Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa
File: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (raw, json)
Hash identifier: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=
Subject key identifier: F4:93:0D:4A:0A:FD:19:36:42:AB:B1:02:93:C6:96:71:65:A9:49:67
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 019C5FAD84C7C117CBF607F6AC171A3239D2
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa
Signing time: Sun 15 Feb 2026 05:02:13 +0000
ROA not before: Sun 15 Feb 2026 05:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 85.28.32.0/20 maxlen: 24
85.28.32.0/24 maxlen: 24
85.28.33.0/24 maxlen: 24
85.28.34.0/24 maxlen: 24
85.28.43.0/24 maxlen: 24
85.28.44.0/23 maxlen: 23
85.28.46.0/24 maxlen: 24
85.28.48.0/20 maxlen: 24
85.28.57.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
85.28.60.0/24 maxlen: 24
85.28.62.0/24 maxlen: 24
109.238.192.0/20 maxlen: 24
109.238.192.0/22 maxlen: 24
109.238.200.0/24 maxlen: 24
109.238.201.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
109.238.206.0/24 maxlen: 24
109.238.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:ad:84:c7:c1:17:cb:f6:07:f6:ac:17:1a:32:39:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Feb 15 05:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4930d4a0afd193642abb10293c6967165a94967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:a7:17:b3:5f:e4:8e:c9:aa:66:4d:5e:d9:
cb:51:5c:2d:0c:04:f2:89:7c:c9:50:cb:ef:25:ce:
60:ff:90:ac:04:b5:c8:0b:e8:e4:e1:b8:b4:ab:88:
ce:23:e4:3b:20:ed:d9:63:47:2f:f0:98:24:06:25:
fb:26:55:b5:96:41:4f:16:15:68:94:1c:98:af:5a:
f7:61:b9:ae:df:38:25:fb:50:29:af:e5:8f:cc:b8:
17:4b:7a:7b:04:00:76:0f:14:92:f5:31:50:4f:4b:
d4:62:e1:10:c6:df:f9:2b:f3:43:32:e2:74:ef:05:
cd:95:ad:86:5c:ef:6e:66:4e:86:cd:fe:5d:22:39:
37:c7:2a:a8:fa:79:6e:22:cf:94:52:37:1e:44:70:
79:4c:62:a1:3b:af:d0:3b:71:ab:7a:a9:4c:a5:0e:
02:ae:2c:f4:47:4f:a5:d4:c0:66:00:ea:fe:93:fa:
42:10:27:ce:65:e1:7f:be:2f:c2:19:d6:8d:1f:f2:
98:2c:e2:cc:35:dd:de:fb:40:60:38:16:30:8d:fd:
c0:26:0b:72:04:3b:e4:9c:f5:e5:33:51:b0:b2:cd:
f4:14:26:76:71:e4:ec:3e:fe:95:85:0c:10:97:aa:
4b:f8:49:ed:8f:f5:63:64:f8:a3:7f:16:c1:f9:12:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:0D:4A:0A:FD:19:36:42:AB:B1:02:93:C6:96:71:65:A9:49:67
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.32.0/19
109.238.192.0/20
Signature Algorithm: sha256WithRSAEncryption
84:89:e0:d1:01:9f:34:75:04:86:6d:4a:2a:b1:9c:4c:0c:72:
5c:6d:e5:04:5a:c8:bd:a0:77:a8:7b:3b:32:de:be:7e:65:1b:
a0:94:fc:8e:80:52:ca:3e:5e:7d:e1:ba:5e:d1:58:a2:a5:30:
1a:90:9b:d5:16:43:41:64:40:c2:24:0c:03:54:6b:f9:5a:61:
99:94:e4:9d:da:c3:b8:f2:fe:1a:17:78:b4:7a:e5:db:50:c7:
a4:47:19:34:4b:45:9f:81:d0:85:8b:a9:85:7b:fc:29:e3:bf:
6f:ab:01:34:65:19:e8:75:cb:4f:2b:3b:7b:b6:b7:9b:1d:81:
fc:c8:b8:f8:9e:ff:0c:7e:42:4c:fb:1f:87:54:4f:dc:8f:5d:
73:53:94:ef:4c:c7:77:16:4b:fa:83:2e:a0:88:19:d9:b4:34:
c1:e0:d4:e7:19:a3:93:48:dd:1d:ff:49:36:57:99:a9:2b:59:
50:0f:2f:c7:19:fa:0f:da:6e:d1:63:7b:dd:39:cc:8b:0c:d7:
7a:46:cf:a9:7e:f8:89:a0:22:dd:30:01:4f:f2:18:10:51:5f:
f5:62:e0:26:30:ea:94:be:2a:77:84:ce:b4:81:6b:e1:e3:d0:
10:53:57:24:8d:14:87:74:2c:24:2d:47:6c:cc:aa:96:49:6a:
51:fd:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:49 2026 by rpki-client