Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/V9T0hlZ73UkhAau7M6ckTYNUkb4.roa
File: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (raw, json)
Hash identifier: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=
Subject key identifier: 57:D4:F4:86:56:7B:DD:49:21:01:AB:BB:33:A7:24:4D:83:54:91:BE
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019D728D0EDD10453E6D9A81CC6222C82D0B
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/V9T0hlZ73UkhAau7M6ckTYNUkb4.roa
Signing time: Thu 09 Apr 2026 14:02:20 +0000
ROA not before: Thu 09 Apr 2026 14:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 82.206.4.0/22 maxlen: 24
82.206.8.0/23 maxlen: 24
82.206.16.0/22 maxlen: 24
82.206.72.0/21 maxlen: 21
82.206.76.0/22 maxlen: 22
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:8d:0e:dd:10:45:3e:6d:9a:81:cc:62:22:c8:2d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Apr 9 14:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57d4f486567bdd492101abbb33a7244d835491be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:b7:1d:62:5f:02:dd:1a:ce:0f:24:b8:b2:
7e:35:ec:d0:a8:ab:9e:2a:0c:8b:f5:de:8a:bf:80:
c8:05:f5:a8:a2:40:91:0d:f9:0b:64:6d:04:d6:88:
da:96:e5:67:c6:06:bb:d7:a7:55:a5:15:db:cb:c5:
83:ea:7b:c5:ac:40:85:63:1a:4a:59:e4:7a:d8:9e:
0f:29:cb:07:ac:89:9e:3a:a4:be:70:3d:f6:60:18:
a0:e9:14:b8:5f:d9:3b:38:a0:61:ca:c9:d3:b1:3d:
75:08:c9:41:33:c8:d0:b9:dc:f6:82:0a:c4:81:88:
a1:98:e5:5c:56:bc:76:d6:85:22:d1:5b:7c:9f:e1:
40:92:67:5c:56:7a:e8:cb:0a:c6:5a:36:da:54:f0:
d0:35:ee:5c:aa:ef:26:3a:c1:0a:4e:a4:95:42:79:
6c:46:f6:6d:08:e7:47:17:76:31:66:88:7b:df:84:
85:a7:c4:1b:92:c5:41:fb:f1:cf:c8:6f:34:9b:ec:
21:51:91:06:0d:f1:43:45:da:93:d1:f0:d5:ce:f0:
ab:de:73:4e:11:e5:3e:ed:44:ff:6d:e7:a2:c3:4c:
2b:b6:4c:88:b0:89:2e:d0:0b:e6:cd:de:1f:95:62:
19:9d:a4:30:e7:f4:03:69:22:88:d2:31:7f:b5:3e:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:F4:86:56:7B:DD:49:21:01:AB:BB:33:A7:24:4D:83:54:91:BE
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/V9T0hlZ73UkhAau7M6ckTYNUkb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.4.0-82.206.9.255
82.206.16.0/22
82.206.72.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
1c:26:05:bf:2d:3c:71:43:59:65:ef:8a:1d:43:6e:3e:4b:a7:
af:12:49:47:e0:ec:d5:28:62:80:5d:80:89:de:5a:2b:14:71:
ac:30:4a:6e:ca:1e:cb:64:7c:e6:b4:98:17:8f:0d:a2:c0:2f:
93:b2:cc:b4:89:a5:60:60:a9:3c:df:db:f5:de:14:d1:ce:f3:
c8:e8:2f:5e:f4:93:da:38:cb:95:ea:29:8c:31:57:1b:cc:81:
48:18:69:ef:7b:0b:0a:48:86:99:43:c5:40:ba:47:f4:b0:0e:
2a:48:ce:e1:c4:eb:04:63:d7:d0:ab:3c:d4:63:e1:dd:fc:c9:
6a:04:2d:0f:0d:ee:ef:f5:e4:25:db:c4:7c:c5:33:94:66:99:
1c:dc:60:6d:40:a6:f2:e7:93:1e:ce:ce:a5:5e:e6:f2:0c:83:
5c:7f:69:dd:e1:cb:64:10:8f:d0:ba:bf:a6:d0:c5:df:50:0b:
1d:76:5b:0e:6c:7c:04:77:57:91:96:74:22:34:39:33:ee:ec:
7b:9c:f2:ba:b4:fc:6e:09:a1:02:9c:1a:ee:4f:ca:27:07:cd:
ad:50:60:c1:98:29:c5:2b:be:d8:98:df:3c:79:36:fa:c3:2a:
e2:e2:26:78:7e:bb:f7:2c:e9:39:f4:96:0d:42:be:44:7f:4e:
14:c7:89:46
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ1yjQ7dEEU+bZqBzGIiyC0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYwNDA5MTQwMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Q0ZjQ4NjU2N2JkZDQ5MjEwMWFiYmIzM2E3MjQ0ZDgzNTQ5MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZq3HWJfAt0azg8kuLJ+NezQqKue
KgyL9d6Kv4DIBfWookCRDfkLZG0E1ojaluVnxga716dVpRXby8WD6nvFrECFYxpK
WeR62J4PKcsHrImeOqS+cD32YBig6RS4X9k7OKBhysnTsT11CMlBM8jQudz2ggrE
gYihmOVcVrx21oUi0Vt8n+FAkmdcVnroywrGWjbaVPDQNe5cqu8mOsEKTqSVQnls
RvZtCOdHF3YxZoh734SFp8QbksVB+/HPyG80m+whUZEGDfFDRdqT0fDVzvCr3nNO
EeU+7UT/beeiw0wrtkyIsIku0Avmzd4flWIZnaQw5/QDaSKI0jF/tT7gtQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFfU9IZWe91JIQGruzOnJE2DVJG+MB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvVjlUMGhsWjczVWtoQWF1N002Y2tUWU5Va2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAJSzgQD
BAFSzggDBAJSzhAwDAMEA1LOSAMEB1LOADANBgkqhkiG9w0BAQsFAAOCAQEAHCYF
vy08cUNZZe+KHUNuPkunrxJJR+Ds1ShigF2Aid5aKxRxrDBKbsoey2R85rSYF48N
osAvk7LMtImlYGCpPN/b9d4U0c7zyOgvXvST2jjLleopjDFXG8yBSBhp73sLCkiG
mUPFQLpH9LAOKkjO4cTrBGPX0Ks81GPh3fzJagQtDw3u7/XkJdvEfMUzlGaZHNxg
bUCm8ueTHs7OpV7m8gyDXH9p3eHLZBCP0Lq/ptDF31ALHXZbDmx8BHdXkZZ0IjQ5
M+7se5zyurT8bgmhApwa7k/KJwfNrVBgwZgpxSu+2JjfPHk2+sMq4uImeH679yzp
OfSWDUK+RH9OFMeJRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:39 2026 by rpki-client