Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/p7SiMivd1Z0SQF6dpNt6Iuo2GGI.roa
File: p7SiMivd1Z0SQF6dpNt6Iuo2GGI.roa (raw, json)
Hash identifier: LM5CqoyfwcEvPdUInvJvvWa1rg2kpbC/n7ybtFJ2fMI=
Subject key identifier: A7:B4:A2:32:2B:DD:D5:9D:12:40:5E:9D:A4:DB:7A:22:EA:36:18:62
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A1B0DEB83571FB75997B1556702DF71232
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/p7SiMivd1Z0SQF6dpNt6Iuo2GGI.roa
Signing time: Fri 06 Nov 2026 12:39:08 +0000
ROA not before: Fri 06 Nov 2026 12:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 89.23.96.0/24 maxlen: 24
89.23.97.0/24 maxlen: 24
89.23.98.0/24 maxlen: 24
89.23.99.0/24 maxlen: 24
89.23.100.0/24 maxlen: 24
89.23.101.0/24 maxlen: 24
89.23.102.0/24 maxlen: 24
89.23.112.0/24 maxlen: 24
89.23.115.0/24 maxlen: 24
89.23.116.0/24 maxlen: 24
89.23.117.0/24 maxlen: 24
89.23.118.0/24 maxlen: 24
185.39.206.0/24 maxlen: 24
212.67.17.0/24 maxlen: 24
2a10:4704::/32 maxlen: 32
2a10:4705::/32 maxlen: 32
2a10:4706::/32 maxlen: 32
2a10:4707::/32 maxlen: 32
2a12:1e81::/32 maxlen: 32
2a13:ac84::/32 maxlen: 32
2a13:ac85::/32 maxlen: 32
2a13:ac86::/32 maxlen: 32
2a13:ac87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:de:b8:35:71:fb:75:99:7b:15:56:70:2d:f7:12:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 6 12:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7b4a2322bddd59d12405e9da4db7a22ea361862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:80:a9:0e:16:32:7c:34:8b:b1:21:06:f0:
6c:94:59:9a:29:1f:be:41:da:89:88:e0:72:de:85:
21:5a:14:0e:78:00:c9:4c:9f:eb:8b:3f:83:54:18:
7f:4f:d8:60:a0:84:c6:b9:ca:46:a9:a7:85:ad:6b:
0b:90:ef:ce:84:24:1e:ea:90:f1:f3:c1:ba:de:ec:
3d:63:98:fa:90:67:99:25:2e:c7:0e:2e:2b:fb:f0:
db:35:05:1e:93:e2:67:81:2c:58:ae:03:42:f8:b6:
cd:90:7a:f6:f0:58:e1:60:90:27:3d:4c:c8:c2:a4:
ce:a3:ee:b4:67:db:76:6a:a4:c4:c7:56:46:da:a1:
a5:ba:89:ef:8c:5d:f0:3e:49:cd:11:35:b5:3a:99:
96:69:5f:57:3e:7a:82:f6:a6:c9:d8:7c:c7:be:18:
57:e8:5e:39:79:c4:32:da:d5:5d:16:7b:7c:d9:11:
ca:c7:e1:bd:a0:57:f1:52:be:7f:6c:69:56:c1:c2:
d4:ec:1f:b2:65:82:6c:aa:f7:d2:41:7e:ef:7f:39:
16:b5:98:37:d2:11:8a:d4:10:a3:f5:44:4f:c6:83:
b2:6d:ce:e7:b5:53:85:15:e0:50:e7:c3:cf:3d:75:
39:16:f0:1c:65:ab:ea:f7:7c:3b:8a:e5:c9:65:30:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B4:A2:32:2B:DD:D5:9D:12:40:5E:9D:A4:DB:7A:22:EA:36:18:62
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/p7SiMivd1Z0SQF6dpNt6Iuo2GGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0-89.23.102.255
