Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/1a09heU19_ryfPhTDOItUOYW9dI.roa
File: 1a09heU19_ryfPhTDOItUOYW9dI.roa (raw, json)
Hash identifier: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=
Subject key identifier: D5:AD:3D:85:E5:35:F7:FA:F2:7C:F8:53:0C:E2:2D:50:E6:16:F5:D2
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019B7F1579DB581F4D7FDF4ED1995BF40137
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/1a09heU19_ryfPhTDOItUOYW9dI.roa
Signing time: Fri 02 Jan 2026 14:21:12 +0000
ROA not before: Fri 02 Jan 2026 14:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61344
IP address blocks: 212.66.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:79:db:58:1f:4d:7f:df:4e:d1:99:5b:f4:01:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 2 14:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5ad3d85e535f7faf27cf8530ce22d50e616f5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:77:ac:a0:f6:33:62:33:6e:67:4d:11:3a:
35:45:60:5e:7c:fc:a1:38:4d:56:d5:8b:5b:72:4c:
a9:ce:e5:ae:d5:84:f8:c8:7d:a4:ca:f3:1f:8f:de:
ef:df:1c:ad:89:ad:ff:21:fa:01:98:f1:c2:3e:b3:
3f:de:c5:b7:8d:36:89:85:c9:56:40:81:d7:d4:bb:
de:81:b6:ae:2a:af:36:b9:34:45:06:60:c3:0f:ea:
72:27:38:07:56:dd:d8:74:73:b2:5d:ce:0c:82:65:
74:30:f2:6d:74:80:9a:f0:3f:dc:c5:fb:96:f2:02:
ff:f1:8d:62:4d:ff:f6:43:41:e9:29:21:d2:cd:07:
89:b6:63:69:db:3c:0b:cf:a9:a3:ae:a2:1a:bb:ba:
fb:e4:15:a9:3a:6a:c5:8d:44:63:ad:61:5d:63:19:
e6:b4:b3:bb:17:e2:c1:40:4a:4a:be:09:fc:33:c9:
f3:28:7d:9c:cf:86:50:31:7d:bf:0f:6f:2c:25:f1:
f1:99:e4:53:fd:b7:51:09:66:f1:64:90:74:10:5a:
de:04:20:e1:e8:9c:ba:04:25:08:93:56:f7:ed:b2:
70:0e:21:e3:0d:2e:13:f7:8f:fd:ef:d5:dd:73:03:
9c:3a:c9:af:c2:1c:5c:c5:22:6c:ab:0a:1c:f2:bc:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:3D:85:E5:35:F7:FA:F2:7C:F8:53:0C:E2:2D:50:E6:16:F5:D2
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/1a09heU19_ryfPhTDOItUOYW9dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.61.0/24
Signature Algorithm: sha256WithRSAEncryption
69:88:cb:a8:a9:85:23:af:f9:83:c4:bc:49:f6:13:67:cb:a8:
78:d1:34:fa:6d:5a:cc:59:7a:df:51:48:1e:8b:05:8d:59:53:
aa:55:65:46:8e:76:f6:12:38:c5:92:77:10:7b:c8:bf:c6:0f:
d3:78:ca:68:e1:21:11:50:f3:9c:c3:10:12:42:cc:80:25:be:
f1:e5:45:61:fa:c0:47:0c:7a:3d:08:23:86:80:a7:50:86:ef:
c8:96:18:fa:47:2c:83:7c:b1:3b:76:7a:d4:3d:5a:6f:ea:c0:
87:f5:90:66:59:63:b0:4d:00:8d:78:8b:09:70:0e:62:f2:20:
02:e1:92:51:47:55:19:a8:90:f5:18:25:7f:a2:9e:c0:09:80:
3e:7a:a6:9f:48:e9:73:dc:3f:78:c6:0e:bd:a8:66:6d:e3:75:
d8:8c:ce:99:3e:48:4c:9c:bd:49:d3:58:17:10:b4:85:5a:c7:
38:d9:77:71:15:05:f4:7e:98:93:12:3b:43:15:3a:4d:08:85:
00:1f:a6:55:27:33:35:d2:b0:1e:cc:ef:35:af:87:b1:3c:bc:
4d:03:b1:78:b2:3b:71:02:5f:13:71:3a:d5:dd:b9:bb:00:87:
7f:7c:6d:a2:d7:4d:c2:03:8a:9e:76:d4:bd:40:b0:3f:9b:4f:
c0:85:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:37:35 2026 by rpki-client