Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/l3fqaZsB4_H1HMAcNmfevsz9eOE.roa
File: l3fqaZsB4_H1HMAcNmfevsz9eOE.roa (raw, json)
Hash identifier: 8R5C/ZOerUz5pLtLrZj+pCh4bto+SzBzQOTIB/6mh3Y=
Subject key identifier: 97:77:EA:69:9B:01:E3:F1:F5:1C:C0:1C:36:67:DE:BE:CC:FD:78:E1
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A08126A4495AB8799D1F00E10A66938752
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/l3fqaZsB4_H1HMAcNmfevsz9eOE.roa
Signing time: Tue 08 Sep 2026 13:13:08 +0000
ROA not before: Tue 08 Sep 2026 13:13:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209505
IP address blocks: 89.33.9.0/24 maxlen: 24
185.250.8.0/22 maxlen: 22
185.250.8.0/24 maxlen: 24
185.250.9.0/24 maxlen: 24
185.250.10.0/23 maxlen: 23
195.10.233.0/24 maxlen: 24
2a0b:9400::/30 maxlen: 30
2a0b:9400:8::/48 maxlen: 48
2a0b:9400:1000::/48 maxlen: 48
2a0b:9401::/32 maxlen: 32
2a0b:9404::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:26:a4:49:5a:b8:79:9d:1f:00:e1:0a:66:93:87:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Sep 8 13:13:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9777ea699b01e3f1f51cc01c3667debeccfd78e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:5a:9d:44:4d:97:5a:3e:a0:c7:40:6c:5e:
f8:6a:c0:8f:db:f0:44:5f:8b:41:6f:83:f1:6a:4d:
f1:ac:7b:90:af:47:38:9e:c9:95:38:38:cf:41:cc:
28:d0:7e:f0:80:54:6d:78:7d:9d:85:e3:7c:ba:b1:
c7:ee:2a:b7:81:8b:8c:c9:c6:87:c8:3d:2a:d7:bf:
6b:d3:1d:30:46:7d:40:bb:9d:f6:a8:49:ce:9d:d6:
85:e3:f3:4a:99:83:ec:5b:ec:33:21:44:22:75:dc:
a1:b4:2f:1c:53:9a:99:fb:16:1f:f5:e9:c5:b3:95:
e4:3d:86:3a:67:6f:6f:20:be:6d:e0:72:ea:fa:1b:
7e:8a:72:3e:a2:c1:51:3b:79:88:f6:cc:88:d5:bd:
7b:91:a2:9b:2b:30:88:46:73:dc:cf:24:b2:07:0c:
bb:a3:41:f6:c2:41:38:19:1f:04:57:f6:75:a4:d2:
20:46:4f:74:33:fa:d7:c6:24:5d:c5:b3:30:10:c3:
56:73:0d:64:af:15:a5:b7:e2:0d:aa:7a:54:6a:60:
8d:78:8d:48:5d:a5:e6:0b:7c:9c:9d:0b:b9:78:64:
5a:d9:c0:e6:0a:db:78:5d:cd:58:7c:d4:03:b8:45:
ef:9c:77:0a:c3:fb:f3:83:96:89:5a:6a:1b:db:9a:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:EA:69:9B:01:E3:F1:F5:1C:C0:1C:36:67:DE:BE:CC:FD:78:E1
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/l3fqaZsB4_H1HMAcNmfevsz9eOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.9.0/24
185.250.8.0/22
195.10.233.0/24
IPv6:
2a0b:9400::-2a0b:9404:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:88:32:9f:63:08:e1:14:df:42:33:8f:46:4e:94:e7:a1:ac:
26:1e:15:df:ee:38:67:d9:05:6a:24:80:5b:66:9d:51:ff:96:
27:85:ad:c0:89:06:99:4d:a7:0d:93:51:99:1f:13:6a:a0:fb:
4b:cf:1c:0a:8b:48:70:ce:f1:92:df:96:8f:44:34:e7:ab:d2:
fc:6b:0d:f2:60:82:e4:d2:1e:19:b6:db:ab:dd:8a:9c:38:34:
4d:37:5f:e5:4d:26:f9:08:e0:54:17:ff:95:dc:ca:97:d9:66:
55:1d:1b:e3:a1:33:0f:e0:a3:ba:e8:a6:dc:1a:a7:e8:19:2e:
27:d9:52:04:87:6a:2d:60:d0:26:2e:a9:1c:b3:57:09:25:98:
b8:15:8f:e7:c0:7b:89:92:d6:a1:0e:7d:98:82:23:2e:4d:19:
e4:d5:ff:5e:e6:55:cc:87:d4:66:f1:79:ad:59:01:32:47:9b:
9f:11:06:49:90:21:d1:cd:13:88:39:ab:d7:26:ca:41:8c:46:
6d:29:ae:13:76:36:4f:c2:d6:bd:94:ce:2d:b9:a3:cc:5d:d9:
6e:d1:7c:fe:ed:bd:77:39:64:73:a8:9b:37:e6:04:0d:ab:ef:
d6:9d:26:a5:97:bf:48:d6:80:89:e6:bd:f1:21:3f:ef:9a:a5:
0a:c2:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:14 2026 by rpki-client