Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vkUv4BiPtvVQh87r_W0QJQyi5OM.roa
File: vkUv4BiPtvVQh87r_W0QJQyi5OM.roa (raw, json)
Hash identifier: OV1kvh/FbL/MaMhsnMYxQz5N4vfwD3gfPfCYP4//Pq4=
Subject key identifier: BE:45:2F:E0:18:8F:B6:F5:50:87:CE:EB:FD:6D:10:25:0C:A2:E4:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1CED8A0C18DB70ED9BAB439BBC9420FC0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vkUv4BiPtvVQh87r_W0QJQyi5OM.roa
Signing time: Thu 12 Nov 2026 08:21:05 +0000
ROA not before: Thu 12 Nov 2026 08:21:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 89.125.94.0/24 maxlen: 24
140.225.208.0/24 maxlen: 24
140.225.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d8:a0:c1:8d:b7:0e:d9:ba:b4:39:bb:c9:42:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 12 08:21:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be452fe0188fb6f55087ceebfd6d10250ca2e4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:b8:4e:fd:6d:cb:88:19:ed:0f:c9:a7:3e:
c3:5a:2b:ed:fe:22:53:dc:dc:77:b5:24:1e:4d:62:
a5:b8:28:89:91:3d:1c:e4:a1:dd:7e:3d:de:50:17:
8e:84:49:3d:86:a5:74:a3:03:a4:b1:84:a8:cc:57:
9a:d1:44:72:76:cd:31:ad:88:44:8d:6e:ef:04:08:
2d:5a:e1:d7:1a:39:41:62:60:7b:cf:c4:19:9a:ad:
da:6e:cc:c7:94:fe:07:ed:0c:af:53:87:c1:0e:a3:
7a:d0:09:01:8e:3b:ca:73:df:24:92:14:17:a4:29:
ce:95:28:73:0e:3c:a3:47:8b:c5:2d:b3:e8:8c:22:
38:69:01:3e:87:d5:fa:97:e7:9a:b8:2a:64:d2:df:
60:d8:14:d8:40:02:44:b7:1e:9e:d6:cb:f4:32:3e:
94:c4:46:da:2f:99:db:72:bf:5a:d2:b0:75:95:2e:
54:c8:96:f9:c9:71:4b:6b:dd:11:98:54:da:e2:db:
98:d2:2d:1c:ca:f1:af:9c:58:00:c4:a5:3d:79:b5:
0f:cb:5a:69:f3:18:02:03:73:5b:e5:98:bd:f3:31:
02:e0:b6:d0:dc:17:91:7c:06:13:97:33:8c:71:bf:
43:e6:50:00:d2:f7:41:0c:10:18:4a:cb:07:79:1e:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:2F:E0:18:8F:B6:F5:50:87:CE:EB:FD:6D:10:25:0C:A2:E4:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vkUv4BiPtvVQh87r_W0QJQyi5OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.94.0/24
140.225.208.0/23
Signature Algorithm: sha256WithRSAEncryption
94:b5:ed:ee:4f:7f:d0:9d:67:5b:56:62:27:53:5c:85:21:87:
35:28:5b:7d:d1:6c:67:c3:47:df:39:f2:9c:f4:4e:52:e3:3b:
80:01:5f:31:1e:91:04:72:00:ca:4b:2c:10:f6:a2:83:3c:c2:
a3:07:8d:f9:6c:4f:3f:e3:05:64:1f:c8:b8:61:f2:3b:6b:16:
98:dc:b5:bb:3d:9e:b5:6d:a3:7b:ab:2b:5b:f9:78:d7:a9:13:
93:cc:08:0a:c4:87:76:64:8c:b7:9b:0a:70:c9:bc:a8:b0:7f:
d9:f2:5c:d1:46:98:53:6b:2d:ee:6f:33:24:f4:f5:f8:4c:02:
87:08:fc:e4:eb:b6:be:e2:2e:06:0d:6b:60:46:f3:44:aa:1f:
6a:7b:c8:ad:40:52:7a:43:19:a5:94:ad:67:26:bb:c6:f2:2b:
7e:a8:22:ec:2a:9b:6d:06:ac:44:ab:5a:44:cd:04:43:22:94:
30:64:d9:64:06:1f:29:11:a7:af:36:7d:ed:8a:31:4c:6a:6e:
35:03:db:c1:c5:97:b3:76:0f:d0:b8:bd:67:a9:eb:a0:5f:47:
aa:a7:c4:06:c7:f5:d7:20:e3:7a:37:65:86:50:f8:a9:6c:4d:
ed:20:55:45:c7:b4:30:c1:83:a4:0a:52:75:45:87:f3:62:23:
92:b9:e1:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHO2KDBjbcO2bq0ObvJQg/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTEyMDgyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTQ1MmZlMDE4OGZiNmY1NTA4N2NlZWJmZDZkMTAyNTBjYTJlNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuK4Tv1ty4gZ7Q/Jpz7DWivt/iJT
3Nx3tSQeTWKluCiJkT0c5KHdfj3eUBeOhEk9hqV0owOksYSozFea0URyds0xrYhE
jW7vBAgtWuHXGjlBYmB7z8QZmq3abszHlP4H7QyvU4fBDqN60AkBjjvKc98kkhQX
pCnOlShzDjyjR4vFLbPojCI4aQE+h9X6l+eauCpk0t9g2BTYQAJEtx6e1sv0Mj6U
xEbaL5nbcr9a0rB1lS5UyJb5yXFLa90RmFTa4tuY0i0cyvGvnFgAxKU9ebUPy1pp
8xgCA3Nb5Zi98zEC4LbQ3BeRfAYTlzOMcb9D5lAA0vdBDBAYSssHeR69wQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL5FL+AYj7b1UIfO6/1tECUMouTjMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvdmtVdjRCaVB0dlZRaDg3cl9XMFFKUXlpNU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWX1eAwQB
jOHQMA0GCSqGSIb3DQEBCwUAA4IBAQCUte3uT3/QnWdbVmInU1yFIYc1KFt90Wxn
w0ffOfKc9E5S4zuAAV8xHpEEcgDKSywQ9qKDPMKjB435bE8/4wVkH8i4YfI7axaY
3LW7PZ61baN7qytb+XjXqROTzAgKxId2ZIy3mwpwybyosH/Z8lzRRphTay3ubzMk
9PX4TAKHCPzk67a+4i4GDWtgRvNEqh9qe8itQFJ6QxmllK1nJrvG8it+qCLsKptt
BqxEq1pEzQRDIpQwZNlkBh8pEaevNn3tijFMam41A9vBxZezdg/QuL1nqeugX0eq
p8QGx/XXION6N2WGUPipbE3tIFVFx7QwwYOkClJ1RYfzYiOSueHm
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:22 2026 by rpki-client