Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/2a9lDQHs5tBlrz-7qEzxI89fJ_8.roa
File: 2a9lDQHs5tBlrz-7qEzxI89fJ_8.roa (raw, json)
Hash identifier: ODPc89dRL9Fh137LwiwNRl4hWSkzXbo3C+RnsnQV4w8=
Subject key identifier: D9:AF:65:0D:01:EC:E6:D0:65:AF:3F:BB:A8:4C:F1:23:CF:5F:27:FF
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 019EB335DAC1F267108C699818E063A90F0E
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/2a9lDQHs5tBlrz-7qEzxI89fJ_8.roa
Signing time: Wed 10 Jun 2026 20:25:11 +0000
ROA not before: Wed 10 Jun 2026 20:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 45.74.158.0/24 maxlen: 24
45.74.159.0/24 maxlen: 24
91.228.227.0/24 maxlen: 24
158.94.216.0/24 maxlen: 24
176.97.219.0/24 maxlen: 24
217.11.164.0/24 maxlen: 24
217.11.165.0/24 maxlen: 24
2a01:f900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:35:da:c1:f2:67:10:8c:69:98:18:e0:63:a9:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Jun 10 20:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9af650d01ece6d065af3fbba84cf123cf5f27ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:cd:ba:55:1c:70:6e:5b:0e:bc:ba:47:9a:
ea:60:23:52:89:17:62:4f:7d:1f:1a:37:82:a4:44:
ff:e0:0a:af:d1:c9:a0:de:c4:c7:b9:19:30:44:61:
97:2d:af:8b:da:d8:02:d4:ac:71:91:25:4f:fb:64:
31:ae:85:eb:ac:43:d9:15:0f:03:a5:5f:07:a4:06:
ca:16:a9:97:a7:7f:38:5e:3e:6f:32:f8:e8:91:db:
e1:f5:de:16:9f:ae:f3:f9:0c:45:0f:62:7a:c2:c9:
56:61:6c:ec:10:e1:e8:28:00:70:4b:25:95:01:9f:
d9:15:3f:b2:ff:bd:ba:a5:14:3f:f4:30:db:5a:18:
39:2c:7d:f9:70:52:d1:29:22:6d:fc:0b:6c:1e:99:
aa:38:ca:fc:3a:9a:e3:4f:4b:21:c9:04:71:e1:6f:
8a:7f:e8:24:c5:51:76:e0:a6:81:d1:7b:eb:34:98:
60:d4:85:e4:61:65:ba:bd:e7:1f:f6:2f:64:12:9d:
96:e2:e4:83:2a:dd:f6:f2:76:e2:2c:b1:74:32:ef:
ca:04:67:07:ef:5f:06:8b:60:95:1f:e0:74:96:f8:
4a:91:2a:4a:79:c4:cd:e5:3f:4a:02:b9:30:1b:69:
58:cb:87:48:6f:f9:88:dd:e2:b7:14:83:19:a3:2f:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:65:0D:01:EC:E6:D0:65:AF:3F:BB:A8:4C:F1:23:CF:5F:27:FF
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/2a9lDQHs5tBlrz-7qEzxI89fJ_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.158.0/23
91.228.227.0/24
158.94.216.0/24
176.97.219.0/24
217.11.164.0/23
IPv6:
2a01:f900::/29
Signature Algorithm: sha256WithRSAEncryption
44:9f:05:1e:97:83:3d:9f:c3:05:5b:85:e0:a8:1f:8c:a6:14:
b7:2a:bf:b4:41:b3:9d:10:a4:93:f0:0d:09:60:a7:1d:99:f2:
47:22:bd:c8:38:3c:e6:b6:59:7d:89:e4:bb:90:c3:c7:6c:8c:
03:fd:e2:68:3f:c4:54:2d:3a:4c:41:9a:10:d9:6c:bb:b0:d5:
d6:6e:9b:6f:c7:ec:09:e0:cd:a7:8d:79:70:d5:18:3e:f3:a9:
62:00:77:2e:4e:f3:5c:a8:a9:61:87:5d:f5:a8:40:03:ce:33:
f7:9a:82:87:e6:d4:33:f5:9e:57:5c:8f:99:17:c8:3b:a1:2b:
4d:71:55:30:48:e6:12:fe:8f:66:83:11:5d:2b:44:29:b8:df:
9f:2f:7d:fc:6d:c7:66:cd:08:11:32:28:6f:19:a7:e7:76:04:
40:e5:72:a9:c8:b3:80:2f:a1:cc:8d:cb:b4:3d:6f:b9:9c:01:
df:25:01:97:1a:38:32:e1:3c:c8:5f:20:2c:69:65:bd:52:dc:
e3:27:c2:4e:6b:73:b8:f3:98:f8:8b:ff:f7:d7:e3:8f:8d:f9:
2d:19:a3:d7:e7:89:33:6a:1b:c9:53:98:74:36:07:6b:ca:84:
4d:b4:2f:c3:ce:14:07:72:12:f8:11:9e:31:b7:48:a1:5e:70:
9e:8c:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:58 2026 by rpki-client