Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/rN9h_mo4r9s5UTguLdOSFdhPSnI.roa
File: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (raw, json)
Hash identifier: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=
Subject key identifier: AC:DF:61:FE:6A:38:AF:DB:39:51:38:2E:2D:D3:92:15:D8:4F:4A:72
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019D90A3C0BEE8C412AAB6A4E805BC50753E
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/rN9h_mo4r9s5UTguLdOSFdhPSnI.roa
Signing time: Wed 15 Apr 2026 10:15:43 +0000
ROA not before: Wed 15 Apr 2026 10:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215428
IP address blocks: 85.137.252.0/24 maxlen: 24
85.137.253.0/24 maxlen: 24
207.89.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:a3:c0:be:e8:c4:12:aa:b6:a4:e8:05:bc:50:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Apr 15 10:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acdf61fe6a38afdb3951382e2dd39215d84f4a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:de:00:39:53:a0:1b:17:bf:74:5d:7c:0e:
d7:36:57:92:41:ed:3a:d5:a9:15:f9:a9:2a:bc:53:
56:c8:2a:2d:c2:22:4d:11:93:6f:5e:fd:44:66:bb:
39:85:07:6a:83:5b:0c:37:7f:8f:55:34:25:15:fe:
bc:5f:ff:b7:c3:49:d9:55:76:ec:74:86:95:2c:18:
7f:25:53:ea:88:ed:38:ed:06:27:ee:a5:c6:80:5a:
9d:31:db:7d:8f:c0:e1:a0:ad:42:35:e5:da:09:96:
09:d3:3e:f7:e2:91:5e:bf:17:df:7c:31:47:f9:a3:
bb:a7:70:34:f2:63:1e:a9:9c:45:03:12:e4:b0:6d:
69:86:3f:19:be:e2:80:eb:43:7c:fc:42:83:21:33:
a3:43:37:33:34:f4:b7:1a:46:1e:53:d7:9e:8f:8b:
01:d5:a1:fd:98:68:fd:c7:f0:78:76:46:0e:91:1b:
4e:c8:60:d1:a0:72:95:cd:4a:c9:c6:0f:92:e7:e5:
53:74:9c:bf:f3:3a:6a:7e:fc:0b:c6:d9:42:ef:b5:
cd:28:54:5b:89:1f:a7:bf:d3:d4:ed:c1:da:1a:2f:
7f:c8:67:65:42:59:74:56:16:ea:07:04:8e:60:30:
3f:2e:e7:dd:cb:e3:0a:ba:67:d1:e4:70:c4:b6:e4:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DF:61:FE:6A:38:AF:DB:39:51:38:2E:2D:D3:92:15:D8:4F:4A:72
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/rN9h_mo4r9s5UTguLdOSFdhPSnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.252.0/23
207.89.17.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0e:4c:d2:01:51:f6:ec:fb:89:d2:6c:21:7f:2e:29:da:71:
aa:7a:02:95:5b:e1:5c:ba:77:11:64:b9:7d:3f:78:92:73:d7:
48:03:b6:56:29:75:a9:8d:1f:e7:11:a3:09:28:30:51:7b:62:
17:41:47:40:43:6f:46:99:8c:8b:ba:fb:8e:fc:62:67:fd:ff:
9a:c6:63:27:96:22:69:6e:7c:0e:c8:0c:92:bd:bc:91:9f:5e:
ba:29:39:13:82:ab:4b:48:5a:14:c4:81:c4:9f:9e:cd:36:5a:
7f:72:49:e4:6d:22:b9:18:06:79:b5:84:b4:72:f6:fe:d5:50:
96:ef:8a:ff:68:b4:81:7e:14:6d:a6:f4:e4:a4:ee:9a:ca:11:
21:11:da:b3:97:03:ed:9c:1d:4c:10:e2:ad:7d:13:58:64:6e:
80:7a:41:af:46:ba:a4:81:76:dc:77:89:69:b8:10:30:0b:63:
b9:c2:40:1c:c9:f4:8a:f7:a4:f0:b0:58:2d:17:1d:5c:54:af:
fd:fd:4d:c9:79:b1:15:77:f2:7f:ed:a0:a4:39:58:3c:6f:ac:
37:c7:8a:ac:dd:7c:45:18:58:3f:57:b6:3e:93:0f:02:3f:93:
b7:21:22:49:ef:bd:4f:13:b6:cd:66:48:cd:3c:fd:ca:dc:d5:
87:ab:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:09 2026 by rpki-client