Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UiRBwDlSuHs2aGXaDuekiN2r_-4.roa
File: UiRBwDlSuHs2aGXaDuekiN2r_-4.roa (raw, json)
Hash identifier: bx1MqC6pud9HSnBca6IsXHhTj97QRSZFWmqtsx7et1U=
Subject key identifier: 52:24:41:C0:39:52:B8:7B:36:68:65:DA:0E:E7:A4:88:DD:AB:FF:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D8A563C310E3C537D942A40BBC2DB5DF6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UiRBwDlSuHs2aGXaDuekiN2r_-4.roa
Signing time: Tue 14 Apr 2026 04:53:20 +0000
ROA not before: Tue 14 Apr 2026 04:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
167.17.32.0/21 maxlen: 21
167.17.41.0/24 maxlen: 24
167.17.42.0/23 maxlen: 23
167.17.46.0/24 maxlen: 24
206.245.136.0/21 maxlen: 21
206.245.144.0/21 maxlen: 21
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:56:3c:31:0e:3c:53:7d:94:2a:40:bb:c2:db:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 14 04:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=522441c03952b87b366865da0ee7a488ddabffee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:6b:28:4d:53:6c:74:14:33:8f:a1:64:78:
e1:f5:25:28:22:97:44:68:04:44:a6:96:42:58:df:
59:d6:a0:f5:56:97:a2:2a:2d:8d:5c:d0:94:4d:8c:
a3:a3:0f:45:bf:93:ca:27:98:20:b1:77:bf:4d:31:
50:d9:34:78:73:fa:2b:2a:82:ac:d1:14:b5:fc:6c:
ae:08:4f:65:7b:7c:06:3e:42:55:3c:6e:c0:7f:8c:
52:ee:bb:47:95:ce:0c:c6:6b:db:70:c0:14:78:14:
d4:fa:db:c3:6d:bd:0b:ea:0e:f0:72:82:8f:e3:c0:
17:f7:0b:b9:87:e3:60:71:71:68:d3:61:e3:b0:41:
2a:67:8b:4d:e4:40:50:e8:37:24:29:5e:5a:66:e2:
5e:75:a4:80:42:e5:4b:bb:a2:c1:df:26:15:25:1e:
30:d6:ad:6e:fb:1e:b6:37:36:de:c9:d6:57:bf:cd:
aa:a3:c3:39:11:cb:42:ce:b0:e0:e7:a0:cd:4e:3d:
83:30:90:2b:25:11:11:e0:f0:26:43:5e:74:bb:93:
52:0c:41:82:92:63:a8:a9:a0:8a:a7:ee:37:7a:a5:
08:d9:cb:77:a5:8b:c4:8e:d2:5e:48:8c:42:26:32:
f7:ad:ac:c4:f3:81:ef:33:10:df:83:36:ce:e0:89:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:41:C0:39:52:B8:7B:36:68:65:DA:0E:E7:A4:88:DD:AB:FF:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UiRBwDlSuHs2aGXaDuekiN2r_-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
167.17.32.0/21
167.17.41.0-167.17.43.255
167.17.46.0/24
206.245.136.0-206.245.151.255
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e9:fa:5b:be:1e:bf:7f:e4:30:b6:7a:4f:74:cc:dc:dd:80:
f0:69:78:c1:07:c3:fc:74:02:72:c1:2b:76:ce:42:e1:80:8d:
b6:52:44:f0:86:1d:be:80:a3:ac:7a:21:70:9a:38:f5:92:c6:
8c:56:ee:8f:db:5c:ff:a0:55:8f:0d:f1:fa:94:ec:43:fc:d8:
e8:6b:77:3a:81:d7:92:59:06:ad:e6:3e:b1:35:55:8f:91:2a:
3c:7b:ea:0e:d2:58:b1:c5:31:8e:8b:11:0b:52:7a:eb:3d:64:
67:40:76:33:17:53:8e:7d:0a:ee:ae:51:2e:c1:44:3c:1c:d2:
ad:b3:65:ac:24:a6:d1:cb:52:ad:2d:0e:aa:ea:de:57:a3:f8:
94:ab:b5:fb:33:70:81:1d:93:9a:f2:a9:66:4a:8f:7b:8f:21:
1c:11:1e:22:70:7b:81:a5:f8:8c:99:90:8c:cc:6c:e8:18:66:
ca:0c:23:94:60:8f:bf:88:48:96:d9:ad:fa:a9:08:4e:ab:51:
46:fb:ad:45:14:17:c6:22:6a:ae:1a:07:59:24:9f:5b:94:76:
e1:5b:26:8b:e7:98:ca:9e:42:a7:cd:dc:df:d5:66:ea:e9:95:
4e:b7:ba:27:aa:7e:27:ab:42:5d:43:de:7b:c9:c2:9b:4c:7b:
29:c2:9f:a2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ2KVjwxDjxTfZQqQLvC2132MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNDE0MDQ1MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjI0NDFjMDM5NTJiODdiMzY2ODY1ZGEwZWU3YTQ4OGRkYWJmZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeBrKE1TbHQUM4+hZHjh9SUoIpdE
aAREppZCWN9Z1qD1VpeiKi2NXNCUTYyjow9Fv5PKJ5ggsXe/TTFQ2TR4c/orKoKs
0RS1/GyuCE9le3wGPkJVPG7Af4xS7rtHlc4MxmvbcMAUeBTU+tvDbb0L6g7wcoKP
48AX9wu5h+NgcXFo02HjsEEqZ4tN5EBQ6DckKV5aZuJedaSAQuVLu6LB3yYVJR4w
1q1u+x62NzbeydZXv82qo8M5EctCzrDg56DNTj2DMJArJRER4PAmQ150u5NSDEGC
kmOoqaCKp+43eqUI2ct3pYvEjtJeSIxCJjL3razE84HvMxDfgzbO4IkbzwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFFIkQcA5Urh7Nmhl2g7npIjdq//uMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVWlSQndEbFN1SHMyYUdYYUR1ZWtpTjJyXy00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAWX2NAwQA
WX2kAwQAWX24AwQDpxEgMAwDBACnESkDBAKnESgDBACnES4wDAMEA871iAMEA871
kAMEANB7uAMEANB7ujANBgkqhkiG9w0BAQsFAAOCAQEAben6W74ev3/kMLZ6T3TM
3N2A8Gl4wQfD/HQCcsErds5C4YCNtlJE8IYdvoCjrHohcJo49ZLGjFbuj9tc/6BV
jw3x+pTsQ/zY6Gt3OoHXklkGreY+sTVVj5EqPHvqDtJYscUxjosRC1J66z1kZ0B2
MxdTjn0K7q5RLsFEPBzSrbNlrCSm0ctSrS0OqureV6P4lKu1+zNwgR2TmvKpZkqP
e48hHBEeInB7gaX4jJmQjMxs6BhmygwjlGCPv4hIltmt+qkITqtRRvutRRQXxiJq
rhoHWSSfW5R24Vsmi+eYyp5Cp83c39Vm6umVTre6J6p+J6tCXUPee8nCm0x7KcKf
og==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:28 2026 by rpki-client