Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9R_fJaajNAjNKZKK1bAqmcuWe7Y.roa
File: 9R_fJaajNAjNKZKK1bAqmcuWe7Y.roa (raw, json)
Hash identifier: wnIE1S8UQ4klgDy5hPiaw/qj3m9zDlUMMWNtpD3QT6A=
Subject key identifier: F5:1F:DF:25:A6:A3:34:08:CD:29:92:8A:D5:B0:2A:99:CB:96:7B:B6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA92C37AE2E57A4E220864282965108A8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9R_fJaajNAjNKZKK1bAqmcuWe7Y.roa
Signing time: Tue 28 Jul 2026 14:41:15 +0000
ROA not before: Tue 28 Jul 2026 14:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202940
IP address blocks: 85.189.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:2c:37:ae:2e:57:a4:e2:20:86:42:82:96:51:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 14:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f51fdf25a6a33408cd29928ad5b02a99cb967bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:38:98:a8:dd:91:b8:2c:54:80:97:42:ca:
28:8c:0d:63:0a:36:d8:fc:89:93:e7:42:6b:0f:b6:
a6:0e:79:4e:d7:ac:70:19:0f:83:e2:e1:3e:41:38:
49:65:70:7c:56:a5:fc:93:8d:e0:c3:96:81:5c:27:
ae:78:8d:38:c4:63:d9:96:f6:20:a8:16:6a:79:37:
35:c8:49:15:fa:ce:82:47:0c:60:ea:6d:99:86:30:
3d:6b:4d:06:0e:76:db:d6:0b:ec:bd:e1:50:1e:78:
42:6a:33:32:e8:0c:9a:5b:ab:bb:9f:97:2c:61:db:
0e:4f:bf:09:81:50:26:09:42:2d:88:12:77:51:63:
5c:6b:a3:45:8b:9e:3f:9d:fd:c0:b0:d9:e6:a4:09:
47:51:67:18:78:60:0c:61:42:89:eb:1f:d2:dd:e1:
75:f5:8d:5a:ac:73:23:0c:6d:11:c5:b1:d9:8f:2b:
ad:0b:20:88:c4:5c:7c:ff:8a:77:12:15:b0:83:0f:
36:45:94:19:42:17:74:c7:da:a8:7a:f9:31:b5:12:
c4:19:de:c4:a8:3f:b7:27:e8:65:1e:cd:c6:89:b1:
43:68:4a:63:32:e4:64:2a:dc:4c:95:81:8c:07:1f:
23:02:42:5a:41:8d:89:18:20:17:df:5c:a6:4c:00:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:DF:25:A6:A3:34:08:CD:29:92:8A:D5:B0:2A:99:CB:96:7B:B6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9R_fJaajNAjNKZKK1bAqmcuWe7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5f:94:cc:5b:a2:5a:74:58:58:22:80:17:d7:29:a0:e5:55:
fd:5b:12:c3:0c:db:26:45:65:19:38:72:93:79:16:11:5c:91:
0a:47:26:6d:48:4e:b5:f0:16:3d:d4:e5:6f:66:87:fa:77:c1:
12:cc:25:8a:e7:1f:24:37:81:85:a1:08:f1:3e:2a:bb:56:42:
8e:73:79:4c:f6:c5:d3:78:f3:77:34:16:29:30:d4:d6:25:31:
4a:cc:6d:1a:37:45:cb:de:91:37:27:4f:21:0c:89:6e:03:ff:
03:5b:dd:a3:1f:ac:70:b4:25:2f:dc:99:62:86:aa:c7:a4:b7:
83:1d:4c:e4:10:f7:42:05:14:c7:2d:13:d1:83:42:b9:81:bc:
3f:5f:88:37:59:53:fc:20:5e:7e:27:7f:13:70:b5:a9:53:a7:
32:5d:9b:9f:b8:e9:20:2d:88:73:6d:3a:b8:00:d1:ad:97:c9:
0c:7d:49:f9:6b:15:90:c7:ad:df:1b:8c:cc:8a:bb:27:1b:3a:
f2:53:dc:7f:e4:8a:04:b4:2c:8e:16:d8:c8:55:05:bf:b7:a0:
bc:e9:14:7f:29:e1:a5:2e:22:0e:7c:73:e6:e6:2f:ff:d1:02:
72:17:79:4c:91:af:fe:9f:1f:fb:f8:67:98:dd:b7:4e:56:65:
79:cf:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:17 2026 by rpki-client