Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9-tmsjUOA3guW-sEqsqrQkmvPn4.roa
File: 9-tmsjUOA3guW-sEqsqrQkmvPn4.roa (raw, json)
Hash identifier: y3an4L6GM8J27sAtwHKykbQQFZjLXfaelDUQrR2vWJY=
Subject key identifier: F7:EB:66:B2:35:0E:03:78:2E:5B:EB:04:AA:CA:AB:42:49:AF:3E:7E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06CABEBE59C9AAE2E2AFFD2463C40A995
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9-tmsjUOA3guW-sEqsqrQkmvPn4.roa
Signing time: Fri 04 Sep 2026 13:46:41 +0000
ROA not before: Fri 04 Sep 2026 13:46:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135074
IP address blocks: 82.110.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ab:eb:e5:9c:9a:ae:2e:2a:ff:d2:46:3c:40:a9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 13:46:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7eb66b2350e03782e5beb04aacaab4249af3e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:fc:07:67:c3:1a:3e:79:f0:af:00:76:42:
80:ca:be:3b:38:21:ec:59:a8:9c:30:08:dd:1b:08:
42:79:9f:07:b3:a4:92:fc:f2:b0:0a:a5:d4:91:d7:
a7:47:88:3b:3e:78:5e:5f:9b:31:70:f6:fb:09:81:
39:4c:63:93:4e:1d:af:2f:df:54:e1:f9:25:66:9e:
ed:b6:dd:fc:bd:d2:93:f3:74:cb:7d:7b:9a:ed:47:
29:eb:51:5a:ef:78:ed:9f:e3:c2:34:1e:94:16:6a:
8a:85:04:06:85:40:de:86:26:3c:af:21:bf:28:e9:
bc:49:cb:41:47:d7:a4:b1:3d:6f:02:05:44:5f:63:
b7:a1:8c:ab:ae:d6:17:9d:72:04:f6:1b:10:b1:6b:
2f:65:0d:3a:b4:6e:3e:f8:96:d8:7d:a1:5b:75:06:
f1:e2:f5:0e:ad:d0:b9:67:3f:11:c4:01:dd:a4:e0:
06:6c:fc:88:0e:aa:9b:64:2d:0f:8d:42:cb:75:25:
5d:12:38:41:b0:7b:1b:d0:f2:8b:58:16:d5:a3:73:
eb:f7:50:8f:0a:60:93:ca:ae:95:bb:6d:ef:5a:38:
4e:d0:7a:4a:b1:69:cf:e5:2e:c8:ef:65:10:07:58:
1b:ed:72:e8:7c:1b:12:c2:58:b6:4e:f6:48:99:3c:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:66:B2:35:0E:03:78:2E:5B:EB:04:AA:CA:AB:42:49:AF:3E:7E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9-tmsjUOA3guW-sEqsqrQkmvPn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.108.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e6:94:3a:65:00:c1:06:e1:69:5c:08:af:55:ee:66:ea:f7:
9a:6e:51:5d:a5:63:8e:32:80:8d:71:96:29:ac:a1:c3:f0:01:
d9:3b:d8:5a:95:ef:f9:0e:ff:74:c0:80:c0:30:9b:bd:f8:9f:
10:80:a4:43:33:5e:bd:2d:bc:92:ec:1d:64:be:5c:4b:b2:19:
d6:a9:d1:22:ae:73:0d:62:9a:f4:67:75:33:cb:78:2e:00:f7:
77:4c:b7:99:e3:a5:52:f7:12:86:a9:60:a8:cc:c9:d2:aa:45:
80:f3:50:36:14:58:91:bc:38:fa:0e:0f:a0:c2:22:11:18:48:
7d:f4:2d:cc:36:ab:17:fa:21:f3:9c:bd:a0:1b:30:14:74:b8:
ff:6d:81:94:8d:dc:45:44:52:e1:9e:fa:8a:5e:52:37:fa:ec:
b2:11:07:c1:dc:32:b3:18:00:79:27:12:3d:5e:cb:60:f1:56:
ed:42:67:db:fd:b3:57:ed:10:10:a4:40:6d:b5:53:d4:7a:4c:
28:49:42:85:7f:60:e1:e8:6d:fa:fa:f4:ef:95:b6:1f:96:63:
05:00:10:23:f3:c9:c1:1a:3b:60:8b:8d:f7:b6:97:ad:2b:95:
db:b7:f6:88:59:3f:08:1a:af:ac:1a:1a:01:7f:d9:78:16:4f:
31:e1:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:17 2026 by rpki-client