Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6k4lIs8TV161VFjAieIERs9ZLFI.roa
File: 6k4lIs8TV161VFjAieIERs9ZLFI.roa (raw, json)
Hash identifier: RS2T1TgQsNnTqqVXP3fP94jm3ILmUxwnbwkqU3xM1ss=
Subject key identifier: EA:4E:25:22:CF:13:57:5E:B5:54:58:C0:89:E2:04:46:CF:59:2C:52
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019CD20B268361DD55C609227A7B288BEA90
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6k4lIs8TV161VFjAieIERs9ZLFI.roa
Signing time: Mon 09 Mar 2026 10:01:12 +0000
ROA not before: Mon 09 Mar 2026 10:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 89.125.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:0b:26:83:61:dd:55:c6:09:22:7a:7b:28:8b:ea:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 9 10:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea4e2522cf13575eb55458c089e20446cf592c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:c7:60:8d:4c:3e:37:a5:3b:86:69:c1:f1:
3d:a4:1e:5a:fb:d5:c9:1f:b9:12:37:14:ec:11:7f:
50:5c:45:db:f2:69:81:74:24:41:d9:63:53:e7:20:
99:1f:a8:92:16:83:09:fe:3c:83:3b:df:4b:dc:1d:
7e:95:0f:9a:40:26:03:e6:03:96:cb:f3:e1:c0:34:
3f:d3:e8:ec:05:f0:8b:11:a3:ee:14:d0:64:3d:5a:
68:a0:53:99:5a:f6:d8:ad:24:45:2c:bd:d1:14:f0:
f8:81:79:d2:b6:70:18:aa:c2:07:47:82:f6:db:9c:
01:58:e6:d0:f3:3b:62:17:c3:1b:e7:c2:a5:15:d1:
92:a0:dd:e5:37:5e:60:a3:a9:c1:5c:bf:65:e8:47:
bc:88:ed:3b:49:53:ee:33:ee:e1:ba:09:ee:30:6d:
11:be:72:00:ce:59:2b:58:cf:77:2e:6b:17:85:b6:
db:30:8a:68:4b:ea:48:f4:a9:6a:bb:f7:c0:ea:19:
8b:f9:9f:ee:fd:42:e9:a4:e4:b1:8e:82:01:b3:92:
b2:c4:58:91:83:c6:1f:66:ca:32:1d:e0:71:d8:4b:
f8:3f:e7:6b:25:bf:a3:9e:b9:01:37:f4:be:eb:4f:
22:db:03:33:25:82:05:80:38:ef:64:d6:c9:04:4f:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4E:25:22:CF:13:57:5E:B5:54:58:C0:89:E2:04:46:CF:59:2C:52
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6k4lIs8TV161VFjAieIERs9ZLFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.16.0/22
Signature Algorithm: sha256WithRSAEncryption
14:4b:28:9b:36:f7:61:24:cd:1e:57:e5:85:71:38:1f:35:06:
22:7b:70:f4:ce:02:32:93:91:a2:6d:cc:e9:2b:65:be:aa:db:
30:85:6e:b9:a1:d1:fd:47:f9:e8:2f:7b:89:e2:8a:30:e0:34:
06:23:72:e1:eb:23:54:0d:ee:47:fd:ae:75:51:42:b5:43:90:
f9:36:24:91:0c:af:d9:34:ae:2c:fa:c3:58:f9:df:d1:96:49:
0d:bf:bf:56:a9:2e:da:0d:3e:ad:bd:e3:fc:dd:64:55:60:73:
28:36:50:6f:98:94:3f:89:0c:df:e6:8e:d1:7c:bf:04:e3:c3:
64:c2:f0:a9:26:3d:40:46:cd:59:ed:07:77:11:27:24:94:68:
30:30:54:f9:e6:41:fe:1e:20:be:da:7a:f9:02:52:52:3d:14:
a8:a8:70:ee:0d:a6:75:6f:9e:e8:64:f5:db:4a:51:7e:0d:65:
91:5e:cd:1e:a3:20:c4:2f:b7:6f:10:f8:e8:7f:cb:ee:35:bd:
53:48:fb:de:2e:01:3a:97:98:31:36:44:27:4b:78:eb:c6:95:
29:63:b3:7a:41:b4:e1:0a:b1:4e:0a:f5:4d:06:11:23:69:d9:
ac:db:b2:bf:65:51:50:aa:9d:b1:d7:c9:b2:d7:44:32:ed:1d:
a1:83:d5:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzSCyaDYd1Vxgkiensoi+qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMzA5MTAwMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTRlMjUyMmNmMTM1NzVlYjU1NDU4YzA4OWUyMDQ0NmNmNTkyYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvPHYI1MPjelO4ZpwfE9pB5a+9XJ
H7kSNxTsEX9QXEXb8mmBdCRB2WNT5yCZH6iSFoMJ/jyDO99L3B1+lQ+aQCYD5gOW
y/PhwDQ/0+jsBfCLEaPuFNBkPVpooFOZWvbYrSRFLL3RFPD4gXnStnAYqsIHR4L2
25wBWObQ8ztiF8Mb58KlFdGSoN3lN15go6nBXL9l6Ee8iO07SVPuM+7hugnuMG0R
vnIAzlkrWM93LmsXhbbbMIpoS+pI9Klqu/fA6hmL+Z/u/ULppOSxjoIBs5KyxFiR
g8YfZsoyHeBx2Ev4P+drJb+jnrkBN/S+608i2wMzJYIFgDjvZNbJBE8WfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpOJSLPE1detVRYwIniBEbPWSxSMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNms0bElzOFRWMTYxVkZqQWllSUVSczlaTEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWX0QMA0G
CSqGSIb3DQEBCwUAA4IBAQAUSyibNvdhJM0eV+WFcTgfNQYie3D0zgIyk5Gibczp
K2W+qtswhW65odH9R/noL3uJ4oow4DQGI3Lh6yNUDe5H/a51UUK1Q5D5NiSRDK/Z
NK4s+sNY+d/RlkkNv79WqS7aDT6tveP83WRVYHMoNlBvmJQ/iQzf5o7RfL8E48Nk
wvCpJj1ARs1Z7Qd3EScklGgwMFT55kH+HiC+2nr5AlJSPRSoqHDuDaZ1b57oZPXb
SlF+DWWRXs0eoyDEL7dvEPjof8vuNb1TSPveLgE6l5gxNkQnS3jrxpUpY7N6QbTh
CrFOCvVNBhEjadms27K/ZVFQqp2x18my10Qy7R2hg9WC
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:49 2026 by rpki-client