Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k1ycXGwb8j3wMVfNfSrHp98r62g.roa
File: k1ycXGwb8j3wMVfNfSrHp98r62g.roa (raw, json)
Hash identifier: DXCuIAVg5EEK2BTBUCF+dvfJV0Q2WUGkI38nmkJIZTg=
Subject key identifier: 93:5C:9C:5C:6C:1B:F2:3D:F0:31:57:CD:7D:2A:C7:A7:DF:2B:EB:68
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C800045183E261597879E79199B11ADDF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k1ycXGwb8j3wMVfNfSrHp98r62g.roa
Signing time: Sat 21 Feb 2026 11:40:27 +0000
ROA not before: Sat 21 Feb 2026 11:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 89.125.38.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:80:00:45:18:3e:26:15:97:87:9e:79:19:9b:11:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 21 11:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=935c9c5c6c1bf23df03157cd7d2ac7a7df2beb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:11:43:f0:d1:40:95:82:06:67:9e:ba:27:
4c:a0:dc:19:f4:a9:df:e1:8f:95:fc:1f:cc:3a:3b:
cd:3a:fe:ba:cc:6d:2e:d3:e3:d9:57:b1:e6:72:26:
c1:1e:ea:b0:22:9c:92:b7:75:09:38:96:a9:db:da:
4d:98:ec:59:08:61:4c:08:a8:ca:a6:bd:6e:c4:78:
b8:be:4b:4f:c4:4a:6e:62:bd:97:43:40:93:0e:ea:
e7:a7:3b:0b:73:2e:50:48:5a:5f:5f:16:cd:f5:29:
bc:c1:f7:e7:f0:95:69:c5:56:bb:03:e6:ab:c2:0f:
a5:4e:2c:7c:11:c6:9f:09:b3:6f:a4:15:6a:a8:c4:
d4:3c:b1:39:5b:04:3e:73:fe:91:eb:76:0e:c2:b0:
47:52:6b:0c:f8:9b:cf:43:31:99:56:38:af:a4:de:
00:37:14:70:88:75:b8:28:c3:1b:62:12:1f:b8:b2:
b6:a8:71:c6:55:cf:23:b1:58:b6:f9:37:90:d1:f4:
57:ed:fd:e1:8a:fb:39:bf:f4:9c:97:89:7c:14:96:
6c:05:ab:24:df:2a:0f:b6:c8:fe:e7:0a:30:2a:a1:
01:e1:e3:a1:47:b9:79:3d:06:32:e8:a6:2b:98:ef:
3e:dd:dc:84:2a:2e:7d:aa:53:0a:74:b1:f0:5c:8d:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:9C:5C:6C:1B:F2:3D:F0:31:57:CD:7D:2A:C7:A7:DF:2B:EB:68
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k1ycXGwb8j3wMVfNfSrHp98r62g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.38.0/24
89.125.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:86:7e:43:fe:8d:29:c7:db:00:54:e6:a3:b9:82:ac:94:13:
f1:0e:e3:b6:b0:34:52:13:08:95:f2:98:df:d0:81:02:30:95:
a7:a5:78:1b:09:a8:c5:3d:56:94:ef:e7:66:b9:1c:6f:20:04:
38:dd:a1:3e:bc:75:83:ae:6c:82:53:3a:2c:4c:5a:7f:d1:76:
48:ec:8c:93:cf:f2:8f:0a:71:76:4e:df:60:98:92:af:fe:fd:
76:40:ce:0d:d3:43:e3:0b:18:90:b4:01:45:57:a8:16:d9:2b:
11:88:95:aa:c9:5d:1b:56:c8:68:f7:8b:67:b4:81:99:d7:59:
d9:f9:15:2d:90:74:33:ef:8e:3f:79:4f:c3:6a:6f:59:50:09:
3a:df:45:c2:ce:d0:29:6a:b9:70:57:0d:f5:d9:1b:c9:c6:ce:
24:8c:4f:b8:e4:51:fd:39:5e:06:d9:ac:07:9b:96:83:a6:aa:
2b:65:65:19:b8:3d:c4:02:ff:de:7f:53:0e:95:a3:ca:40:ba:
93:10:69:ab:ab:7e:7b:60:00:8f:8e:63:9b:2e:f8:19:31:79:
ca:39:11:3b:ed:5b:92:70:64:6a:12:28:d7:13:1a:3f:6d:77:
eb:00:d2:bd:bd:47:3f:0e:2a:d1:66:32:0a:15:99:b6:81:90:
16:4d:a7:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyAAEUYPiYVl4eeeRmbEa3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMjIxMTE0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzVjOWM1YzZjMWJmMjNkZjAzMTU3Y2Q3ZDJhYzdhN2RmMmJlYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ0RQ/DRQJWCBmeeuidMoNwZ9Knf
4Y+V/B/MOjvNOv66zG0u0+PZV7HmcibBHuqwIpySt3UJOJap29pNmOxZCGFMCKjK
pr1uxHi4vktPxEpuYr2XQ0CTDurnpzsLcy5QSFpfXxbN9Sm8wffn8JVpxVa7A+ar
wg+lTix8EcafCbNvpBVqqMTUPLE5WwQ+c/6R63YOwrBHUmsM+JvPQzGZVjivpN4A
NxRwiHW4KMMbYhIfuLK2qHHGVc8jsVi2+TeQ0fRX7f3hivs5v/Scl4l8FJZsBask
3yoPtsj+5wowKqEB4eOhR7l5PQYy6KYrmO8+3dyEKi59qlMKdLHwXI1GQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJNcnFxsG/I98DFXzX0qx6ffK+toMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvazF5Y1hHd2I4ajN3TVZmTmZTckhwOThyNjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWX0mAwQA
WX0+MA0GCSqGSIb3DQEBCwUAA4IBAQAshn5D/o0px9sAVOajuYKslBPxDuO2sDRS
EwiV8pjf0IECMJWnpXgbCajFPVaU7+dmuRxvIAQ43aE+vHWDrmyCUzosTFp/0XZI
7IyTz/KPCnF2Tt9gmJKv/v12QM4N00PjCxiQtAFFV6gW2SsRiJWqyV0bVsho94tn
tIGZ11nZ+RUtkHQz744/eU/Dam9ZUAk630XCztAparlwVw312RvJxs4kjE+45FH9
OV4G2awHm5aDpqorZWUZuD3EAv/ef1MOlaPKQLqTEGmrq357YACPjmObLvgZMXnK
ORE77VuScGRqEijXExo/bXfrANK9vUc/DirRZjIKFZm2gZAWTaeF
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:44 2026 by rpki-client