Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/9S-B0D9lnDF21-usrbJC4P6zxPM.roa
File: 9S-B0D9lnDF21-usrbJC4P6zxPM.roa (raw, json)
Hash identifier: ZnhdVeDDKZrqSSXA3q/cojKHxXaNDDWFxkadx20lHYg=
Subject key identifier: F5:2F:81:D0:3F:65:9C:31:76:D7:EB:AC:AD:B2:42:E0:FE:B3:C4:F3
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019FA909D5004FE1E1E8B42A7784AFA64C64
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/9S-B0D9lnDF21-usrbJC4P6zxPM.roa
Signing time: Tue 28 Jul 2026 14:03:41 +0000
ROA not before: Tue 28 Jul 2026 14:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 91.232.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:09:d5:00:4f:e1:e1:e8:b4:2a:77:84:af:a6:4c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jul 28 14:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f52f81d03f659c3176d7ebacadb242e0feb3c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:a5:65:bf:07:61:bb:e1:f4:3e:a8:d0:b9:
8a:b3:f5:9a:96:cc:b1:d0:e3:a1:b5:0c:e3:05:25:
55:ae:f0:27:43:bc:a5:fb:ef:4b:a4:a4:7d:de:33:
8e:37:9a:16:57:01:ce:0f:9d:5b:20:b6:d3:80:5a:
2d:ff:f9:e9:1c:07:78:3f:7b:f7:e0:e3:10:97:dc:
3b:0e:31:df:8b:77:2e:1c:4a:00:12:f4:b4:bf:1c:
ad:c8:30:65:20:5f:ce:31:5f:88:3e:08:d9:0f:af:
e8:ca:fb:9c:e1:1e:39:4b:91:7c:e6:78:23:27:66:
87:29:67:34:fc:11:b5:14:c5:86:13:30:05:91:31:
18:ac:0d:ec:6f:54:f6:0c:4c:40:5a:8a:61:ec:58:
82:54:1b:c3:6a:32:ae:63:b8:95:d6:f3:12:64:c0:
78:9d:56:2b:47:5b:0e:cf:7e:15:5a:7f:02:be:06:
02:6f:5b:36:66:30:aa:d5:b9:b3:3b:04:ba:af:a3:
d8:de:50:f6:9f:03:7c:69:c8:cb:d2:e6:89:55:a4:
a5:10:7a:ed:38:a2:b6:af:a1:bb:92:00:6e:f0:93:
9f:bb:64:fa:55:6b:7b:64:59:ab:13:a5:db:70:da:
59:4f:aa:32:ef:c2:85:d6:86:96:ee:e7:e4:79:d2:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:81:D0:3F:65:9C:31:76:D7:EB:AC:AD:B2:42:E0:FE:B3:C4:F3
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/9S-B0D9lnDF21-usrbJC4P6zxPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.73.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e4:d3:44:89:4c:01:c2:4d:5b:7e:4f:6a:3a:34:47:6c:3b:
a3:11:ee:25:f3:94:82:55:2c:80:6d:4f:74:25:7f:17:b0:25:
f9:36:0d:47:bd:e7:1b:0d:3d:51:33:e1:9f:03:8c:e8:f7:64:
4f:79:8c:4a:78:29:3b:6f:e6:5d:93:23:70:55:15:9c:ca:83:
64:40:5d:74:3f:ad:a8:8b:00:16:21:9f:13:81:2e:29:1d:e7:
05:a4:61:3a:7e:50:27:3c:45:c5:37:75:1e:e0:63:95:17:07:
66:ca:09:c3:f8:10:fc:10:56:83:3d:a0:33:5c:6c:3c:51:76:
8d:27:4f:d3:08:d9:cc:bf:b8:d4:70:27:f5:86:75:f3:f1:8e:
f8:2c:41:a0:a8:90:23:ae:c3:0c:d5:8b:60:4e:b7:bb:b6:87:
90:f6:2f:a9:3f:56:ef:70:bc:64:97:4a:be:b6:d4:74:c6:2d:
60:e4:76:a3:a9:6a:a4:fa:91:41:fe:67:f1:f2:9e:da:79:6e:
48:f3:cd:d1:e7:55:b7:ce:41:50:b1:03:37:e8:f6:ca:0d:c2:
44:51:22:9c:7d:cf:88:90:41:ae:39:2d:f0:02:c3:ed:14:8b:
d8:5d:27:5e:29:20:bd:6e:3d:bd:d2:5a:95:d8:ff:21:a9:34:
9b:5c:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:45 2026 by rpki-client