Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/B_GEk0m49jzeik2gUGk6eYl3XKo.roa
File: B_GEk0m49jzeik2gUGk6eYl3XKo.roa (raw, json)
Hash identifier: UUs9N4HiRAcBgT2uZAZPV/YeTuvmU5eoAEs4wGLkz8k=
Subject key identifier: 07:F1:84:93:49:B8:F6:3C:DE:8A:4D:A0:50:69:3A:79:89:77:5C:AA
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A0A36F2D5F4C6FE96AF20CFD9862EC6AA3
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/B_GEk0m49jzeik2gUGk6eYl3XKo.roa
Signing time: Tue 15 Sep 2026 04:59:27 +0000
ROA not before: Tue 15 Sep 2026 04:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46635
IP address blocks: 9.151.192.0/20 maxlen: 20
9.151.232.0/22 maxlen: 22
9.232.24.0/22 maxlen: 22
9.232.76.0/22 maxlen: 22
9.233.96.0/20 maxlen: 20
9.249.100.0/22 maxlen: 22
9.249.176.0/20 maxlen: 20
138.226.16.0/20 maxlen: 20
138.226.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:6f:2d:5f:4c:6f:e9:6a:f2:0c:fd:98:62:ec:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 15 04:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07f1849349b8f63cde8a4da050693a7989775caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:23:5b:55:7b:ff:ca:e0:ce:ab:27:b4:89:
9d:24:f8:14:59:e5:a4:85:78:33:bd:83:3a:6f:df:
45:32:b2:0a:e3:1d:53:ec:a4:fe:c0:04:78:81:7f:
2b:e1:d4:46:6e:c2:ac:db:55:de:19:78:7d:5b:f7:
26:1c:be:82:57:24:24:99:19:75:d7:14:b2:60:05:
c5:d1:09:92:c4:02:3a:ec:1d:a7:f1:d7:58:22:7a:
8d:90:a9:37:f5:c5:fb:47:79:b9:7e:7d:87:88:1b:
c1:f4:c5:db:17:6a:ee:19:3b:a3:f9:34:e1:1f:12:
f9:74:e7:70:86:12:f3:a9:7e:d8:fa:f5:3d:bb:d1:
42:c3:04:1c:e3:f6:98:7b:2c:52:dc:c3:bd:1a:cb:
fd:a0:1e:13:e0:77:f5:dc:79:42:da:7e:af:ca:71:
1e:94:f6:1d:96:96:e5:0d:9c:d3:80:1e:18:5e:bb:
c3:72:78:54:bb:fd:e9:43:a4:81:1f:7a:86:fc:76:
c6:fe:9a:c0:51:78:39:f4:e8:7a:52:cf:89:fe:51:
ce:f9:f9:55:2e:55:e5:7d:55:a2:ff:2b:d0:67:1e:
e3:81:0a:ee:52:32:81:a0:e2:c0:4a:96:7f:d7:bb:
e1:29:26:cb:43:42:a4:23:aa:b6:39:a1:c4:67:f0:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F1:84:93:49:B8:F6:3C:DE:8A:4D:A0:50:69:3A:79:89:77:5C:AA
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/B_GEk0m49jzeik2gUGk6eYl3XKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.192.0/20
9.151.232.0/22
9.232.24.0/22
9.232.76.0/22
9.233.96.0/20
9.249.100.0/22
9.249.176.0/20
138.226.16.0/20
138.226.96.0/20
Signature Algorithm: sha256WithRSAEncryption
41:f4:7b:47:d9:4e:78:de:62:78:89:fe:ad:30:be:9b:e7:6a:
8a:ea:9c:ea:18:56:2d:e4:b4:fb:a5:4f:23:fb:41:5f:e5:9e:
94:73:3c:76:d8:e5:be:7d:ae:0b:24:f6:48:39:57:35:26:9d:
4f:17:f2:9f:d0:5a:4b:d1:82:3e:76:9d:62:58:df:e6:10:e0:
48:e9:7a:6f:03:d0:40:6a:a7:dd:3b:42:13:a2:b9:18:19:f5:
04:ba:60:d8:0a:8c:07:7a:9d:67:7c:40:23:7e:bd:00:d5:03:
c5:6a:ca:2f:c9:19:0f:50:dd:c9:83:7d:16:ee:c0:9e:f3:65:
8d:0c:f4:42:cc:31:d5:95:e6:e6:0e:d8:1d:1a:2a:28:68:83:
75:d6:73:d6:f7:f3:f7:f5:67:71:4e:b6:5f:bc:20:75:54:5b:
17:f5:87:8c:59:2c:54:05:79:f0:f9:90:a2:5b:fc:3d:48:14:
03:fc:27:94:ff:56:59:5d:f0:f6:47:09:64:95:d6:39:e4:2d:
9e:68:18:8f:6c:00:43:af:a8:66:77:78:a9:ca:3b:fc:f0:1a:
f3:fb:93:58:50:b0:30:86:3b:5a:59:ed:1a:e1:ed:b8:bd:9a:
2b:5e:c7:cf:59:10:d1:8f:df:8b:87:06:2c:06:0a:fc:fe:ae:
77:07:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:18 2026 by rpki-client