Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/7hQbQa-fgT7pT7QtP58lHCrA-bA.roa
File: 7hQbQa-fgT7pT7QtP58lHCrA-bA.roa (raw, json)
Hash identifier: iYLEH3XBT+Vnd7D8/EXK0V87ZtKMliaaOZ7to3Ts0wY=
Subject key identifier: EE:14:1B:41:AF:9F:81:3E:E9:4F:B4:2D:3F:9F:25:1C:2A:C0:F9:B0
Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f
Certificate serial: 01A11AFC04A561A5A35A5A212D02FBE66B2E
Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/7hQbQa-fgT7pT7QtP58lHCrA-bA.roa
Signing time: Thu 08 Oct 2026 10:08:06 +0000
ROA not before: Thu 08 Oct 2026 10:08:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202089
IP address blocks: 89.127.252.0/23 maxlen: 23
89.127.252.0/24 maxlen: 24
89.127.253.0/24 maxlen: 24
95.141.112.0/20 maxlen: 20
95.141.112.0/24 maxlen: 24
95.141.113.0/24 maxlen: 24
95.141.114.0/24 maxlen: 24
95.141.115.0/24 maxlen: 24
95.141.116.0/24 maxlen: 24
95.141.117.0/24 maxlen: 24
95.141.118.0/24 maxlen: 24
95.141.119.0/24 maxlen: 24
95.141.120.0/24 maxlen: 24
95.141.121.0/24 maxlen: 24
95.141.122.0/24 maxlen: 24
95.141.123.0/24 maxlen: 24
95.141.124.0/24 maxlen: 24
95.141.125.0/24 maxlen: 24
95.141.126.0/24 maxlen: 24
95.141.127.0/24 maxlen: 24
185.105.136.0/22 maxlen: 22
185.105.136.0/24 maxlen: 24
185.105.137.0/24 maxlen: 24
185.105.138.0/24 maxlen: 24
185.105.139.0/24 maxlen: 24
2a02:4200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:fc:04:a5:61:a5:a3:5a:5a:21:2d:02:fb:e6:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f
Validity
Not Before: Oct 8 10:08:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee141b41af9f813ee94fb42d3f9f251c2ac0f9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:37:5d:1e:20:a8:c9:13:b0:df:c9:50:4c:
b2:39:ee:b2:53:a2:96:d8:1a:2d:5f:1c:ed:1e:83:
b9:9b:80:77:d5:96:c9:7e:c6:f8:f8:31:cd:ea:25:
21:c1:4b:30:e4:7f:f8:9c:77:9c:21:7e:63:f2:6c:
bb:81:0f:90:d4:d2:9b:c4:11:5b:b4:d3:08:c0:54:
19:66:4d:53:ae:32:4a:7b:97:a2:ba:69:dc:1d:33:
0c:76:5a:38:31:60:d8:84:66:da:2a:a9:f7:73:fc:
90:f1:be:c3:ef:0b:ee:ad:74:32:9d:10:a6:86:2c:
9a:89:da:a8:c1:00:4e:03:ff:ed:39:6e:b6:f8:2a:
aa:c1:6b:42:63:49:60:63:72:2e:e6:36:b2:2b:0d:
42:3d:9c:54:41:b5:b1:e6:f8:9f:b1:0c:53:1b:bc:
cf:9d:d8:15:81:cf:a1:79:87:4c:50:c6:05:c1:24:
e8:4c:cb:b5:aa:b8:4b:aa:ba:94:46:50:19:50:8f:
3f:49:00:b1:ac:2f:2c:60:0a:d9:24:33:a9:ff:e3:
5b:27:fb:71:70:bf:a5:b4:7d:f2:c9:45:64:e0:91:
1e:6c:30:7d:45:18:6b:23:59:0a:ac:80:78:5a:81:
c3:ca:e4:62:e1:b2:83:48:84:59:40:44:8a:7b:df:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:1B:41:AF:9F:81:3E:E9:4F:B4:2D:3F:9F:25:1C:2A:C0:F9:B0
X509v3 Authority Key Identifier:
keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/7hQbQa-fgT7pT7QtP58lHCrA-bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.127.252.0/23
95.141.112.0/20
185.105.136.0/22
IPv6:
2a02:4200::/29
Signature Algorithm: sha256WithRSAEncryption
54:9f:7e:a2:f3:00:d4:ec:1e:89:a7:80:48:f7:ce:88:33:1b:
ac:ff:14:56:8d:89:5a:f8:47:b8:8c:78:b2:92:1f:65:6f:0f:
13:76:1f:3b:55:8e:53:5e:85:d0:66:51:bb:a2:6e:b1:1c:52:
3f:bb:d8:67:ad:1c:9a:d8:91:94:08:5a:04:89:3c:73:2d:d3:
c7:28:be:fc:72:3e:59:52:c3:a8:c5:53:13:2d:13:a1:f8:2d:
79:7c:bd:61:e1:71:37:9e:9e:f2:5e:33:60:80:0f:9a:54:b4:
c5:8e:77:6d:f9:df:b4:cd:d4:e0:ee:7d:c2:fc:64:76:ae:bf:
46:c2:1b:e1:d9:ae:90:6e:4b:43:5c:03:a5:90:0a:2b:ec:63:
45:90:5f:98:51:22:b9:c3:b2:9c:6f:a7:95:60:bd:6c:97:a2:
2a:4e:fb:1c:e2:c4:de:aa:62:6a:28:3a:a4:93:04:d3:96:d4:
28:98:a9:53:88:1e:23:fa:4c:46:dd:dc:4c:f6:8c:fa:c1:f0:
b8:62:e4:35:a8:be:da:b3:4c:0d:b4:57:40:3e:c9:2b:e1:c4:
41:cf:01:93:f1:b6:73:6e:a6:25:34:25:8d:c1:41:7c:3b:9e:
93:c3:6d:fb:1c:91:56:2f:be:9a:f1:e9:18:4e:6b:f2:8d:48:
cb:71:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:42 2026 by rpki-client