Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/9rJ3D7R2FGpfztbwgoAll-ejebo.roa
File: 9rJ3D7R2FGpfztbwgoAll-ejebo.roa (raw, json)
Hash identifier: 0+H9NeSyn3NYB4CYcbDs912kX5NQoduTWlOHO6vJ2zk=
Subject key identifier: F6:B2:77:0F:B4:76:14:6A:5F:CE:D6:F0:82:80:25:97:E7:A3:79:BA
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019E4E76003AEC88F552C723478516EDC3FE
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/9rJ3D7R2FGpfztbwgoAll-ejebo.roa
Signing time: Fri 22 May 2026 06:53:36 +0000
ROA not before: Fri 22 May 2026 06:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206892
IP address blocks: 45.95.44.0/22 maxlen: 24
91.206.112.0/24 maxlen: 24
94.199.178.0/23 maxlen: 24
94.199.179.0/24 maxlen: 24
95.140.32.0/24 maxlen: 24
95.140.38.0/23 maxlen: 24
185.90.236.0/22 maxlen: 24
185.161.72.0/22 maxlen: 24
185.199.28.0/22 maxlen: 24
185.234.180.0/22 maxlen: 24
194.39.44.0/22 maxlen: 24
195.200.232.0/23 maxlen: 24
2a07:c280::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:76:00:3a:ec:88:f5:52:c7:23:47:85:16:ed:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: May 22 06:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6b2770fb476146a5fced6f082802597e7a379ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:77:fd:7c:ae:17:2a:e6:9e:89:a5:2f:39:
6b:75:52:c0:6a:5f:bf:82:74:45:30:3a:83:1a:0a:
79:b1:88:57:07:df:77:4a:16:c0:2d:07:19:f8:9c:
09:13:43:27:ff:40:96:14:76:bc:94:a2:11:3b:10:
bb:ed:87:11:74:dc:b1:c2:f4:85:40:62:de:3b:8a:
dd:0e:02:92:f4:e0:94:61:39:6e:42:cc:a2:fc:f7:
0f:e3:16:d2:09:9c:a5:56:65:5a:d0:60:ec:77:43:
11:06:79:4b:5c:5e:2e:03:e4:8e:4a:99:4b:b3:67:
d3:34:df:6d:c0:81:d4:ff:84:d3:df:df:74:9f:7f:
7d:87:14:cc:20:e7:17:6a:97:32:f2:bd:2c:74:07:
66:dc:59:7f:52:87:75:0b:cf:7f:ae:ae:58:23:7c:
47:3d:9d:0a:3b:72:f5:5b:9f:1a:72:49:03:55:2d:
67:fe:34:20:b5:38:a6:09:15:f7:cd:ce:b9:12:8c:
f6:35:49:aa:fe:ee:1b:b6:61:97:e0:14:66:b9:23:
8a:2a:d1:94:f6:95:a3:02:c5:70:b9:2d:88:20:e3:
76:58:24:c4:55:c5:26:ab:bb:e0:fb:7d:8c:11:1d:
f0:ae:34:a2:f9:11:02:26:d0:ca:c7:b4:14:b2:23:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:77:0F:B4:76:14:6A:5F:CE:D6:F0:82:80:25:97:E7:A3:79:BA
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/9rJ3D7R2FGpfztbwgoAll-ejebo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.44.0/22
91.206.112.0/24
94.199.178.0/23
95.140.32.0/24
95.140.38.0/23
185.90.236.0/22
185.161.72.0/22
185.199.28.0/22
185.234.180.0/22
194.39.44.0/22
195.200.232.0/23
IPv6:
2a07:c280::/32
Signature Algorithm: sha256WithRSAEncryption
db:43:c3:dc:94:7d:b0:36:5c:e9:86:8e:ea:1e:2c:b7:bf:56:
22:01:bc:96:de:bc:59:8c:88:4a:c4:55:f1:3f:ac:65:00:9e:
76:2b:d4:f5:0e:40:a8:b3:18:ed:c2:38:8b:4c:d4:4b:b2:9d:
fd:45:d8:8f:26:19:b3:89:0e:65:9e:66:2a:5a:49:10:39:84:
92:34:a9:55:fe:35:ca:71:ea:07:e5:40:f1:17:48:da:05:83:
b9:02:8b:d7:22:8a:17:38:07:24:b7:f6:e4:42:0a:94:32:fb:
a1:11:9d:24:7e:93:f9:3f:fd:99:15:b2:74:49:2e:c5:9f:fa:
d4:8b:da:7e:8a:63:b5:52:f3:bd:d2:98:e4:de:3c:b2:51:dd:
7d:6a:7f:3a:df:c7:2b:76:ad:74:27:d3:a9:ff:3b:bd:88:9e:
fd:b8:77:b8:9c:a3:5d:2e:6f:01:01:8a:c6:88:60:81:21:de:
cb:e9:8f:68:db:b7:78:74:aa:eb:37:a7:25:61:38:d5:36:7c:
47:db:8b:3c:26:d8:10:df:3c:42:04:9c:94:d9:df:2c:31:eb:
90:60:7b:75:93:07:c1:0f:c5:47:c1:38:33:d5:b6:3e:e2:bd:
a7:3d:d2:e9:a4:c0:40:01:fd:75:e4:96:ea:81:7b:d0:a4:aa:
f3:b9:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:16:04 2026 by rpki-client