Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/9ed_wxS0x_wpYBRFeH-l8YdRWNM.roa
File: 9ed_wxS0x_wpYBRFeH-l8YdRWNM.roa (raw, json)
Hash identifier: jNePWbSP/ME9Zww65sdc9Y1eDpMErr9UpTGbyN1tHuM=
Subject key identifier: F5:E7:7F:C3:14:B4:C7:FC:29:60:14:45:78:7F:A5:F1:87:51:58:D3
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019FA26104103B680BF3BB66A022961E30FD
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/9ed_wxS0x_wpYBRFeH-l8YdRWNM.roa
Signing time: Mon 27 Jul 2026 07:01:34 +0000
ROA not before: Mon 27 Jul 2026 07:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 77.93.88.0/24 maxlen: 24
85.149.198.0/24 maxlen: 24
85.149.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:61:04:10:3b:68:0b:f3:bb:66:a0:22:96:1e:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 27 07:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5e77fc314b4c7fc29601445787fa5f1875158d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:f9:ad:4d:9a:da:44:a8:bf:b8:64:5a:a2:
32:2c:ba:b4:fd:76:61:7a:c8:eb:64:cf:ef:78:0e:
8d:8e:d8:6f:02:b2:8c:e3:78:ca:1a:3e:12:c3:05:
0b:18:75:0e:fe:08:1e:55:a6:bd:89:0d:6c:62:99:
24:ca:c5:8f:c3:a1:8f:69:b3:27:dc:9c:96:5e:4b:
11:a9:ff:65:df:37:33:82:8d:48:ee:67:12:56:90:
6f:3d:36:74:f6:47:ed:1b:d9:f1:9f:06:21:6c:a3:
7d:df:e8:1e:f9:9a:68:ce:0e:01:d1:68:51:da:b2:
b9:59:23:ee:25:2c:7e:27:c9:63:3d:c6:ac:92:f2:
86:7a:d9:6f:84:00:9f:3e:d4:21:6a:ce:32:e1:2d:
a0:5f:24:21:db:11:58:5b:4b:63:6f:f7:3d:ba:87:
2b:5c:00:d9:29:60:84:cd:f9:c4:72:af:21:26:93:
f2:82:38:f7:eb:7c:73:69:6d:e9:03:66:2d:33:39:
8e:2d:d7:cc:18:58:b0:a8:87:22:0f:ea:3f:76:43:
7f:f2:f4:7e:0c:a3:35:70:23:ba:fa:1d:ad:86:19:
72:8f:6b:a1:06:c2:68:97:69:b3:8b:b1:2f:9e:d5:
65:bf:96:75:86:50:99:29:e6:d3:1d:21:95:9e:8f:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:7F:C3:14:B4:C7:FC:29:60:14:45:78:7F:A5:F1:87:51:58:D3
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/9ed_wxS0x_wpYBRFeH-l8YdRWNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.88.0/24
85.149.198.0/24
85.149.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:52:61:5b:3e:35:8b:a9:30:4d:9a:b2:21:67:2f:cd:c9:09:
83:b2:63:be:fa:2f:42:6a:4f:29:e6:c6:07:3d:2c:df:9f:59:
4b:7a:ee:53:35:73:c2:b4:6a:bd:4c:a1:39:79:0b:91:82:16:
86:23:70:44:ad:2b:4c:f5:b5:c4:85:c9:34:b2:85:9d:24:15:
08:7b:05:00:1f:4f:92:09:db:b7:bb:92:15:53:65:00:0b:fa:
d7:ab:fa:0d:df:47:2c:91:59:b8:0e:e8:75:3f:d1:ce:5c:7b:
b9:f6:e0:b9:8e:c8:54:fb:c3:1c:c5:6d:f8:36:d1:b9:03:ab:
ed:53:ed:59:a3:bf:cb:e3:9d:50:36:74:50:1c:cf:25:e8:c6:
b8:c1:9d:fb:89:80:2f:db:c4:21:5e:5b:34:2a:4a:47:ea:6f:
f5:90:dd:5f:ee:4a:51:03:cf:ea:89:cb:df:0a:b6:81:aa:67:
1a:c5:aa:5c:47:e0:1d:e0:f5:5e:7d:ed:c9:57:c1:fb:41:00:
89:1d:59:0a:e1:20:da:f9:50:54:c9:65:5e:5d:1e:05:f7:14:
9d:4e:6c:40:b6:0f:3a:ce:ea:50:fa:6c:e2:75:6d:22:3b:b2:
37:72:24:15:2f:fd:71:0b:ba:87:d8:df:b0:7f:57:7b:0e:40:
a7:f6:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:01 2026 by rpki-client