Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/9poqEnfuHRxfxLFusMgYmVdKsq0.roa
File: 9poqEnfuHRxfxLFusMgYmVdKsq0.roa (raw, json)
Hash identifier: 9QVM2edMXmY0GvzT6L39yTLCfHgXCLZc8xHTjCz57hk=
Subject key identifier: F6:9A:2A:12:77:EE:1D:1C:5F:C4:B1:6E:B0:C8:18:99:57:4A:B2:AD
Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial: 019D8733509A450CEB8241527DEDC49AD517
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/9poqEnfuHRxfxLFusMgYmVdKsq0.roa
Signing time: Mon 13 Apr 2026 14:16:20 +0000
ROA not before: Mon 13 Apr 2026 14:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44472
IP address blocks: 86.111.52.0/23 maxlen: 24
86.111.52.0/24 maxlen: 24
86.111.53.0/24 maxlen: 24
93.187.68.0/24 maxlen: 24
185.43.147.0/24 maxlen: 24
185.169.105.0/24 maxlen: 24
2a12:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:33:50:9a:45:0c:eb:82:41:52:7d:ed:c4:9a:d5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Validity
Not Before: Apr 13 14:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f69a2a1277ee1d1c5fc4b16eb0c81899574ab2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:79:10:8b:bc:9b:14:b3:70:03:66:70:1d:
3a:cb:1f:a7:51:54:8b:b5:b6:54:0d:60:f5:92:09:
de:2e:ed:51:6d:cc:95:e9:fd:59:5b:d3:40:2c:08:
4c:56:0a:c6:20:f2:bc:92:c0:ae:5d:49:b0:05:af:
2f:a2:a1:a6:f5:e6:08:2f:14:a9:7c:36:0d:ae:ac:
b2:76:10:24:e7:0b:1c:22:5d:3b:a2:80:38:bd:8e:
b1:90:4b:b1:55:8a:46:7e:4c:b5:16:db:81:8e:11:
4c:2e:b2:2c:db:e2:b5:66:4d:94:bf:80:d6:1e:17:
42:30:9a:53:ed:f3:6c:00:0f:1e:6f:3a:ce:c7:02:
1d:a4:61:b9:21:28:b5:8d:a8:b1:2c:e9:d9:2f:6e:
5d:ab:11:91:b6:11:e3:74:4a:82:e2:3d:ae:14:a8:
cd:30:c3:80:db:23:11:fb:db:31:9a:29:ad:29:47:
d8:7d:0b:e9:49:a1:24:91:e2:dd:f1:31:de:71:8c:
85:95:9c:b2:87:43:38:62:27:72:76:4d:71:f2:7b:
f8:a6:e7:4c:52:fc:3c:38:8f:48:ad:b6:9c:27:fe:
6a:f3:6a:2c:88:b9:b9:63:62:c7:7f:98:5f:59:0f:
4e:19:2c:fc:02:0b:f7:4f:dd:80:69:48:10:7a:79:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9A:2A:12:77:EE:1D:1C:5F:C4:B1:6E:B0:C8:18:99:57:4A:B2:AD
X509v3 Authority Key Identifier:
keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/9poqEnfuHRxfxLFusMgYmVdKsq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.52.0/23
93.187.68.0/24
185.43.147.0/24
185.169.105.0/24
IPv6:
2a12:c440::/29
Signature Algorithm: sha256WithRSAEncryption
ba:80:13:d3:a3:b9:28:42:27:98:e7:84:8c:30:00:02:ae:33:
fd:ba:b5:e7:1f:20:80:9c:fb:71:d3:90:90:26:b5:80:8b:d3:
cc:16:97:a4:9b:08:e0:56:4b:bb:34:71:5d:ac:90:f5:8f:d5:
0d:97:11:94:3b:dc:45:dc:27:1c:ea:75:c5:f1:be:5c:f2:3f:
b7:f4:54:73:1f:6f:1a:93:57:f2:ef:c3:98:48:d5:1e:0a:b5:
87:4a:56:09:9e:3b:25:65:c5:ad:28:1e:1d:37:b0:2f:f8:86:
81:87:fd:d2:12:75:16:8c:2a:6b:b8:b4:d4:e6:8e:e8:00:5f:
52:d6:80:6e:3d:0c:84:d0:68:99:16:31:5b:36:34:f8:3a:50:
07:eb:ff:16:0a:67:ba:39:fc:43:4e:de:8e:a0:63:a0:49:14:
a1:db:9e:5b:d6:c1:fb:9f:17:6a:25:d3:aa:42:88:e3:1e:74:
ad:e8:9e:f3:7d:fd:40:c7:fc:70:1e:6e:2e:58:7b:3d:0a:61:
3b:66:32:27:27:9a:31:d4:81:7b:a8:90:cb:87:3a:ab:bc:9e:
db:90:a8:82:8f:af:e7:de:8f:29:e2:5d:33:a2:d9:50:88:4d:
9b:2a:66:fd:ef:b4:0e:9c:13:69:15:f2:18:a0:01:f0:f4:16:
d7:8b:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:30 2026 by rpki-client