Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa
File: K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa (raw, json)
Hash identifier: mz9IbH2TcauzEdRTkvsk6aZrHNIPGk0qBoIBNHpM3I4=
Subject key identifier: 2B:DA:AB:64:14:7F:7E:69:B8:78:A5:43:87:99:A0:03:18:0A:52:30
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019C481A6A2A03DF0B1999157F62FBF490C0
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa
Signing time: Tue 10 Feb 2026 15:10:16 +0000
ROA not before: Tue 10 Feb 2026 15:10:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59455
IP address blocks: 194.147.241.0/24 maxlen: 24
194.147.244.0/24 maxlen: 24
194.147.255.0/24 maxlen: 24
194.149.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:1a:6a:2a:03:df:0b:19:99:15:7f:62:fb:f4:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Feb 10 15:10:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bdaab64147f7e69b878a5438799a003180a5230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:25:22:68:61:14:ef:7a:88:d8:c7:db:12:
5b:89:44:89:22:03:97:c6:80:26:1e:91:ad:4a:4b:
b7:93:b2:bd:33:1a:c2:dd:63:cf:41:19:a6:cd:2c:
e3:71:d0:91:94:e6:82:d3:62:e9:14:3e:ae:cc:d6:
fc:b2:6d:c0:01:f0:dd:df:18:cc:ad:13:02:ab:1b:
a8:df:b0:a8:a9:45:ec:ff:49:fc:2a:52:f4:d5:de:
04:95:24:f8:b9:38:0b:9e:bc:38:01:aa:28:c4:64:
02:4b:83:0d:61:ad:61:80:7e:9c:0a:89:85:fe:f0:
58:b4:e9:51:26:cb:36:6f:68:64:d3:f8:65:ee:47:
fb:79:2d:27:d5:ad:64:e9:fb:23:d9:bd:ee:0d:e3:
ea:05:de:a6:e9:63:36:a9:7b:96:d2:3c:e1:ee:c6:
9c:e8:51:c9:e7:f0:64:bb:e8:9b:67:42:57:0b:5d:
a9:56:ec:71:d1:d7:8f:14:4d:c4:22:cb:7b:f9:fd:
fb:b2:5d:14:64:6a:f9:6c:2a:2b:66:17:94:6f:82:
d1:5e:5e:1a:8b:0b:4d:76:63:62:a5:56:5b:49:78:
7d:dd:fa:65:3f:96:4d:36:5a:3d:51:a2:40:44:b6:
f1:63:72:7c:24:66:94:31:11:9e:33:21:69:51:40:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:AB:64:14:7F:7E:69:B8:78:A5:43:87:99:A0:03:18:0A:52:30
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.241.0/24
194.147.244.0/24
194.147.255.0/24
194.149.89.0/24
Signature Algorithm: sha256WithRSAEncryption
64:df:81:9c:b2:d9:13:e6:76:1c:3e:7c:85:85:33:d4:b2:20:
ca:32:39:21:d0:ef:00:bf:ef:48:3b:31:9a:6b:e2:b0:32:19:
e4:fe:92:41:c8:97:2b:c0:b5:7f:70:3d:05:58:3c:33:e5:9c:
9e:b3:7e:9a:f7:a4:50:4a:48:be:d8:23:00:fb:d7:b4:51:3a:
25:96:6d:51:fa:f8:32:26:68:9b:8f:f9:2a:06:ec:52:3d:a2:
69:76:d0:28:ad:ea:ce:89:e3:54:d6:c9:78:ed:e9:7e:c2:20:
e1:af:4b:6c:31:d7:d8:09:34:b1:ac:77:38:7f:20:4b:6c:1f:
81:de:09:6b:e5:9d:7c:e7:64:81:f1:69:3d:53:f8:54:cb:19:
30:20:43:ee:a5:51:e9:74:ef:4d:a8:bf:9b:26:c5:77:ce:c7:
9e:e1:7f:c4:e2:c6:8e:86:9b:21:bb:d4:24:ac:26:53:57:c0:
dc:d7:cf:c3:5a:65:b2:b1:ca:f3:ff:49:2f:21:b6:5b:c2:e3:
3c:9f:b8:92:9f:8b:d9:90:ac:25:9b:32:41:d0:8c:dc:7c:93:
0e:74:eb:a6:67:cf:0e:d3:f7:53:be:ee:9b:4c:3e:31:44:80:
ac:7e:fb:87:16:40:c9:30:2d:c1:90:33:0b:d9:3c:06:41:48:
44:f2:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:22 2026 by rpki-client