Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6O4_2MYM2d7zrh14PkP6c3I8N0.roa
File: K6O4_2MYM2d7zrh14PkP6c3I8N0.roa (raw, json)
Hash identifier: hYOTyp1gK8ZdDBiMsG03VRTZb8exfrdfXklctwejlzg=
Subject key identifier: 2B:A3:B8:FF:63:18:33:67:7B:CE:B8:75:E0:F9:0F:E9:CD:C8:F0:DD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A10A9442906F44B352098E16724FA16F5D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6O4_2MYM2d7zrh14PkP6c3I8N0.roa
Signing time: Mon 05 Oct 2026 05:40:50 +0000
ROA not before: Mon 05 Oct 2026 05:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 9.247.54.0/24 maxlen: 24
89.125.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:94:42:90:6f:44:b3:52:09:8e:16:72:4f:a1:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 5 05:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ba3b8ff631833677bceb875e0f90fe9cdc8f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:3e:ad:a3:08:6f:00:c7:5d:14:3f:3d:ff:
ba:f6:66:4f:d0:2e:b9:c7:a9:f1:93:6d:30:55:0f:
1e:34:55:8a:ae:3f:75:f9:26:4a:f7:49:aa:43:06:
55:28:38:76:35:dc:68:98:15:20:1a:c9:76:7d:53:
96:d3:eb:7a:81:99:78:c4:62:fd:66:c3:62:1c:ee:
aa:c4:3c:b4:12:21:32:8a:34:7c:51:a2:7c:10:74:
00:ca:5d:7a:3f:8f:4a:31:b9:f6:83:aa:2f:c4:e5:
a8:63:06:b5:c3:e2:96:76:1c:c8:70:f7:ab:bd:aa:
23:a3:c4:46:1a:89:72:d8:0f:5f:12:8f:1b:e8:c7:
4f:ea:a8:8f:37:9d:71:6d:83:c5:cd:cd:95:53:1c:
51:ed:eb:26:77:c4:fd:9c:67:37:d0:3c:d8:6f:65:
fe:04:f7:8f:f7:b9:f8:ba:2d:2f:b9:c4:d1:33:17:
90:00:76:ac:6f:1b:ff:fb:8e:88:0d:da:91:bc:79:
cc:5c:d8:53:7f:4f:8d:5b:96:3f:d5:af:9a:73:49:
5e:d6:33:35:1f:a1:af:7b:95:d8:e5:84:d9:a1:f6:
63:38:16:38:76:4b:e0:82:f3:59:83:39:7f:0d:cf:
15:b8:89:39:3c:2b:63:84:fe:ba:ae:07:d3:c0:99:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A3:B8:FF:63:18:33:67:7B:CE:B8:75:E0:F9:0F:E9:CD:C8:F0:DD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6O4_2MYM2d7zrh14PkP6c3I8N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.54.0/24
89.125.234.0/24
Signature Algorithm: sha256WithRSAEncryption
04:83:7a:89:ab:96:9b:3e:f5:f7:7c:ad:3b:eb:91:e4:35:33:
85:09:1f:8a:cf:d6:5d:14:ab:4c:16:54:94:89:74:65:15:77:
7a:1b:76:09:d4:e2:90:cc:ff:d8:2f:51:bc:18:5f:dd:eb:fe:
9a:9b:36:1b:7b:03:38:64:99:f6:10:2d:f3:0f:73:5d:e3:fe:
ba:ef:2b:cf:da:9b:b7:46:ee:53:03:04:8d:34:2f:c5:a8:9e:
04:d1:09:a5:b7:64:e5:ee:50:2d:7b:6a:fc:1a:90:97:6b:2d:
6b:69:36:48:6e:b5:4e:f5:dc:b6:73:9c:b9:65:83:3c:30:13:
59:f7:b2:bd:23:95:1c:a0:d9:6b:72:8d:7d:e6:34:a3:28:68:
15:9f:d9:a0:3a:81:a1:04:94:a1:4a:6a:33:1b:f1:5c:6c:81:
18:2f:45:4e:4c:24:a9:99:56:87:6a:a9:20:0d:c0:06:3e:f5:
0e:26:91:b0:16:d3:5d:e9:1c:14:9e:4f:37:0c:3f:61:5b:b6:
23:c5:76:8a:25:c0:ba:17:26:2e:6e:97:28:63:5c:f7:9c:74:
69:db:2e:c6:ec:fa:50:bd:ab:03:b8:53:1d:bf:10:69:0c:3f:
8a:60:c5:fa:0c:5f:7f:8c:36:0c:46:ac:13:0a:38:a4:e6:0e:
fb:a2:b5:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEKlEKQb0SzUgmOFnJPoW9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDA1MDU0MDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmEzYjhmZjYzMTgzMzY3N2JjZWI4NzVlMGY5MGZlOWNkYzhmMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0E+raMIbwDHXRQ/Pf+69mZP0C65
x6nxk20wVQ8eNFWKrj91+SZK90mqQwZVKDh2NdxomBUgGsl2fVOW0+t6gZl4xGL9
ZsNiHO6qxDy0EiEyijR8UaJ8EHQAyl16P49KMbn2g6ovxOWoYwa1w+KWdhzIcPer
vaojo8RGGoly2A9fEo8b6MdP6qiPN51xbYPFzc2VUxxR7esmd8T9nGc30DzYb2X+
BPeP97n4ui0vucTRMxeQAHasbxv/+46IDdqRvHnMXNhTf0+NW5Y/1a+ac0le1jM1
H6Gve5XY5YTZofZjOBY4dkvggvNZgzl/Dc8VuIk5PCtjhP66rgfTwJlckQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCujuP9jGDNne864deD5D+nNyPDdMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSzZPNF8yTVlNMmQ3enJoMTRQa1A2YzNJOE4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQACfc2AwQA
WX3qMA0GCSqGSIb3DQEBCwUAA4IBAQAEg3qJq5abPvX3fK0765HkNTOFCR+Kz9Zd
FKtMFlSUiXRlFXd6G3YJ1OKQzP/YL1G8GF/d6/6amzYbewM4ZJn2EC3zD3Nd4/66
7yvP2pu3Ru5TAwSNNC/FqJ4E0Qmlt2Tl7lAte2r8GpCXay1raTZIbrVO9dy2c5y5
ZYM8MBNZ97K9I5UcoNlrco195jSjKGgVn9mgOoGhBJShSmozG/FcbIEYL0VOTCSp
mVaHaqkgDcAGPvUOJpGwFtNd6RwUnk83DD9hW7YjxXaKJcC6FyYubpcoY1z3nHRp
2y7G7PpQvasDuFMdvxBpDD+KYMX6DF9/jDYMRqwTCjik5g77orU2
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:22 2026 by rpki-client