89.23.112.0/24
89.23.115.0-89.23.118.255
185.39.206.0/24
212.67.17.0/24
IPv6:
2a10:4704::/30
2a12:1e81::/32
2a13:ac84::/30
Signature Algorithm: sha256WithRSAEncryption
0d:e8:f4:70:61:25:c7:a4:94:9e:71:77:cc:f2:c3:1f:3b:93:
6f:29:00:b7:0c:16:20:49:21:a9:12:a8:2d:20:c2:27:29:52:
2b:29:38:c4:55:f2:72:45:53:92:51:52:98:81:a4:14:cc:26:
8d:5b:77:19:5c:da:85:0f:75:22:ee:4e:21:89:51:7c:5d:ea:
63:d5:9c:8e:73:b2:73:ee:db:63:bd:41:91:ae:9f:3d:62:b0:
4d:42:a6:61:53:5a:98:c7:a8:9c:83:ff:81:9f:9d:e5:50:2b:
a5:02:bb:77:2d:29:5b:ed:77:ad:70:e3:bb:c2:2b:47:5d:dd:
81:7d:c5:b8:d9:0e:8c:71:74:9d:0d:69:64:7d:45:89:b5:5d:
39:26:26:f7:88:a1:c2:a8:f5:a8:01:d1:b3:ff:c0:94:ec:54:
59:bd:22:ef:11:61:ce:d7:bf:40:cb:9e:ef:c3:b8:78:4d:6d:
e5:42:ee:3c:2f:be:cb:27:fc:cd:d4:e5:ff:ee:c4:3c:b5:f2:
aa:03:99:4e:a1:89:b8:11:61:23:2b:3d:7c:f5:34:0f:d6:a3:
62:5d:9b:18:38:77:87:56:1b:9f:ba:13:93:b3:8e:c9:16:0e:
04:3a:df:ca:32:95:43:ae:d3:99:36:7a:0d:5a:2b:3d:66:93:
f7:a0:d5:57
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAaGw3rg1cft1mXsVVnAt9xIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjYxMTA2MTIzOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2I0YTIzMjJiZGRkNTlkMTI0MDVlOWRhNGRiN2EyMmVhMzYxODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SSAqQ4WMnw0i7EhBvBslFmaKR++
QdqJiOBy3oUhWhQOeADJTJ/riz+DVBh/T9hgoITGucpGqaeFrWsLkO/OhCQe6pDx
88G63uw9Y5j6kGeZJS7HDi4r+/DbNQUek+JngSxYrgNC+LbNkHr28FjhYJAnPUzI
wqTOo+60Z9t2aqTEx1ZG2qGluonvjF3wPknNETW1OpmWaV9XPnqC9qbJ2HzHvhhX
6F45ecQy2tVdFnt82RHKx+G9oFfxUr5/bGlWwcLU7B+yZYJsqvfSQX7vfzkWtZg3
0hGK1BCj9URPxoOybc7ntVOFFeBQ58PPPXU5FvAcZavq93w7iuXJZTAt1wIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFKe0ojIr3dWdEkBenaTbeiLqNhhiMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvcDdTaU1pdmQxWjBTUUY2ZHBOdDZJdW8yR0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzA0BAIAATAuMAwDBAVZF2AD
BABZF2YDBABZF3AwDAMEAFkXcwMEAFkXdgMEALknzgMEANRDETAbBAIAAjAVAwUC
KhBHBAMFACoSHoEDBQIqE6yEMA0GCSqGSIb3DQEBCwUAA4IBAQAN6PRwYSXHpJSe
cXfM8sMfO5NvKQC3DBYgSSGpEqgtIMInKVIrKTjEVfJyRVOSUVKYgaQUzCaNW3cZ
XNqFD3Ui7k4hiVF8Xepj1ZyOc7Jz7ttjvUGRrp89YrBNQqZhU1qYx6icg/+Bn53l
UCulArt3LSlb7XetcOO7witHXd2BfcW42Q6McXSdDWlkfUWJtV05Jib3iKHCqPWo
AdGz/8CU7FRZvSLvEWHO179Ay57vw7h4TW3lQu48L77LJ/zN1OX/7sQ8tfKqA5lO
oYm4EWEjKz189TQP1qNiXZsYOHeHVhufuhOTs47JFg4EOt/KMpVDrtOZNnoNWis9
ZpP3oNVX
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:37 2026 by rpki-client