Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9l-T8LuKVOx4K_E_RiKulX0v_A.roa
File: c9l-T8LuKVOx4K_E_RiKulX0v_A.roa (raw, json)
Hash identifier: tBAP/R5wo8IKizM43yuwwnLtaKdt1P4xSBO/7NRpfTg=
Subject key identifier: 73:D9:7E:4F:C2:EE:29:53:B1:E0:AF:C4:FD:18:8A:BA:55:F4:BF:F0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1D4CA0CE6F01E060AAE99B4F4AD8B25EB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9l-T8LuKVOx4K_E_RiKulX0v_A.roa
Signing time: Fri 13 Nov 2026 12:02:53 +0000
ROA not before: Fri 13 Nov 2026 12:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 89.125.21.0/24 maxlen: 24
89.125.22.0/24 maxlen: 24
89.125.23.0/24 maxlen: 24
89.125.215.0/24 maxlen: 24
89.125.216.0/24 maxlen: 24
89.125.217.0/24 maxlen: 24
89.125.218.0/24 maxlen: 24
89.125.219.0/24 maxlen: 24
89.125.220.0/24 maxlen: 24
89.125.221.0/24 maxlen: 24
89.125.222.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
2a13:4980::/29 maxlen: 29
2a13:4980::/32 maxlen: 32
2a13:4982::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:ca:0c:e6:f0:1e:06:0a:ae:99:b4:f4:ad:8b:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 13 12:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73d97e4fc2ee2953b1e0afc4fd188aba55f4bff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:f3:7a:87:1a:bc:51:ee:c8:d2:8a:fe:95:
4a:5c:0f:56:14:63:e9:4f:c1:aa:c0:0a:22:fc:54:
73:ad:69:71:f9:65:90:b8:3b:ff:22:cb:fd:b4:89:
d0:8b:e1:d4:04:42:0d:1d:b2:ff:f4:be:c5:52:b0:
c0:44:4e:25:08:1d:ae:22:f9:73:36:c1:ca:cd:13:
bf:56:28:cd:3c:b6:d2:cf:6e:d7:c6:80:cd:a6:ce:
3a:fe:55:3f:7e:6b:24:ee:a0:be:55:16:09:03:8d:
9d:3b:0f:03:8e:15:ff:5f:e4:d5:e8:0c:2f:cc:52:
54:e6:fa:cd:c8:da:ff:b1:4d:b3:3d:dc:49:85:d9:
64:ac:aa:e3:58:fb:96:a2:31:a9:b2:4c:7e:aa:fd:
09:99:b5:fa:19:9d:e3:47:26:13:5a:aa:36:87:f7:
8b:dc:36:e7:ad:21:3c:28:fa:77:d1:cc:a5:c1:cd:
c3:f0:da:8e:55:76:70:53:20:03:b2:a1:25:2b:41:
c1:19:00:9b:c7:94:43:2c:6c:ac:68:ef:5e:0e:a6:
90:7c:3d:f5:5b:d8:1b:d5:1d:62:86:9a:e4:76:8b:
92:04:a7:39:14:27:f9:10:5f:85:dd:74:24:84:86:
81:a7:00:47:e6:da:fe:ca:1b:67:d5:1f:e0:1c:53:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:7E:4F:C2:EE:29:53:B1:E0:AF:C4:FD:18:8A:BA:55:F4:BF:F0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9l-T8LuKVOx4K_E_RiKulX0v_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.21.0-89.125.23.255
89.125.215.0-89.125.222.255
176.126.174.0/24
IPv6:
2a13:4980::/29
Signature Algorithm: sha256WithRSAEncryption
24:d2:42:60:b7:b9:3b:40:2a:a4:f6:43:af:d8:42:a4:f1:dd:
7a:30:7e:38:12:fd:84:09:14:d4:80:0d:bc:57:1f:fb:13:a8:
34:69:34:eb:89:9f:b7:be:30:cd:26:4e:f8:f7:4c:65:9f:17:
01:e7:30:49:5e:54:49:ef:62:34:e7:d7:ad:f6:97:5b:08:23:
1d:b3:ca:5b:9f:7b:e2:f8:28:c7:0c:81:0c:2a:8a:3d:05:68:
42:72:8d:83:5d:b5:e6:82:e3:b6:a2:9b:0f:06:c1:a2:ba:7a:
ee:70:87:c3:d6:c0:1d:bd:59:26:04:31:c2:4f:b4:44:92:a0:
62:08:c6:84:ca:17:46:2a:ae:a3:7d:58:ed:39:29:73:eb:78:
da:4f:0f:95:b7:b6:77:b2:b4:3d:d1:47:a6:ef:01:b3:00:18:
7f:4a:bd:b0:08:c6:69:1e:37:97:ae:d3:0a:53:b3:b6:75:f6:
44:7d:4a:60:bf:41:43:4b:4f:62:37:94:a2:14:d4:02:cb:33:
96:6a:bb:8f:31:07:0f:75:59:21:b1:0a:a9:62:76:f4:de:03:
08:b9:7d:9d:30:40:9e:35:cb:ee:68:dc:41:fd:82:4e:2a:50:
62:bf:ab:af:b0:b6:7e:7c:2d:b0:e2:eb:8c:43:73:ec:61:c7:
9f:9e:7e:69
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAaHUygzm8B4GCq6ZtPStiyXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTEzMTIwMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2Q5N2U0ZmMyZWUyOTUzYjFlMGFmYzRmZDE4OGFiYTU1ZjRiZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyjzeocavFHuyNKK/pVKXA9WFGPp
T8GqwAoi/FRzrWlx+WWQuDv/Isv9tInQi+HUBEINHbL/9L7FUrDARE4lCB2uIvlz
NsHKzRO/VijNPLbSz27XxoDNps46/lU/fmsk7qC+VRYJA42dOw8DjhX/X+TV6Awv
zFJU5vrNyNr/sU2zPdxJhdlkrKrjWPuWojGpskx+qv0JmbX6GZ3jRyYTWqo2h/eL
3DbnrSE8KPp30cylwc3D8NqOVXZwUyADsqElK0HBGQCbx5RDLGysaO9eDqaQfD31
W9gb1R1ihprkdouSBKc5FCf5EF+F3XQkhIaBpwBH5tr+yhtn1R/gHFMWpwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFHPZfk/C7ilTseCvxP0YirpV9L/wMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvYzlsLVQ4THVLVk94NEtfRV9SaUt1bFgwdl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBABZfRUD
BANZfRAwDAMEAFl91wMEAFl93gMEALB+rjANBAIAAjAHAwUDKhNJgDANBgkqhkiG
9w0BAQsFAAOCAQEAJNJCYLe5O0AqpPZDr9hCpPHdejB+OBL9hAkU1IANvFcf+xOo
NGk064mft74wzSZO+PdMZZ8XAecwSV5USe9iNOfXrfaXWwgjHbPKW5974vgoxwyB
DCqKPQVoQnKNg1215oLjtqKbDwbBorp67nCHw9bAHb1ZJgQxwk+0RJKgYgjGhMoX
Riquo31Y7Tkpc+t42k8Plbe2d7K0PdFHpu8BswAYf0q9sAjGaR43l67TClOztnX2
RH1KYL9BQ0tPYjeUohTUAsszlmq7jzEHD3VZIbEKqWJ29N4DCLl9nTBAnjXL7mjc
Qf2CTipQYr+rr7C2fnwtsOLrjENz7GHHn55+aQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:09 2026 by rpki-client