Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/D1XxgFT1tQRlXwG_stKK8PAX4IY.roa
File: D1XxgFT1tQRlXwG_stKK8PAX4IY.roa (raw, json)
Hash identifier: alf20V4a1kL2+lbmwnwqK/xApphqdtcf19sJo63dHgw=
Subject key identifier: 0F:55:F1:80:54:F5:B5:04:65:5F:01:BF:B2:D2:8A:F0:F0:17:E0:86
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A1C6C0A6FA5471D09136AE747287F4D985
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/D1XxgFT1tQRlXwG_stKK8PAX4IY.roa
Signing time: Tue 10 Nov 2026 18:37:56 +0000
ROA not before: Tue 10 Nov 2026 18:37:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 89.19.57.0/24 maxlen: 24
185.175.226.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:c0:a6:fa:54:71:d0:91:36:ae:74:72:87:f4:d9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 10 18:37:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f55f18054f5b504655f01bfb2d28af0f017e086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:ae:be:d0:06:62:0d:24:43:c2:80:8c:a9:
89:e1:1a:6f:c7:2a:50:d3:91:81:5f:ef:7d:5c:6c:
f7:60:14:97:68:14:dd:3d:03:c6:dd:04:0f:a7:6d:
90:fb:b4:2b:a3:5d:aa:7c:7f:2f:40:dc:cb:50:5f:
df:b5:b0:2b:98:51:9f:f9:63:eb:09:db:57:42:02:
e3:ab:b1:5b:04:30:1a:c9:2e:ff:7c:46:f4:8c:1f:
66:81:1e:6a:86:bb:92:b0:fd:98:7f:16:79:3f:d5:
df:01:e6:e8:8d:a8:03:ca:62:47:80:ba:2e:17:a5:
f3:1e:4d:4f:3c:46:05:67:67:63:34:aa:df:3e:e3:
8f:b5:f3:43:24:bb:bf:6d:0f:82:41:bd:74:62:14:
e6:3c:20:72:21:ee:b3:86:9d:29:7e:e9:8f:19:99:
5a:b0:3b:f2:50:ff:6f:64:d4:fc:89:42:8e:ae:56:
0a:49:28:f8:40:24:f6:2e:de:d8:1e:85:d2:d3:f0:
bc:0c:87:7b:6a:a5:2c:e9:ee:cc:96:90:43:18:ae:
1b:cf:90:9d:7f:2d:bf:80:74:64:a9:35:32:19:1d:
59:e8:52:fe:a7:bf:f9:58:29:30:88:d2:a3:16:76:
ac:df:f2:f7:32:d4:9d:ca:5e:ca:9e:5f:42:46:00:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:F1:80:54:F5:B5:04:65:5F:01:BF:B2:D2:8A:F0:F0:17:E0:86
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/D1XxgFT1tQRlXwG_stKK8PAX4IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.57.0/24
185.175.226.0/24
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
38:48:5a:94:1e:9d:61:8d:3f:a9:47:ad:85:fe:0c:63:2c:3c:
ac:51:9f:3c:ab:2b:f0:b1:a6:50:a6:50:2c:05:65:bc:b1:0f:
26:2e:ac:40:c1:3c:94:b2:d7:29:1c:02:d3:cc:4e:e8:5b:28:
52:6d:a3:9e:af:2f:bd:d7:17:53:b4:10:7f:86:ce:73:6a:09:
9c:c2:fd:20:7d:15:14:68:73:6e:f1:e0:8d:c3:d8:4d:83:5b:
8d:48:c7:6a:53:41:a4:cd:19:f4:f2:80:1a:57:ce:c1:7b:65:
e4:47:03:71:25:d6:e0:b4:c2:b6:0d:f4:ec:c6:ed:e5:17:12:
b8:c6:67:89:ae:a6:43:bc:c4:ec:8b:ba:64:ef:66:fd:a4:7b:
a4:1f:84:c8:46:d7:12:ce:f6:55:92:80:3f:6a:e0:77:20:4c:
7d:4e:97:df:6d:39:ea:13:fc:d9:f6:43:a1:35:1d:e6:3f:29:
5d:f9:91:e2:e7:4d:0d:2b:c0:91:22:5f:15:17:ff:f3:a7:f3:
56:f3:76:50:f7:df:18:18:1f:ce:f5:a8:fa:11:50:ee:69:3f:
0f:39:b1:fa:58:e4:86:bb:38:a0:95:dd:c3:db:51:df:b9:72:
b5:2f:82:0b:fa:d3:f6:3b:1e:d0:ec:a8:e9:97:2a:4c:ff:c5:
a2:a4:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:28 2026 by rpki-client