Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/9vxud7StOxsVGpJ4u8HWgLt1evM.roa
File: 9vxud7StOxsVGpJ4u8HWgLt1evM.roa (raw, json)
Hash identifier: geRuwSQcxs/ntg9jtSwo/JgbYczfuqf3BwONRGwXIlo=
Subject key identifier: F6:FC:6E:77:B4:AD:3B:1B:15:1A:92:78:BB:C1:D6:80:BB:75:7A:F3
Certificate issuer: /CN=71ad0295bef46b159893af3081ced68191b76c92
Certificate serial: 019F236880584D94F3AE31EB0A0261A69F77
Authority key identifier: 71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/9vxud7StOxsVGpJ4u8HWgLt1evM.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60049
IP address blocks: 185.57.232.0/22 maxlen: 24
2a02:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:80:58:4d:94:f3:ae:31:eb:0a:02:61:a6:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ad0295bef46b159893af3081ced68191b76c92
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6fc6e77b4ad3b1b151a9278bbc1d680bb757af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:9b:bc:b5:1d:fc:ea:ed:9f:41:fc:7b:f1:
67:e3:f6:0f:81:48:4e:02:c6:b0:9b:04:9d:31:d6:
16:60:a5:85:fc:48:c0:7f:b9:0b:b9:0f:08:5f:23:
46:09:61:8f:91:d8:10:c7:bf:fd:1b:11:9f:2f:27:
cf:20:e7:11:1d:ae:bc:e4:8f:2d:e9:2e:e4:64:59:
18:f7:cb:11:64:13:88:e3:32:9d:18:af:d4:53:fa:
00:2e:62:87:70:ff:db:97:4a:2b:9f:f1:58:2b:29:
a9:f9:c0:7a:02:ce:5a:8b:5c:67:a3:c9:52:41:34:
98:f8:3a:f6:0d:e6:00:62:2e:2e:a1:9c:7a:ed:e2:
c6:e5:f8:7b:f7:02:9e:69:20:a0:b6:a0:88:a2:42:
f8:18:c3:f6:42:d4:7c:6f:13:7e:d0:22:93:52:02:
1b:f5:b3:43:09:5c:ae:ae:4e:76:7c:50:a1:8c:66:
bb:57:65:30:41:0b:58:8d:c4:a0:aa:93:02:2f:f4:
aa:c9:8b:46:a4:94:90:b0:91:8a:8d:7c:c9:86:a6:
36:1a:ed:d4:9e:df:04:0b:6b:d1:0d:cd:bf:8c:77:
33:c0:ba:b3:22:82:de:91:5c:13:e0:08:86:f4:9f:
88:75:7c:97:73:75:18:d8:df:ea:29:be:8c:b9:b3:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:6E:77:B4:AD:3B:1B:15:1A:92:78:BB:C1:D6:80:BB:75:7A:F3
X509v3 Authority Key Identifier:
keyid:71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/9vxud7StOxsVGpJ4u8HWgLt1evM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.232.0/22
IPv6:
2a02:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
42:4c:99:60:a0:6b:29:cd:c7:99:31:79:98:0e:42:60:5e:6b:
88:3f:7a:76:eb:e6:d8:b1:4a:1c:a8:08:7b:cc:af:48:da:b7:
92:80:c8:99:f0:e9:30:d8:b2:cd:f0:18:e5:4e:b3:72:dd:0a:
61:63:4f:d1:d9:8d:7a:1b:25:2b:c3:2d:9e:f5:43:97:bb:51:
cb:57:0d:c3:0a:3a:9a:56:ec:df:d1:c5:1f:af:d1:cc:8d:86:
62:b4:38:05:b5:1a:e3:b9:85:8d:19:c3:e8:22:b3:8a:fe:0a:
37:4f:26:d4:4d:7e:ea:3c:eb:16:83:1f:85:7c:01:bf:2e:2f:
59:9b:59:11:fa:c9:e7:71:31:bf:d8:5a:03:97:d2:31:5f:ac:
68:33:b7:5f:cc:b7:ab:9a:c3:81:ba:f1:ca:38:e0:5d:98:78:
1b:86:7c:1a:f6:f8:e1:22:3d:4b:e1:13:3a:11:dd:76:af:71:
e5:8f:5c:16:2a:7f:f8:7f:fb:cf:c0:92:b4:3f:be:a1:97:16:
7e:61:2d:2d:eb:49:68:14:75:45:1b:43:ae:d7:f3:49:1d:b1:
b6:1e:1b:e8:56:2e:6d:7e:46:c5:e3:09:99:7c:1c:2f:c5:5a:
9a:21:26:59:d4:f5:9e:84:9e:e8:a2:13:5c:cf:3b:eb:4b:b2:
9b:4b:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:34 2026 by rpki-client