Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/9qAEHUby2kuUCMI19wdK7QIhAg8.roa
File: 9qAEHUby2kuUCMI19wdK7QIhAg8.roa (raw, json)
Hash identifier: j0PyiEMnRv/aYSZCH4c3fek9SvuRs8/liv5iE7aCOm0=
Subject key identifier: F6:A0:04:1D:46:F2:DA:4B:94:08:C2:35:F7:07:4A:ED:02:21:02:0F
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A06DD834BAE49287EC16BD8810DC4DAC95
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/9qAEHUby2kuUCMI19wdK7QIhAg8.roa
Signing time: Fri 04 Sep 2026 19:14:40 +0000
ROA not before: Fri 04 Sep 2026 19:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 212.66.48.0/24 maxlen: 24
212.66.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:d8:34:ba:e4:92:87:ec:16:bd:88:10:dc:4d:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 4 19:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6a0041d46f2da4b9408c235f7074aed0221020f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:0f:33:8e:cc:ad:b4:30:b0:9d:d4:8b:b5:
29:f2:6b:8f:a2:85:81:ba:50:0e:c1:a2:d3:68:4a:
80:db:c1:31:fc:21:00:db:e0:cf:49:80:93:c8:2a:
ed:17:61:22:ba:3c:fe:c5:29:66:6c:88:9d:0c:c8:
20:51:ac:20:23:61:de:3e:54:12:bd:d3:f9:61:41:
c5:a1:f7:43:4c:a9:ff:a9:ec:bb:2a:f5:53:d7:68:
55:50:7a:37:99:ea:11:76:36:01:62:31:23:0f:a8:
1e:32:9e:af:3c:75:34:02:73:6f:b5:1e:a7:fb:6a:
dd:34:95:db:1e:bd:62:c3:6f:ff:5d:14:3b:3f:0f:
eb:ed:02:f9:be:f6:bd:36:92:ff:e2:7a:3a:3e:ad:
7f:51:61:be:0e:7a:e5:a5:b9:2f:28:9a:85:86:71:
7d:bf:63:05:6e:53:0e:33:db:bd:3f:8b:87:08:2b:
f3:a7:bf:4f:db:74:d4:ff:b8:21:53:8e:07:a8:f7:
64:50:d4:4d:f9:ce:eb:7b:42:61:c5:8e:98:c1:fb:
8c:fa:07:ef:3f:54:f1:fe:70:bd:45:84:18:ca:8c:
a0:1d:4f:7a:83:f8:72:da:84:c2:ec:fb:61:59:fd:
aa:55:57:e7:f2:d4:67:0c:de:fc:46:95:b3:48:49:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:04:1D:46:F2:DA:4B:94:08:C2:35:F7:07:4A:ED:02:21:02:0F
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/9qAEHUby2kuUCMI19wdK7QIhAg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.48.0/24
212.66.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fe:6c:09:d2:2f:8d:c3:e2:b7:db:cb:cb:fb:76:18:de:14:
82:d1:aa:9b:cb:ef:82:52:8c:8d:e6:41:f7:01:e3:41:9a:62:
6f:d3:1b:ad:bb:d4:5c:54:ac:03:18:29:03:c9:59:8c:09:8a:
9e:01:29:e4:b6:00:1f:0a:d7:87:22:4b:ad:98:f6:32:da:93:
54:f5:d8:c1:8c:e4:d6:8d:9a:44:c2:a8:58:55:45:33:4b:b6:
25:5f:14:c5:97:92:63:58:52:44:9b:c4:1a:18:e3:11:5b:0b:
22:3e:8e:1f:59:82:4c:e6:8d:fb:3a:d5:a6:f1:53:c2:5f:d9:
67:79:a0:cb:c0:78:51:ab:66:ba:e3:cd:8b:b3:84:e7:c8:c7:
d9:56:73:9a:18:c9:4a:6c:de:75:7f:61:1d:57:35:2b:dd:26:
1f:20:a0:96:f1:83:b1:c5:62:7c:8a:c7:0a:79:62:10:90:7e:
f0:65:12:02:1f:e1:d9:b9:dd:ea:71:85:e2:2b:ae:ce:cd:a5:
ef:e7:fa:53:b0:5d:94:35:1d:18:d0:e8:af:7c:66:2a:47:1a:
a0:6a:15:96:8e:28:43:a1:e6:25:cb:61:41:6a:e3:f1:35:5a:
0b:67:8d:fa:c6:f4:4a:3d:e8:94:64:9d:69:16:87:d3:5c:d7:
5d:83:3b:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBt2DS65JKH7Ba9iBDcTayVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwOTA0MTkxNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmEwMDQxZDQ2ZjJkYTRiOTQwOGMyMzVmNzA3NGFlZDAyMjEwMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxccPM47MrbQwsJ3Ui7Up8muPooWB
ulAOwaLTaEqA28Ex/CEA2+DPSYCTyCrtF2Eiujz+xSlmbIidDMggUawgI2HePlQS
vdP5YUHFofdDTKn/qey7KvVT12hVUHo3meoRdjYBYjEjD6geMp6vPHU0AnNvtR6n
+2rdNJXbHr1iw2//XRQ7Pw/r7QL5vva9NpL/4no6Pq1/UWG+DnrlpbkvKJqFhnF9
v2MFblMOM9u9P4uHCCvzp79P23TU/7ghU44HqPdkUNRN+c7re0JhxY6YwfuM+gfv
P1Tx/nC9RYQYyoygHU96g/hy2oTC7PthWf2qVVfn8tRnDN78RpWzSEnWYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPagBB1G8tpLlAjCNfcHSu0CIQIPMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvOXFBRUhVYnkya3VVQ01JMTl3ZEs3UUloQWc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1EIwAwQA
1EIyMA0GCSqGSIb3DQEBCwUAA4IBAQAf/mwJ0i+Nw+K328vL+3YY3hSC0aqby++C
UoyN5kH3AeNBmmJv0xutu9RcVKwDGCkDyVmMCYqeASnktgAfCteHIkutmPYy2pNU
9djBjOTWjZpEwqhYVUUzS7YlXxTFl5JjWFJEm8QaGOMRWwsiPo4fWYJM5o37OtWm
8VPCX9lneaDLwHhRq2a6482Ls4TnyMfZVnOaGMlKbN51f2EdVzUr3SYfIKCW8YOx
xWJ8iscKeWIQkH7wZRICH+HZud3qcYXiK67OzaXv5/pTsF2UNR0Y0OivfGYqRxqg
ahWWjihDoeYly2FBauPxNVoLZ436xvRKPeiUZJ1pFofTXNddgzsO
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:39 2026 by rpki-client