Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/9ZjDyXltHI_crf82W4ndDS_Rr68.roa
File: 9ZjDyXltHI_crf82W4ndDS_Rr68.roa (raw, json)
Hash identifier: t4T+4+5PUSa2OitaaqMh2xycjoM7UBvirJaOCgRMMZk=
Subject key identifier: F5:98:C3:C9:79:6D:1C:8F:DC:AD:FF:36:5B:89:DD:0D:2F:D1:AF:AF
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 019B7E37A268B3730D8E25EBDF64CC796B99
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/9ZjDyXltHI_crf82W4ndDS_Rr68.roa
Signing time: Fri 02 Jan 2026 10:18:53 +0000
ROA not before: Fri 02 Jan 2026 10:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215706
IP address blocks: 95.131.203.0/24 maxlen: 24
195.234.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:a2:68:b3:73:0d:8e:25:eb:df:64:cc:79:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Jan 2 10:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f598c3c9796d1c8fdcadff365b89dd0d2fd1afaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:9d:d3:f6:9a:00:eb:a8:ea:eb:17:ec:46:
45:24:76:eb:48:6f:c1:f7:3c:b6:55:8b:e1:ab:41:
b7:97:b4:3b:17:08:95:37:7c:a7:64:94:35:dd:7f:
eb:14:97:ae:8d:70:da:a0:00:96:a0:e6:f9:e3:5c:
12:c7:65:e1:0e:5b:5e:d3:6a:64:6a:46:42:96:51:
bb:84:ee:5c:da:28:41:a0:ee:3e:87:1d:bf:3a:a0:
1f:d8:3b:3d:3f:7d:72:fa:be:c1:07:87:bf:af:b5:
59:b1:1e:65:db:ff:4a:3e:23:be:f0:cf:3c:79:5d:
b6:91:b7:7d:13:c4:72:90:09:17:f4:68:6f:28:32:
ae:70:00:b5:a1:e5:d6:fe:e7:11:9c:b4:38:ba:43:
89:6c:37:94:b2:1b:f8:be:e4:f2:f1:41:a0:ce:b6:
a7:e6:51:79:78:1a:06:73:85:82:bc:3c:0e:f9:12:
38:a4:e7:75:f9:18:85:53:3a:64:f9:f9:9d:2c:60:
04:a1:4e:e3:91:3b:36:1a:51:d7:c3:6c:94:08:ab:
97:d2:d6:75:b5:36:05:2e:51:6b:ce:ff:65:6e:61:
d3:61:f0:d0:af:20:e2:25:e7:fa:0a:59:fb:17:06:
b1:3b:03:a1:e6:08:57:ce:e7:79:d7:2b:0e:a2:b6:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:C3:C9:79:6D:1C:8F:DC:AD:FF:36:5B:89:DD:0D:2F:D1:AF:AF
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/9ZjDyXltHI_crf82W4ndDS_Rr68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.203.0/24
195.234.94.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3d:c6:5e:52:de:ce:3a:1e:30:4d:5d:15:61:83:cf:67:48:
cb:0b:0c:41:4c:f7:6e:24:6e:ae:da:aa:61:b6:42:c4:43:00:
e7:cf:2e:3e:86:b8:7b:df:e6:c3:10:ba:29:46:78:da:d4:cd:
9b:32:80:f8:9e:86:20:84:94:31:a9:18:61:4e:74:2b:ec:05:
17:f5:f1:7b:a0:74:46:7e:b1:3f:eb:7b:26:d3:29:a7:8b:cf:
90:58:f1:3b:f5:78:2a:d0:2b:af:12:f9:39:ba:ea:42:c0:41:
5d:fd:53:44:e1:94:5e:28:ad:70:2e:29:70:3a:21:69:77:a3:
d9:1c:66:84:17:00:e0:b1:db:fd:26:26:0c:f0:f4:e1:e6:75:
f0:66:21:a1:24:11:c3:09:97:c9:f6:7a:ff:d5:11:93:be:87:
4d:57:89:ff:c4:39:04:2f:cc:98:c8:22:e8:1f:ea:93:97:4d:
4e:20:da:36:a5:d2:d7:f2:d2:0a:a2:e5:23:52:e3:07:72:8d:
9f:e0:52:61:05:ca:19:8f:34:e5:e6:50:0c:05:5b:04:05:c4:
c0:7c:11:34:3f:31:f6:c9:a4:1b:ca:f8:4a:d3:b2:b3:d9:f5:
6d:66:e3:a5:59:18:fc:9f:b4:de:42:47:e0:2c:2e:0a:0a:bf:
5b:4e:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:34 2026 by rpki-client