Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/k9Cl5u4bs5wBS1KHqPaFfRdsRuc.roa
File: k9Cl5u4bs5wBS1KHqPaFfRdsRuc.roa (raw, json)
Hash identifier: eibrLWsTR+PJbSyNkh/sSUXNCKzcxsLF20E5vrzpgBc=
Subject key identifier: 93:D0:A5:E6:EE:1B:B3:9C:01:4B:52:87:A8:F6:85:7D:17:6C:46:E7
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019C6BA4DEB4E946A8F737C35FE838E47995
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/k9Cl5u4bs5wBS1KHqPaFfRdsRuc.roa
Signing time: Tue 17 Feb 2026 12:48:12 +0000
ROA not before: Tue 17 Feb 2026 12:48:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 66.45.17.0/24 maxlen: 32
66.45.61.0/24 maxlen: 32
66.45.63.0/24 maxlen: 32
66.179.99.0/24 maxlen: 32
66.179.207.0/24 maxlen: 32
66.179.213.0/24 maxlen: 32
66.179.247.0/24 maxlen: 32
67.202.232.0/24 maxlen: 32
69.48.213.0/24 maxlen: 32
69.164.87.0/24 maxlen: 32
69.164.96.0/24 maxlen: 32
74.205.245.0/24 maxlen: 32
108.60.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:a4:de:b4:e9:46:a8:f7:37:c3:5f:e8:38:e4:79:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Feb 17 12:48:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93d0a5e6ee1bb39c014b5287a8f6857d176c46e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:d6:78:aa:10:aa:6f:09:0b:de:fa:31:b3:
9e:49:52:dd:81:b5:07:26:21:f6:e6:da:1a:c6:ae:
02:3b:f9:a5:6d:9d:92:89:d2:bd:83:01:3e:b5:ee:
c6:37:49:e6:d9:c4:67:00:d5:69:65:fb:0c:b3:18:
ad:c6:29:98:2a:29:0f:1b:d5:06:7b:55:7d:3d:1e:
0b:c6:92:c2:84:d2:57:93:be:db:ef:23:e6:ca:6e:
28:50:70:bc:83:e2:3d:00:49:e5:83:34:c1:2b:6e:
ed:bb:44:df:d8:1f:15:d1:7f:a2:44:46:a6:a9:1a:
27:07:c2:0e:2a:3b:2d:2b:b5:7e:56:40:63:90:21:
bd:e1:30:51:93:3a:dc:5e:de:00:bb:cb:6c:84:7f:
2f:1f:f6:67:e3:d0:5c:eb:9c:e3:f0:fa:3d:ba:2b:
92:2f:8b:56:e4:90:03:dc:b6:89:4a:a3:56:f3:cb:
4c:8e:dd:b9:7a:4b:68:65:cc:5a:e6:52:d0:22:d2:
a6:7b:83:c2:d2:81:aa:ef:98:c1:17:78:21:37:2c:
c7:2b:11:89:b6:60:38:2a:76:d9:b2:61:8b:07:42:
3b:44:20:94:cd:0e:e4:e2:ae:70:70:2e:96:c4:70:
2e:ef:c9:8b:b3:42:00:1b:5a:51:5b:ea:70:1b:34:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:A5:E6:EE:1B:B3:9C:01:4B:52:87:A8:F6:85:7D:17:6C:46:E7
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/k9Cl5u4bs5wBS1KHqPaFfRdsRuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.45.17.0/24
66.45.61.0/24
66.45.63.0/24
66.179.99.0/24
66.179.207.0/24
66.179.213.0/24
66.179.247.0/24
67.202.232.0/24
69.48.213.0/24
69.164.87.0/24
69.164.96.0/24
74.205.245.0/24
108.60.0.0/20
Signature Algorithm: sha256WithRSAEncryption
72:fa:88:e5:88:9a:78:a9:1a:79:87:27:bf:05:d9:74:e2:1e:
0c:2f:28:f3:e0:e9:f6:67:c1:b3:20:e6:c9:e3:d6:47:7a:68:
d0:0c:0f:d5:cf:46:f7:e2:b2:44:d9:ae:40:6e:e2:56:aa:34:
9c:57:5e:48:11:d4:77:48:61:d6:e8:fd:a3:2a:e0:33:e0:f8:
dd:e3:3f:8c:7d:92:4a:fd:d0:bf:70:bd:fb:0a:89:29:33:29:
db:fb:b4:dd:4e:e9:57:56:f4:2a:35:11:24:9d:e8:01:6f:09:
e0:6e:3f:17:db:db:34:ef:3d:d8:ea:62:c7:c0:74:db:5c:a0:
0c:6d:69:e0:73:03:8a:22:9c:7e:19:90:a6:63:69:71:44:83:
bf:06:c8:d9:73:a2:ac:49:1a:37:7e:89:54:de:63:96:92:7d:
1f:76:01:17:9d:6a:98:90:03:9f:7b:a8:b0:73:94:f1:ba:66:
a9:c4:5b:13:c3:13:df:cf:7d:cc:aa:53:a1:bc:26:c3:8c:39:
a6:47:9e:9d:cd:a9:0d:f6:87:87:d0:eb:38:63:46:6e:3f:3c:
53:d2:a5:24:18:b7:90:ee:86:c7:52:34:5c:d8:cc:de:50:4e:
f2:27:f7:b9:cc:25:1f:62:85:5a:bd:68:e5:50:91:77:ec:ea:
c4:c2:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:57 2026 by rpki-client