Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6iH7RrS9ym2wM4QQ55gME9kVwhM.roa
File: 6iH7RrS9ym2wM4QQ55gME9kVwhM.roa (raw, json)
Hash identifier: zckPBd8KR6hm4/Zql+qmkCi2U74o/30B2IouIY3IQvs=
Subject key identifier: EA:21:FB:46:B4:BD:CA:6D:B0:33:84:10:E7:98:0C:13:D9:15:C2:13
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D6348C4249F166274E733F5A47D14623B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6iH7RrS9ym2wM4QQ55gME9kVwhM.roa
Signing time: Mon 06 Apr 2026 14:53:26 +0000
ROA not before: Mon 06 Apr 2026 14:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63018
IP address blocks: 89.125.4.0/22 maxlen: 22
89.125.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:48:c4:24:9f:16:62:74:e7:33:f5:a4:7d:14:62:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 6 14:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea21fb46b4bdca6db0338410e7980c13d915c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:30:fa:fd:d6:1d:29:81:5a:be:b1:f4:c9:
70:c9:94:2e:1b:09:82:cc:75:60:85:3d:b5:d5:9d:
49:61:11:ad:3b:ef:af:3a:59:65:8b:17:1c:23:77:
9a:5b:0d:19:ba:4c:87:c4:68:25:a3:40:ee:10:f8:
d7:42:fe:6e:71:60:44:b6:8f:74:05:bf:27:3c:cd:
97:25:24:19:39:85:a7:3d:75:12:ce:a3:c4:bc:1b:
36:62:9e:51:bc:40:d5:8f:30:2f:4c:71:4e:d9:da:
59:da:2d:64:06:95:08:83:9d:70:04:56:77:9e:77:
d8:ad:15:89:b3:a4:a4:e2:28:33:57:fa:d3:fb:c8:
0c:62:df:ba:86:e2:8c:53:e5:90:3e:f7:a7:7d:51:
7c:2e:94:28:71:0c:6b:ad:3a:b4:65:47:cd:c8:7c:
90:cd:59:d7:41:71:71:dd:36:08:21:4f:f6:a6:3a:
d3:4f:6c:49:24:20:6f:c1:5a:22:c5:38:85:b0:16:
95:1d:0f:6a:6f:1d:03:e0:82:c3:82:15:4d:d1:48:
7a:16:f3:d4:9d:a7:a0:0c:84:a7:d5:09:77:39:2c:
18:e0:0d:cf:26:f3:7f:49:08:8f:9e:f9:ba:77:a5:
0c:65:60:de:79:a2:a4:d1:f7:bf:27:c8:5c:c6:ec:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:FB:46:B4:BD:CA:6D:B0:33:84:10:E7:98:0C:13:D9:15:C2:13
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6iH7RrS9ym2wM4QQ55gME9kVwhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.4.0/22
89.125.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:4a:d2:e5:6e:24:63:29:50:66:12:b0:d1:ec:c7:c0:cc:79:
e4:af:5c:1d:b3:d2:76:8a:f4:72:0c:d5:4a:c7:a9:d5:aa:25:
ce:7d:51:3a:c8:8a:42:f4:6e:e4:9e:3f:f1:f0:65:64:b1:90:
b6:01:88:51:3e:ae:b4:74:2f:37:3d:79:eb:3f:53:97:98:7c:
9d:22:23:51:5e:92:4c:5c:2e:31:9d:52:b0:73:a9:bd:e3:19:
cf:28:62:3a:79:7a:fa:27:fd:21:e9:3d:16:b8:be:8f:df:c3:
20:5a:18:ac:59:24:be:f9:dd:e1:0a:28:f2:35:6f:0b:87:6f:
ac:c9:1e:57:a1:3b:31:27:4f:fe:b0:77:aa:4f:3b:a6:30:d1:
06:98:4e:0b:70:87:64:d3:36:71:ff:38:3c:4b:17:e9:be:3e:
cd:ee:72:fb:95:a7:11:bb:2e:fe:d4:a7:35:38:1e:18:31:75:
cf:ef:47:de:22:66:e5:d3:04:3c:82:c0:70:6b:61:3f:35:65:
e9:5b:e5:9d:6a:46:49:b9:7a:b5:d3:bc:15:8b:11:f9:ee:e8:
b0:af:58:7a:ff:df:2f:7b:f8:9a:a1:3c:85:cf:2b:e8:64:c7:
ea:ba:7c:d0:9a:2e:4f:32:40:52:f0:33:d9:9d:4d:a8:e2:ed:
23:6d:77:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1jSMQknxZidOcz9aR9FGI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNDA2MTQ1MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTIxZmI0NmI0YmRjYTZkYjAzMzg0MTBlNzk4MGMxM2Q5MTVjMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiQw+v3WHSmBWr6x9MlwyZQuGwmC
zHVghT211Z1JYRGtO++vOlllixccI3eaWw0ZukyHxGglo0DuEPjXQv5ucWBEto90
Bb8nPM2XJSQZOYWnPXUSzqPEvBs2Yp5RvEDVjzAvTHFO2dpZ2i1kBpUIg51wBFZ3
nnfYrRWJs6Sk4igzV/rT+8gMYt+6huKMU+WQPvenfVF8LpQocQxrrTq0ZUfNyHyQ
zVnXQXFx3TYIIU/2pjrTT2xJJCBvwVoixTiFsBaVHQ9qbx0D4ILDghVN0Uh6FvPU
naegDISn1Ql3OSwY4A3PJvN/SQiPnvm6d6UMZWDeeaKk0fe/J8hcxuwK+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOoh+0a0vcptsDOEEOeYDBPZFcITMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNmlIN1JyUzl5bTJ3TTRRUTU1Z01FOWtWd2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWX0EAwQC
WX0MMA0GCSqGSIb3DQEBCwUAA4IBAQA9StLlbiRjKVBmErDR7MfAzHnkr1wds9J2
ivRyDNVKx6nVqiXOfVE6yIpC9G7knj/x8GVksZC2AYhRPq60dC83PXnrP1OXmHyd
IiNRXpJMXC4xnVKwc6m94xnPKGI6eXr6J/0h6T0WuL6P38MgWhisWSS++d3hCijy
NW8Lh2+syR5XoTsxJ0/+sHeqTzumMNEGmE4LcIdk0zZx/zg8Sxfpvj7N7nL7lacR
uy7+1Kc1OB4YMXXP70feImbl0wQ8gsBwa2E/NWXpW+WdakZJuXq107wVixH57uiw
r1h6/98ve/iaoTyFzyvoZMfqunzQmi5PMkBS8DPZnU2o4u0jbXcO
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:53 2026 by rpki-client