Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/U9dpamPlXFGPVwyxa7ZIjQCVXbM.roa
File: U9dpamPlXFGPVwyxa7ZIjQCVXbM.roa (raw, json)
Hash identifier: NpMd/z8Tkr9WOq97vd7su+5I1m9lCbB+kCkvJo6LpzM=
Subject key identifier: 53:D7:69:6A:63:E5:5C:51:8F:57:0C:B1:6B:B6:48:8D:00:95:5D:B3
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 01A08024F35398B7E7CD588D9668B5CF4167
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/U9dpamPlXFGPVwyxa7ZIjQCVXbM.roa
Signing time: Tue 08 Sep 2026 08:31:40 +0000
ROA not before: Tue 08 Sep 2026 08:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206002
IP address blocks: 91.199.103.0/24 maxlen: 24
95.111.135.0/24 maxlen: 24
185.187.28.0/22 maxlen: 22
2a0b:9380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:24:f3:53:98:b7:e7:cd:58:8d:96:68:b5:cf:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Sep 8 08:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53d7696a63e55c518f570cb16bb6488d00955db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:9e:1b:1d:52:95:17:c3:44:1e:6a:8d:68:
c0:06:5d:19:64:69:ba:fe:b0:91:9e:91:29:09:bd:
c5:5f:5d:83:ab:fe:d0:a0:4e:4c:c1:e0:f1:0a:45:
53:50:5b:49:0c:3d:c3:2f:8f:57:7b:f1:85:13:53:
db:93:0c:66:cd:05:80:76:db:6f:d4:fc:36:3d:9e:
af:eb:e3:54:4b:86:b2:49:93:e4:5b:3c:7e:05:b1:
2c:4a:57:05:b9:fb:24:21:44:94:ae:bb:0c:78:5e:
08:c2:9f:cf:82:3f:5e:56:16:b3:b9:49:5e:10:93:
8b:52:53:a0:cc:35:08:a1:b2:df:a2:64:36:04:1e:
1b:c5:fb:b1:0d:d2:a8:a5:10:cc:b9:ca:3b:b1:47:
e6:36:7e:df:50:72:a7:37:13:3f:cd:95:51:f8:3b:
87:58:0c:16:6b:8d:b2:20:69:20:e9:10:39:a6:01:
28:ab:73:97:4f:6c:d1:df:a0:ad:23:85:1c:40:9c:
9a:86:82:3b:57:f1:c7:cd:70:4e:66:22:39:df:e6:
78:c5:2d:b6:75:b2:d9:04:41:e6:89:35:49:b5:91:
35:78:4a:88:9b:96:36:49:3c:c5:a8:ca:a5:6a:2a:
27:58:d4:74:6c:31:83:53:2f:51:93:dd:31:1f:9f:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:69:6A:63:E5:5C:51:8F:57:0C:B1:6B:B6:48:8D:00:95:5D:B3
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/U9dpamPlXFGPVwyxa7ZIjQCVXbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.103.0/24
95.111.135.0/24
185.187.28.0/22
IPv6:
2a0b:9380::/32
Signature Algorithm: sha256WithRSAEncryption
58:37:06:3c:14:e0:b0:e5:cc:9e:3b:12:d2:08:c6:3e:3c:87:
4c:00:da:56:98:2d:59:d8:39:45:2b:6f:a0:35:d7:24:0a:f7:
ed:fe:e4:62:35:66:c3:21:5b:8e:02:35:9c:77:14:bb:c6:99:
96:27:20:1a:d3:a6:48:bc:af:0c:16:1f:3d:ef:98:db:5a:99:
11:54:b2:e3:43:ea:e7:48:15:d3:c4:96:fb:5b:a7:8d:f9:ac:
d9:69:e1:84:49:4f:d1:e1:7a:c4:7c:74:53:5c:ee:20:d8:09:
35:fc:ba:cf:ad:d1:d5:6a:ee:ef:ae:23:58:77:e1:88:8b:df:
22:0c:15:d5:cc:ac:39:c5:c1:2b:25:9d:50:06:b9:21:fd:8a:
6b:f9:00:c9:3d:fa:ef:af:1e:a9:2d:70:b5:78:06:62:42:38:
96:ae:df:e2:86:0e:33:96:81:0b:5c:2a:03:a6:b1:f0:c8:8f:
01:5a:8f:3d:6c:b3:ee:5a:41:bd:bd:ad:ba:03:83:3f:78:36:
52:5c:15:d7:fc:4a:65:58:07:8b:22:4a:46:45:1a:04:07:90:
e9:6b:34:3d:9a:a0:71:2c:e1:08:03:6f:e1:05:5f:be:6d:fd:
59:af:50:1f:62:7e:0b:69:3e:21:f9:fd:8f:29:25:a8:b8:52:
56:40:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:23 2026 by rpki-client