:26:9f:0f:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 29 04:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89c104ff314e60443b45a328b7839ca22bf72553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:12:60:a5:3e:f8:65:15:23:68:68:c2:40:3e:
e6:a8:24:e8:9e:ae:48:94:56:41:57:be:0b:7f:ca:
44:de:fe:d2:4a:26:17:f6:d7:66:17:84:94:a6:af:
f4:85:f8:6e:fa:43:e3:5e:8d:71:a0:c7:be:57:87:
24:b8:a7:35:09:b0:56:e7:78:fc:e2:6f:13:67:5e:
90:f0:a8:0f:ae:4a:ae:9b:6f:77:2b:1b:68:51:4e:
d4:d7:84:b8:ad:c4:ec:4a:69:2a:eb:32:1f:e5:f5:
49:48:e7:76:ea:b3:2d:a4:16:dd:42:d3:e3:f5:7e:
8a:eb:9d:68:31:9e:bf:ed:cc:18:78:f1:31:c0:8c:
5b:d2:9e:0b:0d:5c:79:38:fd:cc:6b:94:77:e4:94:
d7:8f:32:9b:b6:2e:5c:43:1e:f6:ff:a7:08:85:df:
a7:11:04:cf:36:eb:33:4f:51:47:b1:1f:ac:96:7f:
b3:44:dc:71:0c:0c:f5:79:f5:48:c3:96:40:88:09:
a3:1a:57:eb:27:d4:ea:90:68:12:47:80:b9:7f:8e:
81:63:f5:53:e6:70:b8:66:9d:31:e8:1a:3e:01:35:
6d:a5:82:c3:e8:c3:f6:6d:3d:a8:ef:a0:95:70:b2:
ad:d7:2c:ba:dd:a0:52:20:67:1e:ec:55:4b:57:85:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:04:FF:31:4E:60:44:3B:45:A3:28:B7:83:9C:A2:2B:F7:25:53
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/icEE_zFOYEQ7RaMot4Ocoiv3JVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
167.17.32.0/21
167.17.41.0-167.17.43.255
167.17.46.0/24
206.245.136.0/21
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9a:d0:cf:1a:33:43:d9:6c:16:ca:04:f4:d3:1a:3f:ab:2d:
66:3e:a9:b8:d1:b5:1e:2d:f4:8b:9a:b2:6e:38:75:44:83:ff:
1f:fe:2b:bc:83:77:85:8e:59:c9:28:ac:a3:fd:51:49:30:55:
8d:c2:7b:64:5a:84:24:d1:1b:00:4a:4a:98:4a:47:ae:39:85:
38:c9:db:50:c6:7d:c2:ce:f3:80:f5:59:96:95:c2:22:a1:1f:
88:dd:8d:15:9a:b9:11:f7:8a:a0:92:56:24:64:8e:09:b5:60:
f4:3b:28:2f:8f:76:84:52:4c:8d:9a:8d:1e:aa:c6:a6:1a:f6:
e0:65:f9:49:f0:67:95:3a:93:24:50:b8:e1:12:93:65:4a:6e:
1d:6e:3b:8a:34:79:a8:07:ce:8f:cf:a6:7e:6a:42:70:00:34:
e8:2c:d4:13:a6:fd:7c:71:ed:cc:ff:05:a0:33:61:cb:dc:6f:
10:e2:38:ad:2a:f3:f9:19:77:7f:2e:a5:91:a9:c1:16:82:f1:
3b:5f:83:3e:72:1e:10:e2:43:7e:f5:04:54:1a:f6:bf:43:0c:
dd:1a:9a:50:85:d7:3e:ac:9f:b4:bf:85:55:d5:5c:4e:a8:c5:
25:c2:0f:4f:f5:18:e2:05:2a:ba:d1:66:7d:b8:10:05:0b:8b:
f9:fe:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:51 2026 by rpki-client