Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ml9VvfFLd6F7w6Eodd3Xml4zsnQ.roa
File: ml9VvfFLd6F7w6Eodd3Xml4zsnQ.roa (raw, json)
Hash identifier: W/7DIu2p5DsYmzm4Ct9AAX7kLLsZdaR7MeP08BBNxsI=
Subject key identifier: 9A:5F:55:BD:F1:4B:77:A1:7B:C3:A1:28:75:DD:D7:9A:5E:33:B2:74
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D47BFFE97A928CB36ABB2F30437A34A96
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ml9VvfFLd6F7w6Eodd3Xml4zsnQ.roa
Signing time: Wed 01 Apr 2026 06:34:18 +0000
ROA not before: Wed 01 Apr 2026 06:34:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:47:bf:fe:97:a9:28:cb:36:ab:b2:f3:04:37:a3:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 1 06:34:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a5f55bdf14b77a17bc3a12875ddd79a5e33b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:f4:7f:23:36:d1:2b:12:83:79:48:d8:d3:
8b:b1:81:93:10:e2:c7:7c:83:4e:d3:bd:79:cc:97:
c8:4f:e0:74:bd:71:64:09:2d:25:86:c3:bc:cd:40:
6d:0c:35:c7:da:36:94:19:76:e9:ab:c0:29:83:9f:
d3:6a:ab:11:a6:d4:c5:c5:80:e8:ad:08:30:e0:da:
83:e6:48:aa:40:9f:43:ae:21:32:24:78:23:7a:ca:
bc:a3:6f:33:cf:4a:19:d1:6c:a0:79:5e:a5:6c:b9:
61:98:7c:03:20:61:99:bf:50:c8:20:d8:7b:72:22:
f0:56:c3:f6:de:ac:22:cc:ff:dd:e1:cb:06:bb:27:
fc:c7:68:b2:6f:fc:f1:90:41:d6:95:ee:84:54:39:
f9:f8:ed:f0:fd:09:a0:27:a4:d4:4d:76:b9:13:11:
c2:66:e7:9b:3a:2b:63:6d:1f:c2:10:2d:71:03:9f:
7d:ac:8c:ae:47:f7:28:f7:bb:9b:8c:e3:dc:70:8c:
9c:3b:87:31:6a:28:77:5f:79:a5:40:9b:18:67:f4:
c1:59:00:ca:46:31:d7:69:ff:14:74:40:f6:f3:a8:
1d:08:f1:65:9b:a4:77:71:80:47:b0:76:d4:8d:40:
cc:8c:b0:76:6a:e0:1a:4e:cf:2b:82:8b:87:79:ea:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:55:BD:F1:4B:77:A1:7B:C3:A1:28:75:DD:D7:9A:5E:33:B2:74
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ml9VvfFLd6F7w6Eodd3Xml4zsnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.89.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
Signature Algorithm: sha256WithRSAEncryption
46:77:f1:f9:dd:c0:53:08:13:4a:ea:26:ce:52:17:30:6e:89:
ce:12:36:0c:1e:24:08:87:dc:bc:e6:48:aa:07:6b:5c:f0:b7:
c6:ba:71:d2:09:4a:1b:0f:ad:9a:24:e7:53:46:43:3c:21:95:
08:fa:c3:75:2e:43:22:d4:26:4e:5c:3e:bc:29:ad:ae:37:06:
cd:2b:ac:8e:0e:b1:14:e4:d6:37:b2:03:06:33:7c:57:f9:53:
ad:84:6c:e3:7c:32:9c:0f:7d:b2:62:63:48:80:d8:0b:87:0f:
3e:f5:83:32:4d:0e:39:48:1a:72:fa:8c:2e:11:42:d0:63:d9:
74:74:84:3c:bd:e1:bd:6b:30:bd:df:45:98:78:8b:7d:2d:49:
97:ee:3a:d3:22:14:7a:d4:a3:39:ca:19:f1:88:aa:64:ea:b0:
45:b8:2d:55:15:e1:73:a1:29:51:a6:e8:63:21:36:3f:d6:3c:
ce:9c:a4:e9:b6:ba:c2:73:bc:01:5b:a5:02:4d:8b:e9:5a:18:
f0:f1:b2:ff:00:b7:d3:83:21:77:a4:6b:56:e3:f9:3f:67:8a:
88:ff:56:78:47:02:6a:6d:04:f0:63:5c:be:ed:2f:1f:e8:7d:
93:35:8d:eb:95:83:37:1a:f0:1d:23:33:cc:e3:3f:fd:7a:1d:
67:77:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:19 2026 by rpki-client