Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa
File: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (raw, json)
Hash identifier: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=
Subject key identifier: F6:5F:B5:BD:5D:25:2C:C3:DD:8D:52:D9:F1:4E:20:21:6D:0E:91:3F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019EBBC775D4C01A6C0C2D17BDEA47089EA9
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa
Signing time: Fri 12 Jun 2026 12:21:11 +0000
ROA not before: Fri 12 Jun 2026 12:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203936
IP address blocks: 45.144.248.0/22 maxlen: 24
89.40.238.0/24 maxlen: 24
185.253.144.0/22 maxlen: 24
193.39.92.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
193.39.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:c7:75:d4:c0:1a:6c:0c:2d:17:bd:ea:47:08:9e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jun 12 12:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f65fb5bd5d252cc3dd8d52d9f14e20216d0e913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:46:68:06:e5:23:5f:73:4a:ac:3f:73:96:
7b:10:ab:c9:ae:1d:e4:58:58:99:9a:81:a4:8a:d4:
7f:87:a7:1e:60:56:01:71:2b:e6:74:67:e7:2d:55:
86:d5:10:31:35:fd:ec:40:f6:26:b1:12:3f:7e:cb:
17:6c:72:69:05:fe:84:61:0d:26:2e:65:89:44:b1:
64:d3:69:c6:c9:31:56:eb:f7:64:46:82:ed:9a:48:
49:f7:6c:00:59:e4:cd:50:a7:32:28:82:05:5e:fd:
06:3b:9d:48:0c:63:b9:41:8a:f9:40:7b:4a:90:2a:
98:e2:17:8e:f0:ef:c7:3c:0d:1d:6b:94:8c:7b:27:
f5:ea:6c:eb:ab:18:ef:ad:35:66:a4:b7:17:cd:79:
d7:71:ee:7b:4e:7e:a8:de:4f:35:dc:68:1f:20:28:
b9:3e:a4:cc:79:2f:fc:45:05:1f:08:65:5d:1e:2a:
6b:7f:27:68:8e:2d:e0:c5:e4:2b:42:a2:d9:5c:08:
0f:16:f3:b6:b6:2d:37:ba:5a:4a:ac:d7:a0:0d:26:
21:37:8a:7a:18:29:c5:d3:72:0e:e7:7c:a2:c4:fc:
d5:43:d8:41:f3:23:2c:4d:46:48:c3:7e:5e:f2:4b:
a9:6d:39:21:96:44:e2:92:7f:ab:87:4d:0c:6b:f7:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:B5:BD:5D:25:2C:C3:DD:8D:52:D9:F1:4E:20:21:6D:0E:91:3F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
89.40.238.0/24
185.253.144.0/22
193.39.92.0/22
Signature Algorithm: sha256WithRSAEncryption
57:b7:6e:8a:48:cd:24:88:90:24:7a:7f:56:fa:34:72:05:a1:
8e:bd:49:ec:20:d5:61:78:f9:6b:03:bb:ca:b0:a7:44:6c:df:
4a:e1:4d:a7:be:28:d9:f0:96:69:e0:cc:78:9a:73:d4:2a:51:
75:de:8d:b3:8a:81:00:50:ab:8b:8d:05:fd:2f:b8:5f:25:b3:
00:ed:09:7b:d8:4f:f6:9d:73:b4:46:64:9a:c2:1b:50:b1:53:
00:28:cb:22:63:df:10:c7:a8:0d:5d:ca:8f:27:08:86:c7:e0:
4f:d0:ea:85:ef:a5:82:ce:39:1e:39:6a:6e:f3:48:d2:6f:c7:
bf:09:4d:78:90:90:83:ec:11:b6:7c:81:f1:50:54:08:84:0d:
a1:9b:e9:ac:61:54:8d:76:5e:42:30:ab:95:7b:65:7d:e6:cc:
a8:05:cf:07:cc:2c:3a:a0:fc:91:cd:65:18:f4:f3:4e:92:d8:
6c:24:3c:5c:1c:d5:c3:c2:da:dc:ed:bb:72:04:10:7a:4b:da:
83:d6:43:41:f1:59:6c:a6:fb:95:ab:fc:e0:95:b7:7a:90:d8:
af:12:7e:c7:c5:8f:b5:87:6c:6b:ee:a0:0e:ae:f7:f3:53:c2:
24:f6:de:72:b4:22:b3:41:d7:7e:b9:ad:10:2d:99:57:43:e6:
00:26:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:26 2026 by rpki-client