Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/9Jm99UXcqPRq8OxdnEb6zi_aR8o.roa
File: 9Jm99UXcqPRq8OxdnEb6zi_aR8o.roa (raw, json)
Hash identifier: GY9WqnOMNWsURSj0hWz57Qy0Df2wIczJjVYdicJBrfI=
Subject key identifier: F4:99:BD:F5:45:DC:A8:F4:6A:F0:EC:5D:9C:46:FA:CE:2F:DA:47:CA
Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial: 019B7D5CD8338C60FCB33C80CAD26A952EEE
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/9Jm99UXcqPRq8OxdnEb6zi_aR8o.roa
Signing time: Fri 02 Jan 2026 06:19:55 +0000
ROA not before: Fri 02 Jan 2026 06:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203904
IP address blocks: 185.118.44.0/24 maxlen: 24
185.118.45.0/24 maxlen: 24
185.118.46.0/24 maxlen: 24
185.118.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:d8:33:8c:60:fc:b3:3c:80:ca:d2:6a:95:2e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Validity
Not Before: Jan 2 06:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f499bdf545dca8f46af0ec5d9c46face2fda47ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:50:1a:fa:99:47:12:1a:5b:8f:98:8f:24:
73:f2:9c:36:4d:7f:1a:f5:1f:0c:4c:95:05:6f:f2:
61:a6:d7:4c:f5:63:e8:7b:dc:79:12:04:f8:9f:8e:
b5:2e:0f:8c:e8:c0:1d:e4:95:18:dc:8a:ec:6e:7d:
00:64:9a:a4:be:34:51:7f:23:4e:af:45:29:68:20:
b0:be:7a:cf:79:b6:fe:2d:69:e2:87:f1:38:6c:51:
9c:0c:03:71:e5:a8:29:c0:9e:b0:ee:3a:9b:45:b6:
26:a2:84:4c:a8:99:3d:34:73:95:5d:3a:be:88:cd:
34:ea:20:db:ee:01:50:59:e1:74:ed:be:33:82:cb:
0f:60:4c:e5:a7:d9:cb:86:fe:b8:e5:5b:2f:12:43:
06:06:6c:d2:67:0e:7c:89:df:d6:d5:0e:03:23:c3:
86:53:57:4f:69:2c:e3:3d:26:92:75:d4:7a:f3:48:
13:c2:ba:69:f9:23:0f:96:b9:07:98:68:b3:fd:f4:
b3:81:29:57:09:82:66:00:bc:74:71:ec:24:af:b0:
4a:18:a6:0c:dc:11:9c:ea:b9:de:be:bf:09:a6:46:
de:a1:08:24:08:72:24:b4:6f:60:68:fe:3d:62:8a:
19:66:03:c2:13:0e:16:70:5c:68:04:06:a4:ad:57:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:BD:F5:45:DC:A8:F4:6A:F0:EC:5D:9C:46:FA:CE:2F:DA:47:CA
X509v3 Authority Key Identifier:
keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/9Jm99UXcqPRq8OxdnEb6zi_aR8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c2:b7:e1:ca:ac:67:39:03:97:1f:53:a0:8e:9c:67:f7:0f:
28:eb:9a:e5:01:96:21:75:b3:f0:67:b1:91:56:c2:90:2c:cc:
1f:47:0c:c0:b6:b3:49:99:a1:90:86:5a:53:34:8d:b4:30:0e:
7e:14:10:07:c8:4e:5c:92:39:0d:9a:74:dd:34:cb:db:4d:34:
ea:13:9c:30:98:28:6a:dd:57:e1:7b:93:0c:d4:d7:97:54:b9:
af:6b:0b:fb:78:8b:2a:bf:51:a7:56:ac:40:d8:08:b5:12:26:
cf:87:b9:c9:0f:c2:01:17:75:72:f5:16:7f:37:00:1e:97:8e:
8c:90:be:dc:40:a0:34:1d:3b:9b:ff:58:d2:20:5b:57:61:c6:
a9:5d:13:2b:48:a8:12:2f:3e:dd:79:35:d4:28:5f:44:11:d6:
e1:0c:4e:8e:69:11:ce:de:56:0e:8f:57:e4:de:67:85:95:0d:
c5:a1:25:ba:f5:37:0b:5d:be:14:2a:29:8f:b9:23:5b:8d:0a:
0f:81:0d:db:a6:98:9a:89:02:90:14:96:bf:51:88:b7:f0:ae:
b3:29:68:b4:37:95:1c:22:5e:7e:c5:f3:44:a8:6d:54:08:0c:
72:b0:11:4e:1a:ac:7e:1c:d7:c7:04:ff:a8:cf:e8:7a:fb:22:
86:75:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:44 2026 by rpki-client