Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/LssdpCqBsqTDNkq_1fNZk292m4Y.roa
File: LssdpCqBsqTDNkq_1fNZk292m4Y.roa (raw, json)
Hash identifier: 3sGeV4EkIAUVZp5hTUfJIwdgV3ThxleH5h9tn2o5fdo=
Subject key identifier: 2E:CB:1D:A4:2A:81:B2:A4:C3:36:4A:BF:D5:F3:59:93:6F:76:9B:86
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 01A08A0AEE54A93B63451D9A625D9CC50D01
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/LssdpCqBsqTDNkq_1fNZk292m4Y.roa
Signing time: Thu 10 Sep 2026 06:39:27 +0000
ROA not before: Thu 10 Sep 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209342
IP address blocks: 66.9.128.0/19 maxlen: 19
66.9.128.0/24 maxlen: 24
66.9.129.0/24 maxlen: 24
66.9.130.0/24 maxlen: 24
66.9.131.0/24 maxlen: 24
66.9.132.0/24 maxlen: 24
66.9.133.0/24 maxlen: 24
66.9.134.0/24 maxlen: 24
66.9.135.0/24 maxlen: 24
66.9.136.0/24 maxlen: 24
66.9.137.0/24 maxlen: 24
66.9.138.0/24 maxlen: 24
66.9.139.0/24 maxlen: 24
66.9.140.0/24 maxlen: 24
66.9.141.0/24 maxlen: 24
66.9.142.0/24 maxlen: 24
66.9.143.0/24 maxlen: 24
66.9.144.0/24 maxlen: 24
66.9.145.0/24 maxlen: 24
66.9.146.0/24 maxlen: 24
66.9.147.0/24 maxlen: 24
66.9.148.0/24 maxlen: 24
66.9.149.0/24 maxlen: 24
66.9.150.0/24 maxlen: 24
66.9.151.0/24 maxlen: 24
66.9.152.0/24 maxlen: 24
66.9.153.0/24 maxlen: 24
66.9.154.0/24 maxlen: 24
66.9.155.0/24 maxlen: 24
66.9.156.0/24 maxlen: 24
66.9.157.0/24 maxlen: 24
66.9.158.0/24 maxlen: 24
66.9.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:0a:ee:54:a9:3b:63:45:1d:9a:62:5d:9c:c5:0d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Sep 10 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ecb1da42a81b2a4c3364abfd5f359936f769b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:d8:14:8d:02:88:e7:f5:c1:e3:f5:cb:77:
c4:e5:18:c2:6a:80:f6:7e:e5:b3:bc:4c:ed:9d:c2:
5d:72:ae:1f:df:c0:db:13:f1:d7:9b:37:dd:1e:59:
9a:92:30:e3:7a:38:36:0c:bd:ab:11:b1:77:49:85:
49:cf:e3:89:2e:aa:86:d5:09:fe:fc:ed:8d:60:7e:
a1:04:4f:cc:9e:cd:47:5e:a1:e5:a6:8a:13:b9:10:
54:f1:4f:5a:cf:9d:46:39:2c:87:9c:ea:20:2b:0b:
5e:28:c3:bd:d8:ef:6f:16:c3:2f:0c:8c:96:23:f0:
a9:e0:38:d1:4f:b3:a2:7a:e6:e7:39:f8:67:05:99:
fd:53:ef:47:5b:49:f8:84:c5:8f:ce:8a:32:19:6d:
d9:0c:cb:22:c1:25:30:c4:71:cf:4f:dd:df:ea:7f:
05:ad:d4:8a:45:42:6a:2c:a2:81:b0:fb:77:99:bb:
3d:93:62:f9:98:21:2f:61:ae:70:c6:19:35:42:ab:
dd:71:06:ab:ac:5e:18:0a:3b:bc:6a:56:51:1b:3a:
c1:84:e0:95:35:f0:d6:42:e1:3f:0d:61:bd:6d:8c:
b4:32:8e:a3:46:57:90:8c:73:83:4f:43:ca:ad:2d:
40:26:8c:0a:36:41:19:13:8d:50:42:af:fc:0b:46:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:1D:A4:2A:81:B2:A4:C3:36:4A:BF:D5:F3:59:93:6F:76:9B:86
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/LssdpCqBsqTDNkq_1fNZk292m4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:db:b4:f5:51:87:c5:82:df:bd:c1:49:31:65:cf:d2:5f:aa:
3c:7f:07:66:77:f4:89:ec:fc:6f:29:0c:e5:09:10:84:1a:c6:
4a:0e:3e:e4:65:61:cd:2a:28:b8:4a:4f:9f:46:c9:5d:64:3b:
15:e1:c0:c3:3e:ea:5a:00:66:8a:50:6f:18:c7:2b:78:a4:30:
80:c0:41:52:6b:9f:a6:41:c2:50:b0:a8:e7:6f:24:26:7f:3f:
4e:40:f3:24:8a:ab:a4:f7:81:35:a2:63:b8:5a:e3:81:b5:ab:
4e:85:2b:e5:17:4a:ad:e7:69:5d:01:48:56:bb:4d:13:66:b4:
ee:1c:50:ce:c8:5f:f6:9f:d1:65:f1:df:f6:1a:88:92:c5:1a:
9f:57:20:fc:d7:b7:3c:a1:9c:94:af:9f:80:e6:19:15:e2:e2:
6f:34:63:c0:cc:61:04:1d:52:88:8b:3a:60:17:41:3e:f1:95:
b7:e1:df:b6:bc:54:f5:dd:cb:44:40:5b:65:c1:30:40:89:c7:
68:0e:69:e6:8f:8d:32:a8:53:ec:23:4d:36:b8:c4:04:1d:28:
26:3f:25:ae:ff:cc:b2:88:56:ec:ff:8a:90:af:09:73:3f:b1:
c5:a9:da:77:90:d2:6b:da:3c:69:b3:20:d7:b0:3b:32:88:40:
fe:e6:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:43 2026 by rpki-client