Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zNqSxSDqSBz9WCA1yplqTk1mFg8.roa
File: zNqSxSDqSBz9WCA1yplqTk1mFg8.roa (raw, json)
Hash identifier: gjM2mR3YEQ33P+9TKmknCXXqofhgCHkxlD356fhIxOg=
Subject key identifier: CC:DA:92:C5:20:EA:48:1C:FD:58:20:35:CA:99:6A:4E:4D:66:16:0F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A176BD170CA35051213A9D1CB450955151
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zNqSxSDqSBz9WCA1yplqTk1mFg8.roa
Signing time: Mon 26 Oct 2026 05:44:26 +0000
ROA not before: Mon 26 Oct 2026 05:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 89.125.9.0/24 maxlen: 24
89.125.11.0/24 maxlen: 24
89.125.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:bd:17:0c:a3:50:51:21:3a:9d:1c:b4:50:95:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 05:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccda92c520ea481cfd582035ca996a4e4d66160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2b:8f:6c:b6:2c:d7:f3:7b:44:e6:28:aa:69:
da:17:cc:74:f2:42:cc:8c:62:1f:75:4d:ec:af:50:
dc:74:cc:0d:cb:00:de:b0:b1:68:4c:e3:66:aa:52:
41:65:96:78:3d:d0:f7:50:3a:c4:b2:b4:97:e1:80:
31:29:21:9f:3f:6b:5f:04:7f:dc:c2:f4:e3:6d:dc:
2a:e3:13:3e:56:a4:8f:95:6b:0d:6b:f7:93:89:1f:
42:12:06:85:28:7a:0d:46:ab:44:d4:39:26:4e:c6:
5f:f7:39:5e:85:e7:a1:ad:0a:a2:c0:8e:86:84:d3:
bc:a7:cb:97:47:7c:e6:9a:51:ee:30:74:dc:11:39:
4b:a7:22:7d:19:6f:d2:98:fe:f7:8c:ea:a0:b7:f8:
d2:ee:69:e1:b4:a0:ce:0d:d9:97:2d:19:19:2b:db:
86:32:d2:75:e3:7e:1c:34:4b:b9:f2:df:76:46:f2:
86:77:94:c1:a8:09:52:4e:ec:b6:4f:85:6f:69:85:
6b:d7:4a:2f:ab:eb:28:c5:9f:21:59:2e:f3:b7:09:
2b:a1:4f:fd:9a:d6:29:80:a4:1b:41:e2:08:4f:d3:
d5:2e:de:1a:ed:b6:18:36:00:3f:9d:73:34:52:86:
65:53:23:92:a7:c2:a3:60:79:91:e5:86:83:d3:db:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:92:C5:20:EA:48:1C:FD:58:20:35:CA:99:6A:4E:4D:66:16:0F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zNqSxSDqSBz9WCA1yplqTk1mFg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.9.0/24
89.125.11.0/24
89.125.175.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cc:39:63:e2:10:5a:31:e4:e8:92:04:33:38:44:40:32:11:
d9:31:ca:75:cd:db:8f:38:51:ef:a7:43:49:b9:b3:a4:99:c8:
69:ae:90:1c:53:9c:0d:b4:0c:40:b3:e7:f5:7d:a6:1f:1f:9f:
a3:b9:5d:e3:f5:b8:7a:e6:75:b0:ab:91:f1:3b:f5:28:4c:df:
c8:10:75:b1:87:c0:f8:74:94:74:3f:33:22:9f:20:0f:bb:00:
c8:02:ca:bb:09:57:59:07:f6:c8:b4:2c:58:da:71:6f:b1:f0:
8b:fe:e1:5c:35:97:ef:3a:6c:51:34:18:cb:f2:0d:4a:c8:89:
b7:ca:5d:18:7e:d0:7b:0a:82:d6:9e:3a:b0:77:32:ea:cb:dd:
03:a0:92:ca:8e:1b:06:5b:ac:90:27:b2:b6:53:3d:0b:f2:63:
10:d2:51:44:7b:b2:73:74:57:85:e5:87:3a:33:ef:e5:53:fc:
91:50:0e:8c:53:bf:79:1f:82:95:ac:d6:f1:90:06:e3:5d:30:
e8:0e:cb:44:c4:dd:c9:0f:5e:16:42:9b:b7:fe:6a:48:90:c0:
46:12:63:d1:35:39:da:7b:f3:25:d6:fa:a3:9f:f7:ef:42:02:
bb:79:c4:34:64:4e:79:44:5c:42:2e:01:1a:c6:23:d7:33:4d:
61:03:e7:91
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaF2vRcMo1BRITqdHLRQlVFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDI2MDU0NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2RhOTJjNTIwZWE0ODFjZmQ1ODIwMzVjYTk5NmE0ZTRkNjYxNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yuPbLYs1/N7ROYoqmnaF8x08kLM
jGIfdU3sr1DcdMwNywDesLFoTONmqlJBZZZ4PdD3UDrEsrSX4YAxKSGfP2tfBH/c
wvTjbdwq4xM+VqSPlWsNa/eTiR9CEgaFKHoNRqtE1DkmTsZf9zleheehrQqiwI6G
hNO8p8uXR3zmmlHuMHTcETlLpyJ9GW/SmP73jOqgt/jS7mnhtKDODdmXLRkZK9uG
MtJ1434cNEu58t92RvKGd5TBqAlSTuy2T4VvaYVr10ovq+soxZ8hWS7ztwkroU/9
mtYpgKQbQeIIT9PVLt4a7bYYNgA/nXM0UoZlUyOSp8KjYHmR5YaD09tAMQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMzaksUg6kgc/VggNcqZak5NZhYPMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvek5xU3hTRHFTQno5V0NBMXlwbHFUazFtRmc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWX0JAwQA
WX0LAwQAWX2vMA0GCSqGSIb3DQEBCwUAA4IBAQAAzDlj4hBaMeTokgQzOERAMhHZ
Mcp1zduPOFHvp0NJubOkmchprpAcU5wNtAxAs+f1faYfH5+juV3j9bh65nWwq5Hx
O/UoTN/IEHWxh8D4dJR0PzMinyAPuwDIAsq7CVdZB/bItCxY2nFvsfCL/uFcNZfv
OmxRNBjL8g1KyIm3yl0YftB7CoLWnjqwdzLqy90DoJLKjhsGW6yQJ7K2Uz0L8mMQ
0lFEe7JzdFeF5Yc6M+/lU/yRUA6MU795H4KVrNbxkAbjXTDoDstExN3JD14WQpu3
/mpIkMBGEmPRNTnae/Ml1vqjn/fvQgK7ecQ0ZE55RFxCLgEaxiPXM01hA+eR
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:59 2026 by rpki-client