Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/9bNRaw3fJePqSoFpFb9fkhvB3w0.roa
File: 9bNRaw3fJePqSoFpFb9fkhvB3w0.roa (raw, json)
Hash identifier: NMCqX5826orljVpeuCIS4wR2JPbSIl7lA2moY6G4P8o=
Subject key identifier: F5:B3:51:6B:0D:DF:25:E3:EA:4A:81:69:15:BF:5F:92:1B:C1:DF:0D
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019FA78943551EFF943945B8AAE60553915B
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/9bNRaw3fJePqSoFpFb9fkhvB3w0.roa
Signing time: Tue 28 Jul 2026 07:03:38 +0000
ROA not before: Tue 28 Jul 2026 07:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 9.151.240.0/21 maxlen: 21
9.232.16.0/21 maxlen: 21
9.232.28.0/22 maxlen: 22
9.233.48.0/20 maxlen: 20
9.233.120.0/21 maxlen: 21
135.132.0.0/19 maxlen: 24
135.132.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:89:43:55:1e:ff:94:39:45:b8:aa:e6:05:53:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 28 07:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5b3516b0ddf25e3ea4a816915bf5f921bc1df0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:ee:1b:1b:b5:f5:5a:c0:ac:7c:5c:44:1e:
6b:29:f8:ca:5a:87:7e:cc:37:be:a5:d1:59:0c:48:
d8:34:68:eb:54:4e:df:0e:be:8b:8a:c1:dd:ba:60:
83:84:bb:d5:81:72:c4:02:66:19:b4:2e:15:0f:51:
98:6a:03:86:a6:9c:80:cb:c4:d0:cf:c6:54:22:a3:
4d:39:74:72:a8:ef:0f:81:6f:d2:d0:62:a6:60:45:
f4:16:36:2b:fe:7d:f0:41:93:ed:06:7a:7b:3b:6d:
b7:9b:76:2b:dd:c3:72:b4:0e:71:ac:01:41:a2:44:
09:f5:8b:c6:a5:0a:4b:e4:84:57:fd:82:27:66:d9:
70:17:15:0b:cd:2f:25:24:8a:70:db:34:c3:d9:6e:
fc:ca:ac:c8:b8:a7:2d:6a:d0:87:85:15:b1:9e:a2:
05:e5:7d:91:94:33:f8:92:6e:88:1f:d8:3f:48:b1:
17:b6:29:67:c1:48:c0:5b:fb:74:f6:f6:bd:7e:16:
99:c6:80:2b:3c:6f:6a:3a:e3:e9:39:67:31:08:a3:
81:13:35:49:f9:4c:16:27:72:65:7d:8b:b1:22:b8:
89:54:7f:38:2a:83:91:78:25:f9:a0:38:fb:fb:e7:
1f:7a:7e:ce:ba:03:eb:78:2d:fe:be:d9:94:7c:9b:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:51:6B:0D:DF:25:E3:EA:4A:81:69:15:BF:5F:92:1B:C1:DF:0D
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/9bNRaw3fJePqSoFpFb9fkhvB3w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.240.0/21
9.232.16.0/21
9.232.28.0/22
9.233.48.0/20
9.233.120.0/21
135.132.0.0/19
135.132.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:ac:f6:54:3d:c1:09:94:06:4b:6c:0c:7e:f2:44:dc:39:50:
f0:75:27:5e:82:d6:d1:4b:52:35:f3:08:d4:61:be:83:b0:3e:
96:c5:a0:57:6b:94:97:73:81:9b:bd:4e:af:e8:69:c1:93:f3:
d4:ef:de:66:b9:b3:85:de:94:01:b2:f5:62:6c:16:74:1c:68:
c9:fa:69:22:02:47:08:ee:62:4a:23:22:2e:6f:f1:17:d7:4f:
92:b0:cb:b0:8f:9b:47:a7:b1:51:9e:f1:29:d6:5f:6c:6b:75:
37:3f:b2:b1:ef:a5:23:af:f1:36:fa:0a:8b:9f:c7:9a:aa:b8:
00:1e:6d:94:08:aa:77:3c:d1:d8:45:dc:13:15:c4:5e:cc:fc:
7c:d3:aa:5c:03:94:65:65:96:cf:fe:52:a1:ba:6f:ff:84:eb:
cd:e0:51:c6:93:92:48:9f:2d:ac:4d:c6:f8:2f:43:47:31:5e:
99:54:a1:d0:4a:93:97:3d:02:f0:47:42:c3:7c:96:27:62:66:
42:47:fe:88:1e:06:eb:5c:43:86:e5:e4:8c:88:9b:c2:a1:e3:
0d:9a:c3:a5:51:9b:39:e2:d8:62:96:8c:7f:0b:d7:56:1f:ad:
9e:71:92:ec:95:54:a8:ee:b0:20:a3:f3:0f:20:28:d6:f8:43:
e2:57:9b:f5
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ+niUNVHv+UOUW4quYFU5FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwNzI4MDcwMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWIzNTE2YjBkZGYyNWUzZWE0YTgxNjkxNWJmNWY5MjFiYzFkZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ7uGxu19VrArHxcRB5rKfjKWod+
zDe+pdFZDEjYNGjrVE7fDr6LisHdumCDhLvVgXLEAmYZtC4VD1GYagOGppyAy8TQ
z8ZUIqNNOXRyqO8PgW/S0GKmYEX0FjYr/n3wQZPtBnp7O223m3Yr3cNytA5xrAFB
okQJ9YvGpQpL5IRX/YInZtlwFxULzS8lJIpw2zTD2W78yqzIuKctatCHhRWxnqIF
5X2RlDP4km6IH9g/SLEXtilnwUjAW/t09va9fhaZxoArPG9qOuPpOWcxCKOBEzVJ
+UwWJ3JlfYuxIriJVH84KoOReCX5oDj7++cfen7OugPreC3+vtmUfJvWGQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPWzUWsN3yXj6kqBaRW/X5Ibwd8NMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvOWJOUmF3M2ZKZVBxU29GcEZiOWZraHZCM3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDCZfwAwQD
CegQAwQCCegcAwQECekwAwQDCel4AwQFh4QAAwQFh4RgMA0GCSqGSIb3DQEBCwUA
A4IBAQArrPZUPcEJlAZLbAx+8kTcOVDwdSdegtbRS1I18wjUYb6DsD6WxaBXa5SX
c4GbvU6v6GnBk/PU795mubOF3pQBsvVibBZ0HGjJ+mkiAkcI7mJKIyIub/EX10+S
sMuwj5tHp7FRnvEp1l9sa3U3P7Kx76Ujr/E2+gqLn8eaqrgAHm2UCKp3PNHYRdwT
FcRezPx806pcA5RlZZbP/lKhum//hOvN4FHGk5JIny2sTcb4L0NHMV6ZVKHQSpOX
PQLwR0LDfJYnYmZCR/6IHgbrXEOG5eSMiJvCoeMNmsOlUZs54thilox/C9dWH62e
cZLslVSo7rAgo/MPICjW+EPiV5v1
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:19 2026 by rpki-client